RMA Members

Cyber Threats

Iranian Hackers Exploit PLCs in Attack on Water Authority in U.S.
CISA Urges Manufacturers Eliminate Default Passwords to Thwart Cyber Threats CISA called out Iranian threat actors affiliated with the (IRGC) for exploiting operational technology devices with default passwords to gain access to critical infrastructure systems in the U.S.
Hackers Using MSIX App Packages to Infect Windows PCs with GHOSTPULSE Malware.
Information stealing malware on undocumented Google OAuth endpoint Named MultiLogin to hijack user sessions and allow continuous access to Google services even after a password reset.
SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof Emails Threat actors could abuse vulnerable SMTP servers worldwide to send malicious emails from arbitrary email addresses, allowing targeted phishing attacks.
Urgent: New Chrome Zero-Day Vulnerability Exploited in the Wild Users are recommended to upgrade to Chrome version 120.0.6099.129/130 for Windows and 120.0.6099.129 for macOS and Linux to mitigate potential threats.

News

Iranian Hackers Exploit PLCs in Attack on Water Authority in U.S.
CISA Urges Manufacturers Eliminate Default Passwords to Thwart Cyber Threats CISA called out Iranian threat actors affiliated with the (IRGC) for exploiting operational technology devices with default passwords to gain access to critical infrastructure systems in the U.S.
Hackers Using MSIX App Packages to Infect Windows PCs with GHOSTPULSE Malware.
Information stealing malware on undocumented Google OAuth endpoint Named MultiLogin to hijack user sessions and allow continuous access to Google services even after a password reset.
SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof Emails Threat actors could abuse vulnerable SMTP servers worldwide to send malicious emails from arbitrary email addresses, allowing targeted phishing attacks.
Urgent: New Chrome Zero-Day Vulnerability Exploited in the Wild Users are recommended to upgrade to Chrome version 120.0.6099.129/130 for Windows and 120.0.6099.129 for macOS and Linux to mitigate potential threats.

CSJVRMA Cybersecurity Resource

A commonly heard phrase in the cybersecurity industry is “It is not a question of IF, but WHEN” you may experience a cyber-incident. This is in reference to the difficulty of protecting a cyber-incident from occurring in today’s environment of ever-evolving cyber-attack strategies and threats.

CSJVRMA, taking a proactive approach to address this challenge, has partnered with ResoluteGuard™ to provide a SMART-Cyber Action Plan™ (SMART-CAP™) workflow tool customized to each member’s unique cybersecurity profile. SMART-CAP aligns and documents the Executive Governance, Administrative and Technical activities required to support Best Practices and Incident Response Plan solutions that protect against and minimize the budgetary and potential disruption of service impact for WHEN a cyber-incident occurs.

SMART-CAP is available to CSJVRMA members and includes an Easy 4-Step Engagement process:

Step

01

Sign the Member Services Agreement and schedule a Program Overview call with ResoluteGuard.

Step

02

ResoluteGuard will send a SMART-CAP documenting your City’s unique cybersecurity profile for review on the initial engagement call with your team. On this call we will discuss aligning your Executive Governance, Administrative and Technical Resources to:

Step

03

Conduct a call to support your technical team in activating the Vulnerability scan to identify your networks Internal and External “Strengths and Weaknesses”.

Step

04

Conduct a team call with your administrative and technical resources to review scan results and prioritized actions.

CSJVRMA Cybersecurity Resource

SMART-CAP is available to CSJVRMA members and includes an Easy 4-Step Engagement process:

Step

01

Step

02

Step

03

Step

04

Services

Who We Serve

About Us