You're listening to the CyberWire Network, powered by N2K.

This is a CISA Cybersecurity Alert.

ID number Alpha Alpha 22 TAC 137 Alpha.

Original release date, March 17, 2022.

This joint Cybersecurity Advisory was co-authored by the Cybersecurity Authorities

of the U.S. Canada, New Zealand, the Netherlands, and the UK.

Cyber actors routinely exploit poor security configurations, weak controls, and other poor cyber hygiene practices to gain initial access as a part of other tactics to compromise a victim's system.

This joint cybersecurity advisory identifies commonly exploited controls and practices and

includes best practices to mitigate these risks.

The alert documentation defines 10 major exploitation vectors regularly used by malicious cyber actors.

In order to mitigate these vectors, CISA outlines and provides resources for 18 security controls under 7 control categories.

CISA recommends organizations re-evaluate their security posture and implement additional controls under the categories of

Control access, implement credential hardening,

establish centralized log management,

employ antivirus programs,

employee detection tools and search for vulnerabilities, maintain rigorous

configuration management programs, and initiate a software and patch management

program.

Implementing the 18 security best practices under these critical control categories can help

organizations strengthen their network defenses against commonly exploited and weak security

controls.

The alert documentation and resources linked in the show notes provide

...