Water sector passes, government sector fails attempts to spot and halt simulated CISA attack

CISA Red Team Exposes SOC Failures in Critical Infrastructure Tests

CISA's red team fully compromised two critical infrastructure organizations using identical techniques. One SOC detected nothing despite the breach reaching domain admin and cloud resources. The other isolated phishing victims in minutes. The advisory reveals that people and processes determine outcomes more than tools.

Water sector passes, government sector fails attempts to spot and halt simulated CISA attack

When the Cybersecurity and Infrastructure Security Agency tested defenses for two targets — one in the government sector and the other in the water sector — red teamers were able to get into both of their systems, but the water organization discovered the simulated attack and acted to defend itself, whereas the government organization did neither. CISA published the breakdown Tuesday in a rare public report on its red-team activities, at a time …

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published the results of two red team assessments it conducted simultaneously against two critical infrastructure organizations, using what it described as similar tradecraft while recording sharply different defensive outcomes. Both organizations were fully compromised at the domain level, and in both, the red team also