Key Takeaways Cyber Monday is the Monday after Thanksgiving and is a major U.S. shopping day.Cyber Monday was created in 2005 by Shop.org, a division of the National Retail Federation.It was intended ... Cybersecurity Advisory: Provides detailed information on cyber threats, including threat actor tactics, techniques, and procedures and indicators of compromise, along with recommended actions for detection, mitigation, and response.

Understanding the Context

See Table 2 to Table 4 for all referenced threat actor tactics and techniques in this advisory. The authoring agencies recommend organizations review historical TTPs for similar Iranian-affiliated cyber actor activity in IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities. CISA is aware of malicious cyber activity targeting endpoint management systems of U.S. organizations based on the cyberattack against U.S.-based medical technology firm Stryker Corporation, which affected their Microsoft environment.

Key Insights

1 To defend against similar malicious cyber activity, CISA urges organizations to harden endpoint management system configurations using the ...