The Cybersecurity and Infrastructure Security Agency today issued a rare “Shields Up” message recommending all U.S. organizations take immediate steps to enhance their ability to detect and protect against a cyber intrusion. The action follows a State Department advisory Friday urging Americans to immediately leave Ukraine due to increased threats of Russian military action. 

“While there are not currently any specific credible threats to the U.S. homeland, we are mindful of the potential for the Russian government to consider escalating its destabilizing actions in ways that may impact others outside of Ukraine,” which could result in impacts to public safety, the advisory notes. 

John Riggi, AHA national advisor for cybersecurity and risk, said, “As we cautioned in our Feb.1 special cyber advisory and prior, tensions are continuing to increase along the Russian-Ukrainian border. Based upon the current government warnings, we strongly urge all organizations to identify and recall any U.S. citizen staff assigned in Ukraine. We also recommend that all organizations assess any direct and third-party service providers, network connections, email and data exchanges from Russia and Ukraine, and consider blocking such connections. Geo-fencing all network traffic to/from Ukraine and Russia, although limited in effectiveness, may help reduce potential cyber risk.”
 

Headline
The Department of Justice Oct. 13 announced a series of actions disrupting a scheme by the North Korean government that involved placing remote IT workers in U…
Headline
A joint advisory issued Oct. 20 by U.S. and international agencies warns of recent activity by the SafePay Ransomware group. The group has been active since…
Headline
Two critical vulnerabilities have been discovered in Hypertext Preprocessor, or PHP, a widely-used open-source scripted language for web development, its…
Headline
John Riggi, AHA national advisor for cybersecurity and risk, and Brett Leatherman, assistant director of the FBI Cyber Division, break down Operation Riptide,…
Headline
The National Security Agency has issued guidance on reducing the risk of simple network management protocol abuse. SNMP consists of a standardized framework…
Headline
Microsoft and Health-ISAC Oct. 15 announced that they disrupted three cybercriminal businesses that provided services to threat actors to attack more than 75…