More than 80 percent of the most severe tech-related vulnerabilities to critical infrastructure originate from the same 20 software components, a new report out this week from Fortress Information Security finds.

The Department of Homeland Security (DHS) released guidance on Thursday aimed at helping Federal agencies, critical infrastructure owners and operators, and other government and private sector stakeholders with their critical infrastructure security and resilience efforts.

Pro-Russia hacktivists are targeting and compromising small-scale operational technology (OT) systems in North American and European critical infrastructure sectors – including water and wastewater systems (WWS), dams, energy, and food and agriculture – according to a joint fact sheet released today by leading Federal cyber agencies.

President Biden today signed a new national security memorandum (NSM) that aims to better protect U.S. critical infrastructure sectors by enlisting U.S. intelligence agencies to ramp up their sharing of threat data across multiple levels of government and with private-sector critical infrastructure providers.

The Department of Homeland Security (DHS) has announced the establishment of the Artificial Intelligence Safety and Security Board, which will consider ways to promote the safe and secure use of AI technology in U.S. critical infrastructure.

The Department of Energy’s (DoE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) has announced $15 million in funding to establish six university-based electric power cybersecurity centers that will foster collaboration across the energy sector to address gaps in energy security research and provide cybersecurity education programs. 

Following the discovery of a Chinese-based hacking group compromising U.S. critical infrastructure, the White House – in collaboration with the Environmental Protection Agency (EPA) – announced plans this week to form a Water Sector Cybersecurity Task Force.

The Cybersecurity and Infrastructure Security Agency (CISA), Environmental Protection Agency (EPA), and FBI published a joint fact sheet on Feb. 21 outlining the top cybersecurity actions water and wastewater systems sector (WWS) entities can take to improve their cyber resiliency.

Feds Warn of Chinese Hack Into US Critical Infrastructure
Federal agencies called on all organizations today to urgently implement a series of cybersecurity actions after discovering that a Chinese-based hacking group has compromised the IT environments of multiple U.S. critical infrastructure organizations – with the end goal of a future cyberattack.

In joint guidance released on Jan. 17, the Cybersecurity and Infrastructure Security Agency (CISA) – alongside the FBI – is warning critical infrastructure and state, local, tribal, and territorial partners of cybersecurity threats posed by Chinese-manufactured unmanned aircraft systems (UAS), more commonly known as drones.