Defcon Alerts Threat Monitor: Cyber/Tech

Directed Energy Device Tested in Norway Sparks CIA, Pentagon Havana Syndrome Inquiry

Defcon Level — Sat, 14 Feb 2026 17:15:39 GMT

NORWAY – On February 14 reports surfaced detailing a previously undisclosed experiment by a Norwegian government scientist who tested a microwave device on himself, resulting in neurological symptoms akin to anomalous health incidents known as Havana syndrome.

Cyber/Tech Alerts

The 2024 test involved pulsed-energy exposure, causing immediate effects like dizziness and cognitive issues. Norwegian officials informed the Central Intelligence Agency, leading to engagements with Pentagon and White House personnel.

Sources familiar with the experiment noted it did not support foreign targeting of U.S. officials but illustrated pulsed-energy devices’ capacity to influence human biology.

In a related development, the Pentagon acquired a portable device in late 2024 through a Homeland Security Investigations undercover operation, funded by the Department of Defense. The device, containing Russian components, underwent testing for over a year to assess replication of anomalous health incident symptoms.

Officials indicated its directed-energy emission potential, though no confirmed ties to foreign actors exist. This adds to nearly 1,500 reported cases across 96 countries, with declines in new incidents by 2025.

Inquiry into Norwegian Directed-Energy Device

Poland's Energy Sector Faced Coordinated Cyberattacks Targeting Renewable Facilities and Deploying Wiper Malware

Defcon Level — Tue, 10 Feb 2026 18:11:47 GMT

EUROPE — The U.S. Cybersecurity and Infrastructure Security Agency issued an advisory on February 10 highlighting a destructive cyber incident in Poland’s energy sector from late December.

More Cyber/Tech Alerts

The attacks targeted operational technology and industrial control systems at over 30 wind and solar farms, a combined heat and power plant serving nearly half a million customers, and a manufacturing firm producing energy components.

“The malicious cyber activity caused loss of view and control between facilities and distribution system operators, destroyed data on human machine interfaces (HMIs), and corrupted system firmware on OT devices. While the affected renewable energy systems continued production, the system operator could not control or monitor them according to their intended design.” - CISA

Attackers exploited vulnerable FortiGate firewalls with default credentials to access networks, then used remote desktop protocol and virtual network computing for lateral movement before deploying custom wiper malware called DynoWiper to encrypt files and disrupt communications.

While no interruptions to power or heat occurred, the event exposed risks in distributed renewable energy systems and prompted recommendations for enhanced edge device security.

CERT Polska’s incident report from January 30 detailed the assaults occurring in morning and afternoon hours on December 29. The malware aimed to cause irreversible data destruction, but endpoint detection tools at the combined heat and power plant blocked execution.

Polish authorities attributed the operation to the Russian-linked group Static Tundra, also known as Electrum or Berserk Bear, based on infrastructure overlaps and tactics matching prior campaigns.

Incident Details

PRC State-Sponsored Cyber Actors Deploy BRICKSTORM Malware Targeting Public Sector and Information Technology Systems

Defcon Level — Mon, 08 Dec 2025 10:23:29 GMT

UNITED STATES — The Cybersecurity and Infrastructure Security Agency released an alert detailing intrusions by People’s Republic of China state-sponsored actors using BRICKSTORM malware.

More Cyber Alerts

This backdoor targets VMware vSphere and Windows environments to establish long-term persistence. The malware enables stealthy access through multiple encryption layers and facilitates lateral movement within networks.

Affected organizations are primarily in government services and information technology sectors. BRICKSTORM’s self-monitoring function ensures automatic re-installation if disrupted.

The alert highlights ongoing compromises where actors obtain legitimate credentials by capturing system backups or Active Directory data. They exfiltrate sensitive information and target VMware platforms to steal virtual machine snapshots for credential extraction.

Refer a friend

In one confirmed case, intruders accessed a web server in the demilitarized zone before moving to an internal vCenter server to implant the malware. Seven additional BRICKSTORM samples show variations in capabilities, underscoring its adaptability. Communications are concealed using DNS-over-HTTPS and SOCKS proxies.

