You're listening to the CyberWire Network, powered by N2K.

This is a SISA Cybersecurity Alert.

ID number Alpha Alpha 22 TAC 265 Alpha.

Original release date, September 22,

This alert builds on previous NSA and CISA guidance to stop malicious ICS activity and reduce

O.T. exposure. The alert documentation linked in the show notes describes

TTPs that malicious actors use to compromise O.T. and ICS assets. It also recommends mitigations that owners and

operators can use to defend their systems from each of the listed TTPs.

NSA and CISA encourage OT and ICS owners and operators to apply the recommendations in this

documentation. Traditional approaches to securing O.T. and ICS do not adequately

address current threats. Operators who understand cyber actors TTPs can use this knowledge to prioritize hardening and mitigation

actions.

Operational technology and industrial control systems assets that operate control and monitor

day-to-day critical infrastructure

and industrial processes continue to be an attractive target for malicious cyber actors.

These cyber actors target OT and ICS assets to achieve political gains, economic advantages, or destructive effects.

Because OT and ICS systems manage physical operational processes,

cyber actors' operations could result in physical consequences, including loss of life, property damage, and disruption of national critical functions.

Traditional ICS assets are difficult to secure due to their design for maximum

availability and safety coupled with their use of decades-old systems that often

lack any recent security updates. Newer ICS assets may be able to be

configured more securely but often have an increased

...