Security
New metrics for Operational Technology exposure include whether the "consequences of the vulnerability meet definition of IEC 61508 consequence categories of "marginal," "critical," or "catastrophic."
Back in 2021 Microsoft boasted of shielding a customer from a 2.4 Tbps DDoS attack originating from 70,000 sources. It has not shared such detail on this successful incident that it its services...
Hackers "often breach the Department’s defensive perimeter and roam freely within our information systems"
Attackers demonstrated such sophisticated persistence capabilities that Barracuda and Mandiant have urged users to dump affected appliances irrespective of patch level.
"It is clear that the internet is so, so brittle" and possibly held together with duct tape
The threat group has also used a wide range of attacker scripts to get vpxuser credentials, enumerate ESXi hosts and their guest VMs, and manipulate connected ESXi host firewall rules in order to steal data.
Government promises a new "National Biosurveillance Network" that would join up "syndromic, epidemiological and promising environmental surveillance capabilities" in a new "Biothreats Radar" but promised funding is far from huge...
"It is a pre-auth RCE [and] has been proven to be exploitable in a consistent manner; we found it during a Red Team engagement and have exploited it remotely..."
The Stack is seeing exposed instances associated with scores of high profile blue chips