Intruders employ advanced tactics to evade detection, including nested TLS encryption and WebSockets. Persistence mechanisms allow the malware to restart automatically upon interruption.

BRICKSTORM is a custom ELF Go-based backdoor for stealthy access, persistence, and command and control. It uses self-watching for reinstallation if disrupted, multiple encryption layers like HTTPS, WebSockets, and nested TLS. DNS-over-HTTPS mimics web traffic with public resolvers such as Cloudflare, Google, and Quad9.

Interactive shells, file manipulation, and SOCKS proxy enable lateral movement. Some samples act as SOCKS proxies or use VSOCK for virtual machine communication with self-signed certificates.

Analysis of eight samples reveals variants for VMware vSphere and Windows. The joint Malware Analysis Report provides indicators of compromise and detection signatures. Network defenders are urged to scan for BRICKSTORM using provided YARA and Sigma rules.

Actors gain access via web shells, move laterally using RDP and SMB with service accounts, copy Active Directory databases, escalate via sudo, and drop BRICKSTORM in /etc/sysconfig/. Modifications to init files ensure execution on boot.

In a detailed incident, access began in April 2024 and persisted through at least September 3, 2025. Lateral movement included jump servers and Active Directory Federation Services for key exfiltration.

Blocking unauthorized DNS-over-HTTPS providers is recommended to reduce unmonitored traffic. Inventory of network edge devices should include monitoring for suspicious connectivity.

Proper segmentation restricts traffic from demilitarized zones to internal networks. If similar activity is detected, incidents should be reported to the agency’s operations center. The guidance emphasizes hunting for intrusions and applying mitigations promptly. Critical infrastructure operators face heightened risks from such state-sponsored activities.

Cloudflare Global Outage: Internal Threat-Traffic Configuration Failure

Defcon Level — Tue, 18 Nov 2025 20:44:03 GMT

GLOBAL — Cloudflare experienced a major worldwide service disruption on November 18, 2025, with degradation first publicly acknowledged at 11:48 a.m. and full resolution declared at 7:28 p.m.

More Cyber/Tech Alerts

The root cause was an automatically generated configuration file for threat traffic that grew far beyond expected size, triggering crashes in multiple traffic-handling systems. Recovery was achieved through staged fixes deployed progressively during the afternoon and evening.

As of late November 18, 2025 (post-resolution), all services are fully operational with no recurring issues observed. The outage impacted a broad range of dependent platforms globally, including social media networks, artificial intelligence (AI) services, streaming platforms, delivery applications, collaboration tools, and countless enterprise services.

Peak error rates and latency spikes occurred between approximately 11:20 a.m. and 2:42 p.m. Cloudflare has confirmed the incident was entirely internal in origin, with no evidence of external attack or malicious activity. Initial details have been released; a comprehensive post-mortem is expected shortly.

What is Cloudflare and Why Does It Matter?

Cloudflare is one of the world’s largest and most critical internet infrastructure companies. It operates as a global reverse proxy, content delivery network (CDN), DDoS mitigation platform, DNS provider, and zero-trust security service.

In practical terms, Cloudflare sits between roughly 20–25% of all internet traffic worldwide, acting as the first line of defense and performance optimization for millions of websites and applications.

U.S. Secret Service Dismantles Imminent Telecommunications Threat in the New York Tri-State Area

Defcon Level — Tue, 23 Sep 2025 12:57:10 GMT

UNITED STATES — The U.S. Secret Service dismantled a network of electronic devices located throughout the New York tri-state area that were used to conduct multiple telecommunications-related threats directed towards senior government officials.

Special Agent in Charge of the New York Field Office Matt McCool announced that the Secret Service has uncovered and dismantled a large network of fraudulent cellular devices in the New York Tri-State area capable of enabling encrypted communications and threatening local infrastructure.

More Alerts

The operation represented an imminent threat to the agency's protective operations. The protective intelligence investigation led to the discovery of more than 300 co-located Subscriber Identity Module servers and 100,000 Subscriber Identity Module cards across multiple sites. The devices were concentrated within 35 miles of the United Nations General Assembly underway in New York City.

