Podcasts News Tech News CyberWire Daily CISA Alert AA22-137A Weak security controls and practices routinely exploited for initial access. [CISA Cybersecurity Alerts]

CISA Alert AA22-137A Weak security controls and practices routinely exploited for initial access. [CISA Cybersecurity Alerts]

Published: May 17, 2022, 9:15 p.m.

b'This joint cybersecurity advisory was coauthored by the cybersecurity authorities of the US, Canada, New Zealand, the Netherlands, and the UK. Cyber actors routinely exploit poor security configurations, weak controls, and other poor cyber hygiene practices to gain initial access or as part of other tactics to compromise a victim\\u2019s system. This joint Cybersecurity Advisory identifies commonly exploited controls and practices, and includes best practices to mitigate these risks.\\nAA22-137A Alert, Technical Details, and Mitigations\\nWhite House Executive Order on Improving the Nation\\u2019s Cybersecurity\\nNCSC-NL Factsheet: Prepare for Zero Trust\\nNCSC-NL Guide to Cyber Security Measures\\nN-able Blog: Intrusion Detection System (IDS): Signature vs. Anomaly-Based\\nNCSC-NL Guide to Cyber Security Measures\\nNational Institute of Standards and Technology SP 800-123 \\u2013 Keeping Servers Secured\\nNCSC-UK Guidance \\u2013 Phishing Attacks: Defending Your Organisation\\xa0\\nOpen Web Application Security Project (OWASP) Proactive Controls: Enforce Access Controls\\nAll organizations should report incidents and anomalous activity to CISA\\u2019s 24/7 Operations Center at central@cisa.dhs.gov or (888) 282-0870 and to the FBI via your local FBI field office or the FBI\\u2019s 24/7 CyWatch at (855) 292-3937 or CyWatch@fbi.gov.'