TLP:AMBER Weekly Flashpoint Intelligence Reports: May 11, 2023

Network Defense – APT Actors Reconnoiter U.S. Critical Infrastructure Organizations

CISA Releases White Paper Highlighting R&D Needs and Strategic Actions for Enhancing the Resilience of Critical Infrastructure

Vulnerability Awareness – New Microsoft Outlook Zero-Day Exploit Does Not Require User Action (Updated May 11, 2023)

CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – May 11, 2023

Ransomware Resilience – Report: Organizations Using Backups to Recover from Ransomware See Lower Recovery Costs

Threat Awareness – Malvertising Campaign Utilizing New Loader to Drop Aurora

Ransomware Preparedness – Two Years After Colonial Pipeline Attack, U.S. Critical Infrastructure Still Not Prepared for Ransomware

Joint Cybersecurity Advisory – Hunting Russian Intelligence “Snake” Malware

Security Awareness – Microsoft Phishing Attack Redirects Victims to a Catering Voice Recording

Cyber Resilience – Microsoft Universally Enables Number Matching for Microsoft Authenticator

Ransomware Resilience – Federal Government: Low Victim Reporting Hampers Ransomware Response Efforts