The timing, location, and potential for significant disruption to New York telecommunications prompted the agency to move quickly. In addition to carrying out anonymous telephonic threats, these devices could be used to conduct a wide range of telecommunications attacks.

This includes disabling cell phone towers, enabling denial of services attacks, and facilitating anonymous, encrypted communication between potential threat actors and criminal enterprises.

While forensic examination of these devices is ongoing, early analysis indicates cellular communications between nation-state threat actors and individuals who are known to federal law enforcement.

Investigation Details

China's Great Firewall Temporarily Enforces HTTPS Traffic Block

Defcon Level — Wed, 27 Aug 2025 01:54:00 GMT

ASIA — On August 20, 2025, China faced a network disruption that cut off secure connections to services outside its borders for about 74 minutes, starting around 12:34 a.m. Beijing Time.

More Cyber Alerts

This occurred through an unconditional block on TCP port 443, the standard network channel for secure web browsing that ensures encrypted data transfer between users and websites.

China's internet censorship system, known as the Great Firewall, inserted forged TCP RST+ACK packets—signals that abruptly end network connections—to stop both incoming and outgoing traffic on this port.

Technical reviews show that the device responsible for the block had features unlike those seen in earlier documented parts of the Great Firewall, such as increasing TCP window sizes in the inserted packets.

The disruption blocked access to many foreign websites and applications that rely on HTTPS, the protocol for secure online communications that protects information like login details and financial transactions.

This affected operations for organizations connected to China, including interruptions to platforms from companies such as Apple and Tesla. Checks during the event confirmed the issue was limited to port 443, with no interference on other common network channels.

Evaluations based on available data point to an internal cause, such as a setup error or a test of network controls, rather than outside interference. The short length of the outage and its focus on one port suggest it was not a planned widespread restriction.

Acronym Index

GFW: Great Firewall

HTTPS: Hypertext Transfer Protocol Secure

IP: Internet Protocol

RST+ACK: Reset + Acknowledge

SYN: Synchronize

SYN+ACK: Synchronize + Acknowledge

TCP: Transmission Control Protocol

TTL: Time to Live

Details of the Block:

Cyber Analysis: U.S. Maritime Cybersecurity Threats From Foreign Adversarial Technologies

Defcon Level — Wed, 09 Apr 2025 19:18:57 GMT

GLOBAL/CYBER — U.S. Maritime Advisories 2025-006 and 2025-007 highlight critical cybersecurity threats to the global Marine Transportation System (MTS) from foreign adversarial technologies and provide updated resources for mariners.

More Cyber Alerts

The Standeford Journal - News, Intel Analysis

China's Deep-Sea Cable Cutter: A New Tool Threatening Global Undersea Information Infrastructure

INDO-PACIFIC/EUROPE—The Taiwanese Ministry of Foreign Affairs has raised concerns over a new Chinese-developed tool: a deep-sea cable cutter designed to sever fortified underwater communication and power lines…

a year ago · 1 like · Donald Standeford

More Sci-Tech On SJ

The recently released advisories address vulnerabilities in port equipment, networks, and navigation systems, emphasizing the risks posed by Chinese-manufactured technologies and GPS disruptions on ships and ports worldwide.

Refer a friend

These advisories pinpoint specific dangers arising from foreign technologies—particularly those manufactured by Chinese entities—that threaten port equipment, networks, and operational systems integral to shipping. Additionally, they address vulnerabilities in navigation tools, such as the Global Positioning System (GPS), which is essential for determining a vessel’s location, and the Automatic Identification System (AIS), which aids in collision avoidance.

These systems are susceptible to disruptions or spoofing, posing significant safety risks to maritime travel. To counter these threats, the advisories recommend proactive measures, including contingency planning for GPS outages, enhancing security protocols for port infrastructure, and reporting suspicious activities to the U.S. Coast Guard.

These efforts aim to safeguard the Marine Transportation System (MTS), a vital component of global trade and security. The economic significance of the MTS cannot be overstated. According to the U.S. Government Accountability Office (GAO-25-107244), the MTS manages over $5.4 trillion in goods and services annually and supports more than 30 million jobs across 360 U.S. ports.

