Szolgáltatóknak

StateScoop reports that new legislation that would establish the Water Risk and Resilience Organization to strengthen cybersecurity in water and wastewater systems across the U.S. was unveiled by Reps. John Duarte, R-Calif., and Rick Crawford, R-Ariz.

Bipartisan approval of legislation that would reauthorize Section 702 of the Foreign Intelligence Surveillance Act has been achieved by the House a week before the surveillance tool's expiration on Apr. 19, reports The Associated Press.

Major Canadian retail chain Giant Tiger had a database containing information from more than 2.8 million customers exposed by a threat actor who claimed responsibility for targeting the discount store chain last month, BleepingComputer reports.

TechCrunch reports that U.S. conservative think tank The Heritage Foundation was working on addressing a cyberattack against its systems last week, but investigation into whether any of its data was compromised is still underway.

Nexperia had some of its servers confirmed to be compromised in a cyberattack last month following a report from Dutch broadcast firm RTL detailing attackers' claims of having exfiltrated hundreds of gigabytes of data from the Chinese-owned Dutch semiconductor manufacturer, according to Cybernews.

Iranian state-backed threat operation MuddyWater, also known as TA450, Mango Sandstorm, and Boggy Sandstorm, has leveraged the novel DarkBeatC2 command-and-control infrastructure tool as part of its latest attack campaign, The Hacker News reports.

Cisco Telemetry Broker 2.1 is now GA and provides many great capabilities for customers including performance enhancements and the ability to generate Netflow.

Today, the National Security Agency’s Artificial Intelligence Security Center (NSA AISC) published the joint Cybersecurity Information Sheet Deploying AI Systems Securely in collaboration with CISA, the Federal Bureau of Investigation (FBI), the Australian Signals Directorate’s Australian Cyber Security Centre (ASD ACSC), the Canadian Centre for Cyber Security (CCCS), the New Zealand National Cyber Security Centre (NCSC-NZ), and the United Kingdom’s National Cyber Security Centre (NCSC-UK). The guidance provides best practices for deploying and operating externally developed artificial intelligence (AI) systems and aims to: Improve the confidentiality, integrity, and availability of AI systems. Ensure there are appropriate mitigations for known vulnerabilities in AI systems. Provide methodologies and controls to protect, detect, and respond to malicious activity against AI systems and related data and services. CISA encourages organizations deploying and operating externally developed AI systems to review and apply this guidance as applicable. CISA also encourages organizations to review previously published joint guidance on securing AI systems: Guidelines for secure AI system development and Engaging with Artificial Intelligence. For more CISA information and guidance on securing AI systems, see cisa.gov/ai.