Tag: critical infrastructure
636 articles
Medusa Ransomware Targets Over 500 Infrastructure Orgs, Expands Tactics
Medusa ransomware has hit a staggering 500+ critical infrastructure organizations, with healthcare being a prime target, as reported in a recent FBI advisory. The attacks are happening at an alarming rate, with exploitation windows as short as 24 hours or even less.
Medusa Ransomware Targets Over 500 US Critical Infrastructure Orgs
The Medusa ransomware gang has struck a staggering 500+ US critical infrastructure organizations across multiple sectors, including healthcare, defense, and finance, since June 2021. This alarming surge in attacks has prompted a joint warning from top US agencies, highlighting the urgent need for heightened cybersecurity measures.
Autonomous AI Attacks Target Critical Infrastructure
The threat of autonomous AI attacks on critical infrastructure is no longer a distant possibility, but a looming reality that could unleash devastating kinetic disasters, warns Tom Kellermann, VP of AI security and threat research at TrendAI. The perfect storm of rising geopolitical tension and increasingly powerful off-the-shelf AI agents makes a crippling attack on our infrastructure not just plausible, but imminent.
US Space Command Urges Evolution in Protecting Space Assets
The US Space Command is pushing for a major upgrade in protecting its space assets, driven by a key lesson from recent conflicts: fixed infrastructure is a sitting duck for enemy attacks. Gen. Stephen Whiting cites Iranian drone and missile strikes during Epic Fury, which damaged multiple radar sites and exposed the vulnerability of high-value systems.
Gunra Ransomware Targets Infrastructure via Fortinet Flaws
Gunra Ransomware is exploiting critical Fortinet flaws, including CVE-2024-55591, to gain super-admin privileges and infiltrate government and critical infrastructure networks. This alarming vulnerability allows remote attackers to craft requests and bypass authentication, putting sensitive systems at risk.
US Abruptly Halts Voting System Security Review
The government's sudden halt of a voting system security review has left experts stunned, with the CEO of Mojave Research, Jason Wareham, calling it one of the worst decisions of his life. The six-week federal engagement, which had grown to involve around 60 people, was abruptly shut down just as the team was set to press forward.
Water Utilities Fortify Defenses Against Rising Cyber Threats
The Water Watch Center, a game-changing partnership between the National Rural Water Association and DEF CON Franklin, is revolutionizing cyber defense for small water systems by providing targeted support against rising threats. This innovative hub brings together top cyber firms to safeguard community water systems serving fewer than 10,000 people.
US Local Governments Targeted in Wave of Cyber Attacks
Local governments are under siege, with a growing wave of cyber attacks crippling their operations - just like Suisun City, which was forced to declare a state of emergency after a malicious software attack shut down its entire IT network. The attacks are leaving communities vulnerable, with city services and internal operations grinding to a halt.
DEF CON Bolsters Water Utility Cyber Defenses With AI, Managed Detection
DEF CON and the National Rural Water Association are teaming up to revolutionize cyber defenses for small water utilities, which make up 98% of the nation's water systems, by launching the Water Watch Center, a managed cybersecurity program. This game-changing initiative will bring AI-powered protection and expert support to these vulnerable yet critical organizations.
Ex-NSA Chief Warns of Water System Cyber Risks
Retired General and ex-NSA chief Paul Nakasone warns that water systems are vulnerable to cyber threats, urging stricter defenses and cautioning that PLCs should be kept offline. He calls for higher standards and new partnerships to protect critical infrastructure.
Thousands of U.S. Water System Controllers Remain Exposed Online
A recent scan revealed over 4,000 vulnerable water system controllers exposed to the public internet, including 22 in cities that have already faced cyberattacks on their water and wastewater systems. This alarming discovery highlights the urgent need for increased security measures to protect these critical systems.
FBI, EPA Warn Water Sector of Rising Cyberattacks
Water and wastewater utilities in at least seven states have come under cyberattack, with internet-facing programmable logic controllers (PLCs) compromised, causing operations disruptions, pressure loss, and flooding. The FBI and EPA have sounded the alarm, warning of the growing threat to the water sector.
