Cybersecurity Eric News Today

Organizations in the U.S. water and wastewater sector have been given new cybersecurity best practices guidance by the Cybersecurity and Infrastructure Security Agency, the Environmental Protection Agency, and the FBI following an Office of the Inspector General report noting inadequate federal collaboration with the industry despite escalating cybersecurity threats, reports The Record, a news site by cybersecurity firm Recorded Future.

BleepingComputer reports that default software and app configurations, improper user/admin privilege separation, inadequate internal network monitoring, lacking network segmentation, and subpar patch management were noted by the National Security Agency and the Cybersecurity and Infrastructure Security Agency to be the most prevalent cybersecurity misconfigurations across large organizations in the U.S.

CISO and VP of Security Tim Brown to lead conversations with industry experts on how companies must work collaboratively to strengthen the security of the nation’s shared cyberinfrastructure ... | June 21, 2023

This week: Barracuda Networks recalls hacked email security appliances, the latest on MOVEit, and a Gigabyte motherboard firmware security vulnerability is exposed.

This week: Barracuda Networks recalls hacked email security appliances, the latest on MOVEit, and a Gigabyte motherboard firmware security vulnerability is exposed.

Increasing cybersecurity threats against critical infrastructure have prompted several cybersecurity and operational technology vendors including Forescout, Schneider Electric, 1898 & Co., Claroty, Dragos, NetRise, Nozomi Networks, Tenable, Waterfall Security, and Network Perception to unveil the new Emerging THreat Open Sharing, or ETHOS, platform aimed at providing early alerts on attacks targeted at various industrial sectors, CyberScoop reports.

More focused public-private partnerships in cybersecurity will be prioritized by the Cybersecurity and Infrastructure Security Agency's Joint Cyber Defense Collaborative this year in order to develop and implement cyber defense strategies aimed at addressing systemic risk, especially in the energy and water sectors, according to The Record, a news site by cybersecurity firm Recorded Future.