However, this system faces an escalating array of cybersecurity threats from nation-states—such as China, Iran, North Korea, and Russia—as well as hacktivists and insider threats. These risks, detailed in the GAO report attached to this alert, threaten both national security and economic stability, setting the stage for why cybersecurity is a critical priority for the maritime sector.

The broad threat landscape outlined in the advisories underscores the urgency of addressing these vulnerabilities comprehensively.

Specific Threats, Vulnerabilities In Port Infrastructure, Navigation Systems

GPS Interference Disrupts Navigation Near Bandar Jask, Iran

Defcon Level — Mon, 10 Mar 2025 21:28:04 GMT

IRAN - On March 10, 2025, the United Kingdom Maritime Trade Operations (UKMTO) issued an Advisory Incident reporting significant GPS interference in the Strait of Hormuz near Bandar Jask, Iran.

GPS Advisory Map. Source: UKMTO

Alerts On Cyber Incidents

The Standeford Journal - News, Intel Analysis

NASA Working With NGA To Implement Full GPS Capability On The Moon

NASA/NGA - The National Geospatial-Intelligence Agency (NGA) is jointly working with NASA to implement a GPS positioning and navigational system that would be fully functional on the moon, guiding visitors "as accurately and as safely as GPS does on Earth…

3 years ago · 2 likes · Donald Standeford

SJ Cyber/Tech Reports

According to the advisory, corroborated reports from vessel masters indicate that the disruptions, which lasted several hours, impacted electronic navigation systems, including GPS, AIS, and other Positioning, Navigation, and Timing (PNT) tools. The disruptions forced ships to switch to backup navigation methods to maintain safe passage through this critical maritime choke-point.

The incident, documented at 1830 UTC (6:30 PM UTC), underscores ongoing concerns about electronic interference in the region. Bandar Jask, strategically located east of the Strait of Hormuz, has previously been associated with Iranian activities, including the Islamic Revolutionary Guard Corps Navy (IRGCN) operations and potential GPS jamming capabilities.

The UKMTO has urged masters experiencing such disruptions within its Voluntary Reporting Area (VRA) to report incidents to its watch-keepers, highlighting the need for heightened vigilance.

This event aligns with historical patterns of GPS interference in the Persian Gulf and Strait of Hormuz, often linked to geopolitical tensions.

While the source of this specific interference remains unconfirmed, it echoes past reports of Iranian jamming efforts, such as incidents noted in recent years by the U.S. Maritime Administration, aimed at disrupting maritime and aviation navigation.

As the Strait of Hormuz remains vital for global oil and gas transit, such incidents pose significant risks to commercial shipping, prompting calls for robust contingency measures.

FBI/CISA Issue Urgent Warnings on Cyber Threats Targeting Corporations and Vulnerable Populations

Defcon Level — Thu, 06 Mar 2025 19:49:03 GMT

FBI/CISA—The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) released a series of Public Service Announcements (PSAs) in highlighting a surge in cyber threats impacting corporate entities and vulnerable populations globally.

All Cyber/Tech Alerts

The Standeford Journal - News, Intel Analysis

Quantum Leap Forward: ORNL’s Single-Chip Breakthrough Brings the Quantum Internet Closer

ORNL - Researchers at Oak Ridge National Laboratory (ORNL) have demonstrated a new quantum photonic device that integrates key capabilities on a single chip for the first time. This innovation focuses on quantum computing with photons to create qubits, which can exist in multiple states simultaneously…

a year ago · Donald Standeford

The Standeford Journal - News, Intel Analysis

China Says It Carried Out First Successful Attack By Quantum Computer On Military-Grade Encryption

BEIJING - Chinese researchers, led by Wang Chao from Shanghai University have claimed that they carried out the first successful attack using a Canadian D-Wave quantum computer on widely used military-grade encryption algorithms, which they said poses a…

2 years ago · 2 likes · Donald Standeford

SJ Cyber/Tech Reports

These alerts address a range of malicious activities, from sophisticated ransomware scams targeting corporate executives to violent online networks exploiting minors and the Chinese government’s use of freelance hackers to compromise global networks.

