X-Industry

A recent survey conducted by Bridewell, a cybersecurity services company headquartered in the UK, revealed a concerning surge in insider cyber threats within critical national infrastructure (CNI) organizations.  The transport and aviation sectors are particularly at risk.  As economic uncertainties loom, organizations are facing budget cuts in cybersecurity, further exacerbating the threat landscape.  This research is some of the first conducted by Bridewell that focuses on the US.[1]

Bridewell

Activity Summary - Week Ending on 7 January 2022:

• Red Sky Alliance identified 25,112 connections from new IP’s checking in with our Sinkholes
• 227.12[.]174 x 182
• Analysts identified 1,148 new IP addresses participating in various Botnets
• (5) Ransomware Attack Techniques
• CVE-2021-42278 and CVE-2021-42287
• Lapsus$
• Omicrom Scams
• ONUS Attacked by a Log4j Version
• Insider Threats
• Walmart, Part II
• Sunrise Movement

Link to full report: IR-22-007-001_weekly007.pdf