Cybersecurity and Infrastructure Security Agency

CISA analyzed backdoor malware variants obtained from an organization that had been compromised by threat actors exploiting the vulnerability.

As there are 16 Critical Infrastructure sectors with varying needs, CISA will be tackling this effort in several phases. The first four sectors CISA is working with include the Energy, Financial Services, IT, and Chemical Sectors.

JCE will provide industry an overview of the program, its developing requirements, and request feedback on the draft technical capabilities that will be posted prior to the industry day.

The webshell enabled the actors to perform discovery on the victim’s active directory (AD) and collect and exfiltrate AD data.

Today’s release builds upon threat and security considerations previously published by the ESF.

Organizations are encouraged to use the built-in security features from CSPs and to take advantage of free CISA- and partner-developed tools/applications to fill security gaps and complement existing security features.

Participants discussed their roles, shared best practices, and improved coordination mechanisms to help keep the public safe during football games.

Organizations that identify suspicious, anomalous activity should contact Microsoft for proceeding with mitigation actions due to the cloud-based infrastructure affected.