Hunting adversaries.

Control Loop: The OT Cybersecurity Podcast

Sellafield nuclear waste site to be prosecuted for alleged cybersecurity failings. CISA issues draft proposal for cyber incident reporting by critical infrastructure entities. Threat actor targets Indian government and energy entities. Suspicious NuGet package appears to target developers in the industrial sector. Guest Eric Goldstein, Executive Assistant Director for Cybersecurity at CISA, shares their CIRCIA Notice of Proposed Rulemaking. The Learning Lab returns! Mark Urban and Josh Hanrahan discuss adversary hunting.

Control Loop News Brief.

Sellafield nuclear waste site to be prosecuted for alleged cybersecurity failings.

Sellafield nuclear waste dump to be prosecuted for alleged cybersecurity offences (The Guardian)

Sellafield nuclear site hacked by groups linked to Russia and China (The Guardian)

CISA issues draft proposal for cyber incident reporting by critical infrastructure entities.

CISA releases draft rule for cyber incident reporting (CyberScoop)

Threat actor targets Indian government and energy entities.

Operation FlightNight: Indian Government Entities and Energy Sector Targeted by Cyber Espionage Campaign (EclecticIQ)

Suspicious NuGet package appears to target developers in the industrial sector.

Suspicious NuGet package grabs data from industrial systems (ReversingLabs)

Control Loop Interview.

Guest is Eric Goldstein, Executive Assistant Director for Cybersecurity at CISA. Eric shares their CIRCIA Notice of Proposed Rulemaking that goes into effect this week.

Control Loop Learning Lab.

The Learning Lab is back! On today’s segment, listen to Dragos’ Mark Urban talking with Josh Hanrahan, Principal Adversary Hunter at Dragos, in part one of their discussion on adversary hunting and VOLTZITE (aka Volt Typhoon).

Resources:

• VOLTZITE Threat Group’s Under the Radar Cyber Espionage on U.S. Critical Systems .

Control Loop Audience Survey.

Please take a moment to fill out our super quick survey. Thanks!

Control Loop OT Cybersecurity Briefing.

A companion monthly newsletter is available through free subscription and on N2K Networks website.