Posts

Showing posts from June, 2018

Global Threats to Information Systems

Image
Global Threats to Information SystemsNational Cyber Awareness System:Global Threats to Information Systems 06/21/2018 04:10 PM EDT
Original release date: June 21, 2018
The advanced capabilities of organized hacker groups and cyber threat actors are an increasing global threat to information systems. Rising threat levels place more demands on cybersecurity personnel and network administrators to protect information systems. Protecting network infrastructure is critical to preserving the confidentiality, integrity, and availability of communication and services across an enterprise.Cyber campaigns—such as NotPetya—are examples of increasingly advanced threat actor activity. NotPetya coincided with a national holiday of the targeted nation. NCCIC recommends organizations remain vigilant and aware of potential malicious cyber activity ahead of upcoming national holidays, including Ukraine's Constitution Day on June 28, 2018.NCCIC encourages users and administrators to review Se…

Securing Network Infrastructure Devices

Image
ST18-001: Securing Network Infrastructure DevicesNational Cyber Awareness System:ST18-001: Securing Network Infrastructure Devices 06/21/2018 03:46 PM EDT
Original release date: June 21, 2018

Network infrastructure devices are ideal targets for malicious cyber actors. Most or all organizational and customer traffic must traverse these critical devices.An attacker with presence on an organization's gateway router can monitor, modify, and deny traffic to and from the organization. An attacker with presence on an organization's internal routing and switching infrastructure can monitor, modify, and deny traffic to and from key hosts inside the network and leverage trust relationships to conduct lateral movement to other hosts. Organizations and individuals that use legacy, unencrypted protocols to manage hosts and services, make successful credential harvesting easy for these malicious cyber actors. Whoever controls the routing infrastructure of a network essentially controls t…