FBI Releases PIN on Phishing Campaign against U.S. Election Officials

by Scott Muniz | Mar 30, 2022 | Security, Technology

This article is contributed. See the original author and article here.

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS

A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Mitigating Attacks Against Uninterruptable Power Supply Devices

by Scott Muniz | Mar 29, 2022 | Security, Technology

This article is contributed. See the original author and article here.

CISA and the Department of Energy (DOE) are aware of threat actors gaining access to a variety of internet-connected uninterruptable power supply (UPS) devices, often through unchanged default usernames and passwords. Organizations can mitigate attacks against their UPS devices, which provide emergency power in a variety of applications when normal power sources are lost, by removing management interfaces from the internet.

Organizations can mitigate attacks against UPS devices by immediately removing management interfaces from the internet. Review CISA and DOE’s guidance on mitigating attacks against UPS devices for additional mitigations and information.

Google Releases Security Updates for Chrome

by Scott Muniz | Mar 28, 2022 | Security, Technology

This article is contributed. See the original author and article here.

Google has released Chrome version 99.0.4844.84 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker could exploit to take control of an affected system.  
 
CISA encourages users and administrators to review the Chrome Release Note and apply the necessary updates.