CISA Alert AA22-131A Protecting against cyber threats to managed service providers and their customers. [CISA Cybersecurity Alerts]

Published: May 12, 2022, 6:45 p.m.

The cybersecurity authorities of the UK, Australia, Canada, New Zealand, and the US have observed a recent increase in malicious cyber activity against managed service providers (MSPs). Allied cybersecurity authorities expect state-sponsored cyber actors to increase their targeting of MSPs in an attempt to exploit provider-customer trust relationships. This advisory includes security guidance tailored for both MSPs and their customers.\xa0\nAA22-131A Alert, Technical Details, and Mitigations\nTechnical Approaches to Uncovering and Remediating Malicious Activity\nMitigations and Hardening Guidance for MSPs and Small- and Mid-sized Businesses\nAPTs Targeting IT Service Provider Customers\nACSC's Managed Service Providers: How to manage risk to customer networks\xa0\nGlobal Targeting of Enterprise Managed Service Providers\nCyber Security Considerations for Consumers of Managed Services\xa0\nHow to Manage Your Security When Engaging a Managed Service Provider\nKaseya Ransomware Attack: Guidance for Affected MSPs and their Customers\nBaseline Cyber Security Controls for Small and Medium Organizations\nActions to take when the cyber threat is heightened\nTop 10 IT Security Action Items to Protect Internet Connected Networks and Information\nCCCS's Alert: Malicious Cyber Activity Targeting Managed Service Providers\xa0\nCISA Cybersecurity Alert: APT Activity Exploiting MSPs (2018)\nCISA Cyber Essentials and CISA Cyber Resource Hub\xa0\nImproving Cybersecurity of Managed Service Providers\xa0\nShields Up Technical Guidance\nAll organizations should report incidents and anomalous activity to CISA\u2019s 24/7 Operations Center at central@cisa.dhs.gov or (888) 282-0870 and to the FBI via your local FBI field office or the FBI\u2019s 24/7 CyWatch at (855) 292-3937 or CyWatch@fbi.gov.\nLearn more about your ad choices. Visit megaphone.fm/adchoices