CISA

CISA Issues Revised Cybersecurity Performance Goals

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) released an updated version of its Cybersecurity Performance Goals (CPGs), a set of voluntary practices that critical infrastructure...

CISA Launches Pilot Program to Help Critical Infrastructure Manage Cybersecurity Vulnerabilities

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) launched its Ransomware Vulnerability Warning Pilot (RVWP) with the goal of helping critical infrastructure entities remain aware of and...

CISA, FBI Shed Light On Royal Ransomware Cyberattack Tactics

by Jill McKeon

Royal ransomware is continuing to be used in aggressive cyberattacks against critical infrastructure. As previously reported, the group poses a significant threat to the healthcare sector. To help...

HHS, FBI, CISA Warn of North Korean State-Sponsored Cyber Threat Actors Targeting Healthcare

by Jill McKeon

North Korean state-sponsored cyber threat actors have been targeting the healthcare sector with ransomware, the National Security Agency (NSA), HHS, the Federal Bureau of Investigation (FBI), the U.S....

CISA: Federal Employees Targeted in Malicious Cyber Threat Campaign Using RMM Software

by Jill McKeon

UPDATE 1/27/2023 - This article has been updated to include a commment from ConnectWise. The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Multi-State...

CISA Reflects on Past Year, Upcoming Critical Infrastructure Security Priorities

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) released its 2022 Year in Review, in which the agency reflected on what it accomplished in 2022 and what it hopes to achieve in 2023. The...

CISA, FBI Alert Healthcare Sector of Cuba Ransomware Tactics

by Sarai Rodriguez

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) released a joint cybersecurity advisory to warn critical infrastructure organizations of...

HHS, FBI, CISA Warn Healthcare of Ongoing Hive Ransomware Threats

by Jill McKeon

HHS, the Federal Bureau of Investigation (FBI), and the Cybersecurity and Infrastructure Security Agency (CISA) issued a joint cybersecurity advisory about Hive ransomware actors. The ransomware actors...

CISA: 3 Steps to Improve Cybersecurity Vulnerability Management

by Jill McKeon

New cybersecurity vulnerabilities are a constant challenge for organizations of all sizes, Eric Goldstein, executive assistant director for cybersecurity at the Cybersecurity and Infrastructure...

CISA, FBI, MS-ISAC Provide Guidelines For DDoS Incident Response

by Sarai Rodriguez

The Cybersecurity and Infrastructure Security Agency (CISA), alongside the Federal Bureau of Investigation (FBI) and the Multi-State Information Sharing and Analysis Center (MS-ISAC), released a joint...

White House Declares November Critical Infrastructure Security and Resilience Month

by Jill McKeon

President Biden issued a proclamation declaring November as Critical Infrastructure Security and Resilience Month. The President highlighted ways in which the Administration has taken action to protect...

Daixin Team Ransomware Group Actively Targeting Healthcare Sector

by Jill McKeon

The Daixin Team ransomware and data extortion group is an active threat to the healthcare sector, The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and...

Easterly Reaffirms CISA’s Focus On Healthcare Cybersecurity at mWISE

by Jill McKeon

Water, K-12 education, and healthcare cybersecurity are upcoming focus areas for the Cybersecurity and Infrastructure Security Agency (CISA), Director Jen Easterly said at Mandiant’s mWISE...

CISA Encourages Orgs To Go Further Than MFA, Adopt FIDO Authentication

by Jill McKeon

Enabling multi-factor authentication (MFA) is “the single most important thing Americans can do to stay safe online,” Cybersecurity and Infrastructure Security Agency (CISA) Director Jen...

AHA Expresses Support for Healthcare Cybersecurity Act

by Jill McKeon

The American Hospital Association (AHA) expressed its support for the Healthcare Cybersecurity Act (S.3904/H.R.8806) in a letter by AHA Executive Vice President Stacey Hughes to US Representatives...

CISA, NSA Provide OT, ICS Defense Strategies to Critical Infrastructure

by Jill McKeon

Standard approaches to operational technology (OT) and industrial control system (ICS) security “do not adequately address current threats,” the Cybersecurity and Infrastructure Security...

Medical Device Security Vulnerabilities Discovered in Baxter Infusion Pumps

by Jill McKeon

Four medical device security vulnerabilities are impacting certain Sigma and Baxter Spectrum infusion pumps, a Cybersecurity and Infrastructure Security Agency (CISA) explained in an advisory....

5 Security Vulnerabilities Found in Contec Vital Signs Patient Monitors

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) released a medical device advisory outlining five vulnerabilities found in Contec Health’s CMS8000 CONTEC ICU CCU Vital Signs Patient...

HC3 Warns Healthcare Sector of Karakurt Ransomware Group

by Jill McKeon

The HHS Health Sector Cybersecurity Coordination Center (HC3) alerted the healthcare sector to the rising prominence of Karakurt ransomware group. The group has claimed responsibility for at least four...

CISA, FBI Warn Healthcare Sector of Zeppelin Ransomware

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) released a joint cybersecurity advisory to alert critical infrastructure to the dangers of...