The federal cyber agency’s warning comes amid a wave of suspected Iran-backed cyberattacks targeting critical water systems across the United States.
Hackers are targeting internet-connected Siemens controllers used in water facilities around the United States.
Russian state-backed hackers are exploiting neglected routers to access critical infrastructure networks, prompting agencies worldwide to urge organizations to replace outdated equipment and tighten basic network security.
CISA said it “missed” an opportunity to get ahead of the security incident by not creating a response plan ahead of time.
Check Point said hackers broke into dozens of organizations by exploiting a VPN bug in several of its products used across the government.
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets on a public GitHub account. The inquiry comes as CISA is still struggling to contain the breach and invalidate the leaked credentials.
The federal cybersecurity agency left plaintext passwords in a spreadsheet uploaded to a public GitHub repository, per a report by independent journalist Brian Krebs.
Sean Plankey has requested to withdraw his name to run the U.S. cybersecurity agency after a tumultuous year of chaotic temporary leadership.
The budget proposal would force CISA to operate with a significantly lower budget than previous years, citing the government’s claims that the election misinformation programs were used to “target the President.”
The U.S. cybersecurity agency urged companies to prevent access to systems used for remotely managing their fleets of employee devices after hackers broke into a major U.S. medical tech giant and remotely wiped thousands of phones and computers.