This Week's Reading 3/13/2022

 China-backed APT41 compromised ‘at least’ six US state governments

https://techcrunch.com/2022/03/08/apt41-state-governments/

GM is working with PG&E to turn electric vehicles into a virtual power grid in California

https://www.theverge.com/2022/3/8/22965919/gm-pge-ev-charging-grid-home-california

Google has blocked a phishing campaign conducted by China-linked group APT31 aimed at Gmail users associated with the U.S. government.

https://securityaffairs.co/wordpress/128861/apt/google-blocked-apt31-attacks.html

FBI warns: This ransomware group has gone after critical infrastructure firms again and again

https://www.zdnet.com/article/fbi-warns-this-ransomware-group-has-gone-after-critical-infrastructure-firms-again-and-again/#ftag=RSSbaffb68

ICS vulnerability disclosures surge 110% over the last four years

https://www.helpnetsecurity.com/2022/03/08/ics-vulnerability-disclosures-grew/

CISA Informs Organizations of Flaws in Unsupported Industrial Telecontrol Devices

https://www.securityweek.com/cisa-informs-organizations-flaws-unsupported-industrial-telecontrol-devices

"The ipDIO product has reached end of life (EOL) and no longer receives updates. The vendor has advised customers to upgrade to its ip4Cloud device, which is the successor of ipDIO."  - of course they have

 US critical infrastructure hit by ransomware

https://www.itsecurityguru.org/2022/03/09/us-critical-infrastructure-hit-by-ransomware/?utm_source=rss&utm_medium=rss&utm_campaign=us-critical-infrastructure-hit-by-ransomware

Detecting the Unknown Unknowns in Cybersecurity

https://www.eweek.com/security/detecting-cyber-security-threats/

Responding to heightened cyberattack risk: Focus on the basics

https://www.csoonline.com/article/3652494/responding-to-heightened-cyberattack-risk-focus-on-the-basics.html#tk.rss_all

16 Vulnerabilities Found in Firmware of HP Enterprise Devices

https://www.securityweek.com/16-vulnerabilities-found-firmware-hp-enterprise-devices

Introducing the new ‘Defending Against Critical Threats’ report

https://blogs.cisco.com/security/introducing-the-new-defending-against-critical-threats-report

Why You Should Be Using CISA's Catalog of Exploited Vulns

https://www.darkreading.com/vulnerabilities-threats/why-you-should-be-using-cisa-s-catalog-of-exploited-vulns

Nuclear War Survival Guide from 1987

https://archive.org/details/NuclearWarSurvivalSkills_201405/page/n131/mode/2up