AA20-258A: Chinese Ministry of State Security-Affiliated Cyber Threat Actor Activity

Original release date: September 14, 2020SummaryThe Cybersecurity and Infrastructure Security Agency (CISA) has consistently observed Chinese Ministry of State Security (MSS)-affiliated cyber threat actors using publicly available information sources and…

Comments Off on AA20-258A: Chinese Ministry of State Security-Affiliated Cyber Threat Actor Activity

CISA Insights: Email-Based Attacks on Elections-Related Entities

Original release date: September 10, 2020The Cybersecurity and Infrastructure Security Agency (CISA) has released CISA Insights: Actions to Counter Email-Based Attacks on Elections-Related Entities in light of increased sophisticated phishing…

Comments Off on CISA Insights: Email-Based Attacks on Elections-Related Entities

ACSC Releases Annual Cyber Threat Report for 2019–2020

Original release date: September 10, 2020The Australian Cyber Security Centre (ACSC) has released its annual report on key cyber threats and statistics from 2019–2020. The report highlights that phishing and…

Comments Off on ACSC Releases Annual Cyber Threat Report for 2019–2020

Vulnerability Summary for the Week of August 31, 2020

Original release date: September 7, 2020  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info arr-flatten-unflatten_project -- arr-flatten-unflatten All versions of package arr-flatten-unflatten are vulnerable…

Comments Off on Vulnerability Summary for the Week of August 31, 2020

DoS and DDoS Attacks against Multiple Sectors

Original release date: September 4, 2020The Cybersecurity and Infrastructure Security Agency (CISA) is aware of open-source reporting of targeted denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks against finance and business…

Comments Off on DoS and DDoS Attacks against Multiple Sectors

September is National Preparedness Month

Original release date: September 3, 2020September is National Preparedness Month, which promotes family and community disaster planning. This year’s theme is “Disasters Don’t Wait. Make Your Plan Today.” The Cybersecurity…

Comments Off on September is National Preparedness Month

AA20-245A: Technical Approaches to Uncovering and Remediating Malicious Activity

Original release date: September 1, 2020SummaryThis joint advisory is the result of a collaborative research effort by the cybersecurity authorities of five nations: Australia,[1] Canada,[2] New Zealand,[3][4] the United Kingdom,[5]…

Comments Off on AA20-245A: Technical Approaches to Uncovering and Remediating Malicious Activity