CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – May 9, 2023

Ransomware Resilience – Federal Government: Low Victim Reporting Hampers Ransomware Response Efforts

Cyber Resilience – Microsoft Universally Enables Number Matching for Microsoft Authenticator

Security Awareness – Microsoft Phishing Attack Redirects Victims to a Catering Voice Recording

Joint Cybersecurity Advisory – Hunting Russian Intelligence “Snake” Malware

Ransomware Preparedness – Two Years After Colonial Pipeline Attack, U.S. Critical Infrastructure Still Not Prepared for Ransomware

Threat Awareness – Malvertising Campaign Utilizing New Loader to Drop Aurora

Ransomware Resilience – Report: Organizations Using Backups to Recover from Ransomware See Lower Recovery Costs

CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – May 11, 2023

Vulnerability Awareness – New Microsoft Outlook Zero-Day Exploit Does Not Require User Action (Updated May 11, 2023)

CISA Releases White Paper Highlighting R&D Needs and Strategic Actions for Enhancing the Resilience of Critical Infrastructure

Network Defense – APT Actors Reconnoiter U.S. Critical Infrastructure Organizations