Security Affairs

FEBRUARY 8, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. Most of the impacted organizations are in the Communications, Energy, Transportation Systems, and Water and Wastewater Systems sectors.

Energy and Utilities 113

Energy and Utilities VPN Manufacturing Firewall 113

Security Affairs

APRIL 19, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.

Energy and Utilities 102

Energy and Utilities Telecommunications Technology VPN 102

eSecurity Planet

MARCH 16, 2023

Block TCP 445/SMB outbound from your network by using a perimeter firewall, a local firewall, and via your VPN settings. Performing this mitigation makes troubleshooting easier than other methods of disabling NTLM. Consider using it for high value accounts such as Domain Admins when possible.

Energy and Utilities 97

Energy and Utilities Authentication Firewall Engineering 97

Cisco Security

AUGUST 26, 2021

With the addition of Kenna Security into our program we now have over 250 technology partners and over 400 integrations for our mutual customers to utilize. Cisco Secure Firewall integrations. Cisco Secure Firewall has several new partner integrations. The Secure Firewall app for Splunk has been updated. Read more here.

Technology 113

Technology Firewall VPN Authentication 113

SecureWorld News

DECEMBER 1, 2023

The utility's general manager, Robert J. The attack has been linked to CyberAv3ngers, an Iranian-backed group known for its focus on targeting Israeli water and energy sites. If remote access is necessary, implement a Firewall/VPN in front of the PLC to control network access to the remote PLC.

Energy and Utilities 106

Energy and Utilities VPN Authentication Passwords 106

SecureList

NOVEMBER 23, 2021

Energy, transport and utilities — in an attempt to gain a foothold in the critical infrastructure of a “potential adversary” just in case, and to use it to develop other attacks (see examples above). Update firewalls and SSL VPN gateways in good time.

Spyware 102

Spyware Phishing Cybercrime Energy and Utilities 102