Nov. 8, 2022

CISA releases Cross-sector Cybersecurity Performance Goals

In October, the Cybersecurity and Infrastructure Security Agency released its Cybersecurity Performance Goals (CPGs) and metrics designed to help entities in industrial sectors improve their cybersecurity posture.  The CPGs were required by President Biden via a national security memo on improving cybersecurity for critical infrastructure control systems.  These performance goals, created in coordination between government and private industry, are based on the National Institute of Standards and Technology’s (NIST) Cybersecurity Framework (CSF) and represent a “quick start guide” for organizations of all sizes to address Information Technology (IT)/Operational Technology (OT) cybersecurity.

Nov. 4, 2022

Typosquatting of port facility websites

The Marine Transportation System (MTS) continues to be targeted by typosquatting campaigns operated by cyber criminals. In March 2022, Coast Guard Cyber Command published Maritime Cyber Alert 01-22: Spoofed business websites, highlighting well-constructed fake websites masquerading as legitimate business websites to steal information and potentially install malware. Malicious cyber actors continue to spoof U.S. port facility domains using typosquatting techniques in attempts to re-direct users to malicious websites that have similar domain names. Malicious cyber actors are not directly targeting port facilities, rather, they are targeting individuals who incorrectly type a website address. Misspellings of several U.S. port facility domains have recently been registered, likely for malicious purposes.