The Cybersecurity and Infrastructure Security Agency (CISA) recently required federal agencies to protect against vulnerabilities in the Ivanti Connect Secure and Ivanti Policy Secure remote access gateways. CISA, the FBI and the Environmental Protection Agency also issued a guide for water and wastewater system incident response. While the directive does not apply to private organizations, hospitals and health systems should ensure they’re following the remediation steps.

Fog ransomware notes troll with DOGE references, bait insider attacks
Fog ransomware attacks over the past month used a note referencing the U.S. Department of Government Efficiency (DOGE) to trick users into spreading the malware.