infrastructure security

  1. CISA Red Team Breach Simulation: Unveiling Critical Infrastructure Vulnerabilities

    Imagine you're living in a fortress. You believe it’s well-guarded with gates, drawbridges, and moats. But what if a tireless infiltrator sneaks in, unveils weak points, and maps vulnerabilities? That’s exactly what happened recently when the Cybersecurity and Infrastructure Security Agency...
  2. AA21-042A: Compromise of U.S. Water Treatment Facility

    Original release date: February 11, 2021 Summary On February 5, 2021, unidentified cyber actors obtained unauthorized access to the supervisory control and data acquisition (SCADA) system at a U.S. drinking water treatment plant. The unidentified actors used the SCADA system’s software to...
  3. AA20-352A: Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations

    Original release date: December 17, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 8 framework. See the ATT&CK for Enterprise version 8 for all referenced threat actor tactics and techniques. The Cybersecurity and Infrastructure...