Risk Assessments/Management

CyberScoop reports that increasingly prevalent ransomware attacks targeted at the water industry have prompted greater insurance challenges for water companies.

The U.S. Department of Defense is expecting an interim rule for Cybersecurity Maturity Model Certification program requirements aimed at strengthening defense contractors' networks and controlled unclassified information security by March 2023 as it hopes to begin adopting the program by May of the same year, according to FedScoop.

BleepingComputer reports that malicious actors could exploit a critical vulnerability within the Jupiter Theme and JupiterX Core plugins for WordPress to facilitate privilege escalation.

Threatpost reports that most advanced persistent threat groups have been exploiting already known security flaws, in cyberattacks.

MITRE and the Cybersecurity Manufacturing Innovation Institute are co-chairing a new special interest group aimed at strengthening industrial control system and operational technology cybersecurity, reports SecurityWeek.

The Hacker News reports that the UpdateAgent macOS malware has been updated with new functionalities since evolving as a malware dropper.

Threat actors have been launching millions of attacks exploiting a remote code execution flaw in the Tatsu Builder plugin for WordPress, with up to half of the nearly 100,000 websites leveraging the plugin still at risk of attacks, according to BleepingComputer.

Costa Rican President Rodrigo Chaves has claimed that the Conti ransomware gang has been working with collaborators across Costa Rica in a recent ransomware attack against its government agencies, reports CyberScoop.