ZeroHour

Search: “trusted execution environment”

2 stories in the last 7d

CISA Urges Service Providers to Provide Transparent Updates During Major IT and OT Outages

CISA and FBI issued guidance urging service providers to deliver timely, transparent communications during major IT and OT outages.

CISA, with the FBI and international partners, released 'Communicating Under Pressure: Best Practices for Service Providers', urging providers to prepare crisis-communication procedures, provide timely status updates during IT/OT outages, and maintain out-of-band communication channels. The guidance warns that disruptions to telecom, cloud, energy, and water services can cascade across critical infrastructure. It aligns with CISA's CI Fortify initiative supporting IT/OT isolation and recovery.

GBHackers · 6d agoAdvisory

CISA Releases Guidance on Deploying Cyber Decoys

CISA issued guidance on deploying honeypots, honeytokens, and decoy systems to detect adversaries and gather threat intelligence in critical infrastructure.

CISA released guidance on deploying cyber decoys, including lures, tripwires, decoy artifacts, honeytokens, and honeypots, within critical infrastructure organizations to complement Zero Trust models. The guidance outlines a three-phase operational process of preparation, execution, and understanding, advising decoys be placed where users rarely interact and configured to produce high-fidelity alerts. It aims to help defenders detect adversaries who use legitimate credentials, native tools, and living-off-the-land techniques, while enabling cost-effective threat intelligence collection.

SecurityWeek · 3h agoAdvisory