Critical Infrastructure Security

New OT cyberattack emulation platform unveiled by CISA, MITRE

Mounting cybersecurity threats against operational technology networks have prompted the Cybersecurity and Infrastructure Security Agency and MITRE's Homeland Security Systems Engineering and Development Institute to collaborate in the development of a new OT cyberattack emulation platform, according to The Record, a news site by cybersecurity firm Recorded Future. Such a platform, which is available as an extension of the open-source MITRE Caldera tool, would enable improved sharing of knowledge regarding OT cybersecurity threats, said MITRE Cybersecurity Chief Engineer Nick Tsamis. Officials have also touted the benefits of the tool in providing a means for red-, purple-, and blue-teaming exercises, as well as security evaluations, for industrial control system security teams. "Protecting our nations critical infrastructure is essential. With Caldera for OT, we are pleased to partner with CISA to help defenders of operational technology exercise and improve the defenses of these critical systems," said MITRE Center for Securing the Homeland Vice President and Director Yosry Barsoum.

Related

Details on 2021 Chemonics hack remain scant

International development firm Chemonics, which mainly caters to the United States Agency of International Development, has not yet provided more extensive information regarding a cyberattack that compromised more than 6,000 individuals initially reported in July 2021, reports FedScoop.

Media, think tank, service spoofing conducted in APT42 cyberespionage operations

Iranian state-backed hacking operation APT42 — also known as Mint Sandstorm, Mint Phosphorous, Charming Kitten, and TA453 — has spoofed major news organizations, including The Washington Post, think tanks, such as the McCain Institute, and internet services, such as Gmail, YouTube, and Google Drive, as part of cyberespionage campaigns against journalists and human rights activists, reports CyberScoop.

Feds warn of new Kimsuky phishing attack techniques

The U.S. State Department, National Security Agency, and the FBI have issued a joint advisory warning organizations across the country, especially educational entities, non-profits, and think tanks, regarding the increasingly advanced phishing techniques leveraged by North Korean state-backed hacking group Kimsuky, also known as APT43, Emerald Sleet, and Velvet Chollima, Nextgov reports.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.