CISA Boosts Ransomware Defense with New Resources
The US-based CISA (Cybersecurity and Infrastructure Security Agency) is intensifying its initiatives to combat ransomware. This action comes through making knowledge about vulnerabilities and misconfigurations readily available to organizations, which are often exploited during such attacks.
In March, CISA initiated the Ransomware Vulnerability Warning Pilot (RVWP) program. Through this program, the agency has now introduced two essential tools to guide organizations in spotting and rectifying security lapses often preyed upon by ransomware actors.
The RVWP's main objective, as stated by CISA, is to pinpoint vulnerabilities frequently linked to ransomware attacks and forewarn organizations that possess these vulnerabilities. This proactive approach aids in addressing the issue before any ransomware-related breach happens.
A novel addition to the Known Exploited Vulnerabilities catalog is one of these tools. This section earmarks vulnerabilities tied with ransomware offensives. Remarkably, this catalog details over 1,000 vulnerabilities that have been exploited, many of which became targets in ransomware onslaughts. An illustrative case is CVE-2023-40044, a flaw within Progress Software's WS_FTP server, which could be manipulated to remotely command its base operating system.
Simultaneously, CISA has launched a table on the StopRansomware website, presenting data about the misconfigurations and vulnerabilities that ransomware culprits typically exploit. This table also gives recommendations, via the Cyber Performance Goal (CPG) strategies, on how organizations can counteract or adjust.
CISA emphasized the value of these resources by stating, “These tools empower organizations to fortify their cybersecurity, offering defenses against specific vulnerabilities, misconfigurations, and weaknesses linked to ransomware.”
To date, CISA's RVWP has pinpointed over 800 susceptible systems in sectors like energy, education, healthcare, and water systems.
The destructive impact of ransomware on global critical services, businesses, and communities is undeniable. Frequently, these assaults leverage known vulnerabilities. CISA highlights that numerous organizations might not recognize that they host vulnerabilities exploited by ransomware culprits.
In closing, CISA recommends all organizations to consult these resources to diminish ransomware risks. They also urge critical infrastructural entities to register for CISA's vulnerability scanning service for bespoke notifications.
Loading Comments ...
Comments
No comments have been added for this post.
You must be logged in to make a comment.