| 2026-06-02 |
CISA and Partners Urge Hardening Automatic Tank Gauge Systems
The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), the (EPA), the Transportation Security Administration (TSA), the Department of Transportation (DOT), and the U.S. Department of Agriculture (USDA)—hereafter referred to as “the authoring organizations”—are aware of malicious cyber activity targeting U.S.-based automatic tank gauge (ATG) systems.
|
CISA
EPA
FBI
NSA
TSA
USDA
|
| 2026-04-29 |
Adapting Zero Trust Principles to Operational Technology
Zero trust is a modern, adaptive approach to cybersecurity that eliminates implicit trust and requires continuously validating access based on identity, context, and risk. With advancements in technology, OT systems that were traditionally isolated or manually operated are now increasingly interconnected, digitally monitored, and remotely controlled.
|
CISA
FBI
|
| 2026-04-07 |
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure
This activity has led to PLC disruptions across several U.S. critical infrastructure sectors through malicious interactions with the project file and manipulation of data on human machine interface (HMI) and supervisory control and data acquisition (SCADA) displays, resulting in operational disruption and financial loss. U.S.
|
CISA
CNMF
EPA
FBI
NIST
NSA
|
| 2025-12-09 |
Opportunistic Pro-Russia Hacktivists Attack US and Global Critical Infrastructure
This advisory, published as an addition to the joint fact sheet on Primary Mitigations to Reduce Cyber Threats to Operational Technology (OT) released in May 2025 , details that pro-Russia hacktivist groups are conducting less sophisticated, lower-impact attacks against critical infrastructure entities, compared to advanced persistent threat groups.
|
CISA
EPA
FBI
NSA
|
| 2025-12-09 |
Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure
Actions for Operational Technology Owners and Operators to Take Today to Mitigate Cyber Threats Related to Pro-Russia Hacktivists Activity Reduce exposure of operational technology (OT) assets to the public-facing internet. Adopt mature asset management processes, including mapping data flows and access points. Ensure that OT assets are using robust authentication procedures.
|
ASD/ACSC
BSI
CCCS
CISA
DC3
EC3
EPA
FBI
NCSC-NZ
NCSC-UK
NSA
NUKIB
|
| 2025-12-09 |
Pro-Russia Hacktivists Conduct Opportunistic Attacks Against U.S. and Global Critical Infrastructure
FBI, CISA, National Security Agency (NSA), and the following partners—hereafter referred to as “the authoring organizations”—are releasing this joint advisory on the targeting of critical infrastructure by proRussia hacktivists: The authoring organizations assess pro-Russia hacktivist groups are conducting less sophisticated, lowerimpact attacks against critical infrastructure entities, compared to advanced persistent threat (APT) groups.
|
ASD/ACSC
BSI
CCCS
DC3
EC3
EPA
FBI
NCSC-NZ
NCSC-UK
NSA
NUKIB
|
| 2025-08-13 |
Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators
Using these tools helps owners and operators identify which assets in their environment should be secured and protected, and structure their defenses accordingly to reduce the risk a cybersecurity incident poses to the organization’s mission and service continuity. An asset inventory is an organized, regularly updated list of an organization’s systems, hardware, and software.
|
ASD/ACSC
BSI
CCCS
CISA
EPA
FBI
NCSC-NL
NCSC-NZ
NSA
|
| 2025-05-06 |
Primary Mitigations to Reduce Cyber Threats to Operational Technology
The authoring organizations urge critical infrastructure entities to review and act now to improve their cybersecurity posture against cyber threat activities specifically and intentionally targeting internet connected OT and ICS. The authoring organizations recommend critical infrastructure asset owners and operators implement the following mitigations1 to defend against OT cyber threats. internet.
|
CISA
EPA
FBI
|
| 2025-01-16 |
CSI: Closing the Software Understanding Gap
Software is embedded in countless systems responsible for providing U.S. critical infrastructure services that Americans rely on as well as systems providing national security capabilities. To maintain confidence in national security and critical infrastructure systems, mission owners and operators should be able to trust the system is functional, safe, and secure.
|
CISA
FBI
NSA
|
| 2024-05-01 |
Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity
|
CCCS
CISA
EPA
FBI
MS-ISAC
NCSC-UK
NSA
USDA
|
| 2024-03-21 |
PRC State-Sponsored Cyber Activity: Actions for Critical Infrastructure Leaders
This fact sheet provides an overview for executive leaders on the urgent risk posed by People’s Republic of China (PRC) state-sponsored cyber actors known as “Volt Typhoon.” CISA—along with the National Security Agency (NSA), the Federal Bureau of Investigation (FBI), and other U.S. government and international partners1—released a major advisory on Feb. 7, 2024, in which the U.S.
|
ASD/ACSC
CCCS
EPA
FBI
NCSC-NZ
NCSC-UK
NSA
TSA
Treasury
|
| 2024-02-07 |
PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure
For a downloadable copy of indicators of compromise (IOCs), see: MAR-10448362.c1.v2.CLEAR_stix2.json (JSON, 51.
|
ASD/ACSC
CCCS
CISA
EPA
FBI
NCSC-NZ
NCSC-UK
NIST
NSA
TSA
|
| 2024-02-07 |
PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure
Prioritize patching critical sponsored cyber actors are seeking to prevulnerabilities in appliances known to be position themselves on IT networks for disruptive frequently exploited by Volt Typhoon. or destructive cyberattacks against U.S. critical infrastructure in the event of a major crisis or conflict with the United States.
|
ASD/ACSC
CCCS
CISA
EPA
FBI
NCSC-NZ
NCSC-UK
NSA
TSA
|
| 2024-02-07 |
CTR: Joint Guidance: Identifying and Mitigating Living Off the Land Techniques
This guide, authored by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), agencies (hereafter referred to as the authoring agencies), provides information on common living off the land (LOTL) techniques and common gaps in cyber defense capabilities. U.S. Department of Energy (DOE) U.S. Environmental Protection Agency (EPA) U.S.
|
ASD/ACSC
CCCS
CISA
EPA
FBI
NCSC-NZ
NCSC-UK
NSA
TSA
|