/
initial_access_vector:default_credentials × latest_source_host:cisa.gov × limpar

Resultados

4 casos · pág. 1/1

cisa.gov · medium

CISA red team assessments of two critical infrastructure orgs: both fully compromised, but only one detected and contained the intrusion

CISA ran concurrent red team assessments at two organizations: Organization A (Government Services and Facilities) and Organization B (Water and Wastewater Systems). Both reached full domain compromise and accessed sensitive business systems (SBSs) and cloud resources. Organization A did not detect or contain the activity. Organization B …

government water and wastewater
cisa.gov · high

Pro-Russia hacktivists (CARR, Z-Pentest, NoName057(16), Sector16) compromise internet-exposed VNC HMIs in critical infrastructure OT

A joint advisory (AA25-343A) from FBI, CISA, NSA and some 18 other US, European, Five Eyes and Czech agencies warns that pro-Russia hacktivist groups are conducting opportunistic, low-sophistication attacks on critical infrastructure OT. The groups named are Cyber Army of Russia Reborn (CARR), Z-Pentest, NoName057(16) and Sector16. They e…

Cyber Army of Russia Reborn Z-Pentest water and wastewater food and agriculture
cisa.gov · exploit público high

FSB Center 16 exploits misconfigured SNMP and Cisco routers across critical sectors, joint advisory warns

A joint advisory (AA26-194a) from NSA, CISA, FBI, DC3 and 15 allied agencies warns that Russian FSB Center 16 cyber actors continue to opportunistically compromise poorly configured and vulnerable networking devices worldwide, primarily routers. The advisory builds on the FBI's August 2025 PSA on the decade-plus campaign and adds TTPs. Go…

CVE-2008-4128 FSB Center 16 government healthcare
cisa.gov · high

NSA, CISA, FBI, DOE and EPA warn of active AI-assisted reconnaissance against Internet-exposed Siemens S7 PLCs in U.S. critical infrastructure

The NSA, CISA, FBI, DOE and EPA issued a joint advisory (AA26-231A) warning of an active threat to Siemens S7 Series PLCs in U.S. critical infrastructure. Unattributed threat actors are conducting reconnaissance and capability development against U.S.-based installations using AI-generated exploitation scripts disguised as legitimate OT m…

critical manufacturing energy