Cyber Resilience – CISA Releases Supply Chain Handbook for Small and Medium-sized Businesses

Cyber Resilience – Tips for Improving your Incident Response Plan

Informational: Data Breach Notification Digest (January 5, 2023)

Ransomware Awareness – New Extortion Tactic Uses Spoofed Website of Victim to Publish Stolen Data

Threat Awareness – Log4Shell Persists as Significant Threat and a Common Initial Access Vector

Vulnerability Awareness – Please Review – Previously Patched Microsoft Windows Vulnerability Discovered to have EternalBlue-like Capabilities

Threat Awareness – Threat Actors Currently Bypassing Previous ProxyNotShell Workaround for Microsoft Exchange

Cyber Resilience – Maintain Holiday Cheer by Reviewing a Few Reminders

(Update December 15, 2022) Six Added to CISA’s Known Exploited Vulnerabilities Catalog Includes Four Zero Days

Third-Party Risk Management – Evaluating Cyber Risk Posed by IT and Managed Service Providers

Insider Threat – Effective Strategies for Countering Insider Threats

Cyber Resilience – Considerations for Cyber Insurance Coverage in 2023