Threat Awareness – Log4Shell Persists as Significant Threat and a Common Initial Access Vector

Domestic Violent Extremists Celebrate Past Attacks on Electric Infrastructure and Encourage Additional Attacks

Strategies for Designing a Workplace to Prevent and Mitigate Hostile Events

Vulnerability Awareness – Please Review – Previously Patched Microsoft Windows Vulnerability Discovered to have EternalBlue-like Capabilities

Threat Awareness – Threat Actors Currently Bypassing Previous ProxyNotShell Workaround for Microsoft Exchange

Recap of First Annual H20SecCon – Session 1: Physical Security Threats to Water and Wastewater Systems

ICS/OT/SCADA Impacting Vulnerability – Microsoft to Force DCOM Patch in March, Could Shutdown ICS/OT/SCADA Devices

CISA Publishes Guide on Resilient Power Best Practices for Critical Facilities and Sites

Cyber Resilience – Maintain Holiday Cheer by Reviewing a Few Reminders

(Update December 15, 2022) Six Added to CISA’s Known Exploited Vulnerabilities Catalog Includes Four Zero Days

New Zealand Releases First Ever Guide to Help Identify Mobilization Indicators of Violent Extremists

Third-Party Risk Management – Evaluating Cyber Risk Posed by IT and Managed Service Providers