Supplemental Cyber Highlights – January 7, 2025

OT/ICS Vulnerability Awareness – Two Critical Vulnerabilities Found in Moxa Industrial Devices

Threat Awareness – (TLP:AMBER) Citrix NetScaler Password Spray Attack Observed in Energy and Water Sectors

Threat Awareness – Ongoing Breach of U.S. Telecoms by Chinese-Affiliated Salt Typhoon and Its Implications for the Water Sector

Vulnerability Awareness – Ivanti Releases Security Updates for Connect Secure, Policy Secure, and ZTA Gateways

Cyber Resilience – U.S. Cyber Trust Mark Launched for Consumer-Grade Internet-Connected Devices

Supplemental Cyber Highlights – January 9, 2025

CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – January 9, 2025

CISA Highlights Water Sector Cyber Threats – "Target Rich, Cyber Poor": Strengthening Our Nation’s Critical Infrastructure Sectors

CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – January 14, 2025

Secure by Demand – CISA and US and International Partners Publish Guidance on Priority Considerations in Product Selection for OT Owners and Operators

Cyber Resilience – CISA Releases the Cybersecurity Performance Goals Adoption Report