CISA says crooks used Ivanti bugs to snoop around high-risk chemical facilities

CISA says crooks used Ivanti bugs to snoop around high-risk chemical facilities

June 25, 2024 at 09:48AM

US cybersecurity agency CISA is warning high-risk chemical facilities to secure their online accounts after a breach in its Chemical Security Assessment Tool (CSAT) portal. The breach could have given unauthorized access to sensitive data on chemical facilities, such as dangerous chemicals stored and security vulnerabilities. CISA advised affected individuals to rotate their passwords and offered identity protection services.

Based on the meeting notes, here are the key takeaways:

– The US cybersecurity agency, CISA, has urged high-risk chemical facilities to secure their online accounts after a breach in the Chemical Security Assessment Tool (CSAT) portal.
– The breach potentially allowed unauthorized access to sensitive data, including Top-Screen surveys, security vulnerability assessments, encrypted site security plans, and personnel details submitted through the Personnel Surety Program.
– CISA notified participants in the Chemical Facility Anti-Terrorism Standards (CFATS) program about the intrusion, and affected individuals are being advised to rotate their passwords for any and all accounts, as well as apply for identity protection services.
– It’s important to patch the Ivanti bugs to prevent similar intrusions in the future.
– Individuals vetted under the CFATS Personnel Surety Program between December 2015 and July 2023 are the only population facing potential risk due to the exposed information.

These takeaways highlight the urgency of securing online accounts, rotating passwords, and applying necessary patches to prevent further vulnerabilities and protect individuals and facilities from potential adverse consequences.

Full Article