Security Bulletin

We're improving Cisco Secure Access by adding functionality that improves end user experience, simplifies security management for IT and tightens security.

[This is a Guest Diary by Rafael Larios, an ISC intern as part of the SANS.edu BACS program]

Cyberattacks and threats increasingly are honed in on ICS/OT networks, but security training for operators of these critical infrastructure environments is perilously scarce.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

YARA 4.4.0 was released, including the announced LNK module.

Wireshark release 4.2.3 brings 20 bug fixes.

TAG-70's sophisticated espionage campaign targeted a range of geopolitical targets, suggesting a highly capable and well-funded state-backed threat actor.

Also in this issue: Mideast investment, new FCC breach notification rules, and how Dark Reading readers use GenAI tools in their cybersecurity apparatus.

An exploratory research proposal is recommending regulation of AI chips and stronger governance measures to keep up with the rapid technical innovations in artificial intelligence.

A Canadian pipeline, U.S. government offices and Romanian hospitals are recent ransomware victims.