This Week's Reading 3/6/2022

New Chinese hacking tool found, spurring U.S. warning to allies

https://www.reuters.com/technology/new-chinese-hacking-tool-found-spurring-us-warning-allies-2022-02-28/

More: https://www.bleepingcomputer.com/news/security/chinese-cyberspies-target-govts-with-their-most-advanced-backdoor/

Backbone is everything, don’t be owned by your infrastructure: Lessons from Ukraine for America

https://www.cyberscoop.com/ukraine-russia-intelligence-preparation-battlefield-ipb/

Lack of visibility plaguing ICS environments

https://www.helpnetsecurity.com/2022/03/01/cyber-threats-ics-ot/

Very cool ICS-CERT vulnerability visualization and search dashboard.

https://datastudio.google.com/u/0/reporting/f0d99ae7-c75b-4fdd-9951-8ecada5aee5e/page/G1klC?mc_cid=2ba4cff293&mc_eid=UNIQID

Biannual ICS Risk & Vulnerability Report Enforces Need for Prompt Remediation

https://claroty.com/2022/03/02/blog-research-biannual-ics-risk-vulnerability-report-enforces-need-for-prompt-remediation/

Schneider Relay Flaws Can Allow Hackers to Disable Electrical Network Protections

https://www.securityweek.com/schneider-relay-flaws-can-allow-hackers-disable-electrical-network-protections

CISA Says Recent Cisco Router Vulnerabilities Exploited in Attacks

https://www.securityweek.com/cisa-says-recent-cisco-router-vulnerabilities-exploited-attacks

Ignoring US Cybersecurity Vulnerabilities No Longer an Option

https://securityboulevard.com/2022/03/ignoring-us-cybersecurity-vulnerabilities-no-longer-an-option/

 CISA’s BOD 22-01 Update: Revamping Vulnerability Management Capabilities for Federal Agencies

https://securityboulevard.com/2022/03/cisas-bod-22-01-update-revamping-vulnerability-management-capabilities-for-federal-agencies/

NSA urges businesses to adopt zero trust for network security

https://www.networkworld.com/article/3652611/nsa-urges-businesses-to-adopt-zero-trust-for-network-security.html#tk.rss_security

These old security vulnerabilities are creating new opportunities for hackers

https://www.zdnet.com/article/these-old-security-vulnerabilities-are-creating-new-opportunities-for-hackers/#ftag=RSSbaffb68

Proposal for industries to report big cyberattacks, ransomware payments wins Senate approval

https://www.cyberscoop.com/cyber-incident-reporting-passes-senate/

The Inventor of the Screw-In Coffin

https://kottke.org/22/03/the-inventor-of-the-screw-in-coffin