The U.S. and Australian governments released joint guidance directing critical infrastructure operators to prepare contingency plans for isolating vital operational technology systems during cyberattacks or major disruptions.
The advisory addresses the growing threat landscape facing essential services, from power grids to water treatment facilities. Both CISA and its Australian counterpart emphasize that organizations should develop and test isolation procedures before an attack occurs.
Key recommendations include:
- Network segmentation: Separate critical systems from general networks to limit breach impact
- Documented procedures: Establish clear protocols for rapid isolation activation
- Regular testing: Conduct drills to ensure teams can execute isolation quickly and effectively
- Communication plans: Coordinate with stakeholders during and after isolation events
The guidance acknowledges that operational technology systems often require specialized handling due to their 24/7 operational demands. Organizations are advised to balance security with availability when designing isolation strategies.
The joint U.S.-Australia directive reflects broader international efforts to strengthen cybersecurity defenses across critical sectors as threat actors continue targeting essential infrastructure.
OpenAI inadvertently launched a denial-of-service attack against Hugging Face, the popular machine learning platform. The incident has prompted questions about AI infrastructure security and unintended consequences of large-scale operations.
Framework's customer database was compromised in a data breach, though payment information was not exposed. The company has disclosed the incident to affected users.
Security researchers have identified potential hardware backdoors in certain x86 processors. The findings, detailed in a GitHub repository called Rosenbridge, reveal vulnerabilities at the processor level that could allow unauthorized access.
Flock Safety, the traffic camera company, is expanding beyond law enforcement with plans to deploy dashcams in rideshare vehicles and offer coaching services to police departments.