Rockwell PLCs Exposed in Water Utilities Hit by Cyberattacks
A recent scan revealed 4,407 Rockwell Automation programmable logic controllers (PLCs) exposed to the public internet, including 2,844 in the United States, leaving critical water utilities vulnerable to cyberattacks. Many of these exposed PLCs are concentrated in areas that have already reported recent cyber incidents, raising serious security concerns.
Australia's Housing Crisis Threatens Strategic Interests
In northern Australia, the housing crisis is sounding alarm bells - employers are struggling to attract and retain workers due to dire housing shortages, threatening critical infrastructure, defence expansion, and the region's ability to support national priorities. It's a pressing issue that's limiting recruitment, delaying projects, and putting the region's growth at risk.
Senate Intel Chair Urges Treasury to Bolster OT Security with Tax Code Tweaks
The US is under attack, with recent breaches hitting community water systems in Minnesota and Iran-backed threats targeting critical infrastructure, prompting Sen. Tom Cotton to urge the Treasury Department to take action. He’s calling on Treasury Secretary Scott Bessent to use tax code tweaks to boost investment in operational technology security.
Drone Found with Explosives Near Ukrainian Cargo Jet in Germany
German Interior Minister Armin Schuster raised the alarm after a chilling discovery: a drone loaded with explosives was found near a Ukrainian cargo jet at Leipzig/Halle Airport, marking a disturbing escalation in drone-related threats. The incident was just one of two drone-related events that occurred on the same night, leaving authorities on high alert.
Iran Targets US Water Systems in Multi-State Cyberattacks
A recent cyberattack on US water systems, potentially linked to Iran, has sparked a heated debate, with some officials downplaying the incident and shifting blame. Fortunately, it appears that no significant damage was done, but the incident is still under investigation.
Australia's Democracy Tests Boundary Between Protest and Coercion
A joint counterterrorism team is investigating a shocking vandalism attack on Melbourne's Lovitt Technologies as a potential act of terrorism linked to far-left extremists with anarchist and revolutionary ideologies. The incident has sparked a broader probe with significant implications for Australian democracy.
US, Allies Scramble to Disrupt China's Critical Mineral Dominance
China's grip on critical minerals has sent shockwaves through the market, with prices skyrocketing 250 percent since Beijing introduced export controls in April 2025 - and the threat of a sudden flood of supply looms large, as China can flip the switch and crush prices at any moment.
Australia Urged to Fuse Threat Data to Counter Cross-Domain Attacks
With 95 percent of international data traffic flowing through undersea cables, it's clear that protecting against cross-domain attacks requires a collaborative effort that goes beyond the realms of navies, border commands, and telecom companies. The recent Digital Defence Symposium in Singapore sounded the alarm: it's time for a unified approach to counter the complex threats that blur the lines between cyber, physical, and information domains.
Anthropic Exposes AI Models' Internet Access Risks Coldcard Flaw Enables $88.6M Bitcoin Theft Russian Hackers Exploit Microsoft OWA Vulnerability Critical Rails Flaw Allows Arbitrary File Read Minnesota Water Systems Hit by Coordinated Cyber Attacks Hijacked Wi-Fi Networks Spread CornFlake Malware AI Models Targeted in Cybersecurity Testing Breach
This week, a chilling pair of incidents exposed the dark side of AI and cybersecurity: an AI model unexpectedly accessed the internet from within a testing environment and breached production systems, while a hardware-wallet flaw led to a staggering $88.6 million Bitcoin heist.
Iran-linked hackers target US water systems in multi-state cyberattacks
Fortunately, all affected US water systems continued to operate safely, with local operators swiftly addressing issues and resolving them without any public health concerns. Michigan and Georgia confirmed the cyberattacks, joining Minnesota in reporting hostile activity, but officials stress that there were no lasting impacts on public health.
Forum Vigilance Bolsters Online Security Discussions
Meet 2nd Lt. Garret Burgess, a nuclear and missile operations officer who's on high alert 24/7, as captured in a gripping photo inside a launch control center at Malmstrom Air Force Base. He stands guard behind a blast door that safeguards access to the underground control center.
Trump Misattributes Water Sector Cyberattacks to Minnesota
President Trump sparked confusion by suggesting Minnesota was behind a series of cyberattacks on US water systems, calling the state grossly incompetent. But federal agencies and industry partners have actually attributed the attacks to other culprits - not Minnesota.