Refer a friend

The FBI emphasizes the need for heightened vigilance, offering actionable tips to protect against these evolving threats.

CISA/FBI: "Urgent Alert: Criminals posing as "BianLian Group" are sending extortion letters to corporate execs, threatening to leak sensitive info unless paid."

Corporate Executives Under Siege: The BianLian Ransomware Scam

Satellite Transition Impacts Some AFN Customers in the Pacific

Defcon Level — Thu, 23 Jan 2025 04:39:25 GMT

PENTAGON: An upcoming satellite change for the four-channel AFN TV programming package will impact some audience members in the Pacific who use a satellite dish and decoder to get their AFN service.

Recent Cyber/Tech Alerts

The Standeford Journal - News, Intel Analysis

Poland Works To Construct Quantum Computer For Military Applications As Technology Progresses

POLAND - The Polish military has announced that the Warsaw University of Technology is developing a pioneering quantum computer infrastructure prototype, built entirely from scratch within Poland, as global advancements in quantum computer technology continue…

a year ago · 1 like · Donald Standeford

The Standeford Journal - News, Intel Analysis

China Says It Carried Out First Successful Attack By Quantum Computer On Military-Grade Encryption

2 years ago · 2 likes · Donald Standeford

All SJ Sci-Tech Reports

Customers in Southeast Asia, Australia, New Zealand, and Oceania will have to re-point their satellite dish to a new satellite and update their decoder setti…

Joint US, Israeli "Cyberdome IX" Exercise In United States Concludes

Defcon Level — Tue, 24 Dec 2024 18:02:59 GMT

UNITED STATES - The "Cyberdome IX" exercise concluded last week. The joint exercise involving the United States and Israel focused on preventing dozens of cyberattacks, as well as targeting enemy systems.

Recent Cyber Alerts

The Standeford Journal - News, Intel Analysis

China Says It Carried Out First Successful Attack By Quantum Computer On Military-Grade Encryption

2 years ago · 2 likes · Donald Standeford

The Standeford Journal - News, Intel Analysis

Data Breach Exposes 2.7 Billion Public Records On Nearly 3 Billion People To Dark Web

CYBER - The "USDoD" hacking group claims to have stolen 2.7 billion records on around 2.9 billion people after a data breach on National Public Data (NPD) database containing personal data on virtually all American citizens and released most of it in a dark web marketplace where stolen data is sold off for $3.5 million USD…

2 years ago · 3 likes · Donald Standeford

SJ Cyber/Tech Reports

According to the Israeli military, "The "CYBERDOME" exercise is the primary cyber-defense exercise conducted jointly by the U.S. Cyber Command, together with the Israel Defense Forces' J6 and Cyber Defense Directorate, and the Intelligence Directorate."

It also said that, "The exercise focused on enhancing both countries' cyber capabilities while strengthening joint cyber defense capabilities. This was achieved through various battlefield-tailored operational scenarios and on the backdrop of increasing cyber threats faced by both countries, with an emphasis on the Middle East."

According to U.S. Cyber Command, “We are now in our ninth iteration of the CYBERDOME series of exercises, this annual event provides a valuable opportunity for U.S. and Israeli cyber personnel to work together in a complex training environment, solidifying the bond between our two nations and fostering a shared understanding of cyber operations."

Refer a friend

Full Report On Cyberdome IX:

Chinese-Backed Salt Typhoon Botnet Attacks Critical US Infrastructure, Volt Typhoon Adapts, Resurfaces Globally

Defcon Level — Sat, 16 Nov 2024 11:34:34 GMT

CYBER - The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have released a statement confirming that a Chinese government-backed hacker group called "Salt Typhoon" targeted and successfully hacked multiple telecommunications companies, stealing call record data of "a limited number of individuals who are primarily involved in government or political activity".

All Cyber Alerts

The Standeford Journal - News, Intel Analysis

China Says It Carried Out First Successful Attack By Quantum Computer On Military-Grade Encryption

2 years ago · 1 like · Donald Standeford

All SJ Cyber Reports

Furthermore, the hackers copied information that the joint statement said "was subject to U.S. law enforcement requests pursuant to court orders," adding, "We expect our understanding of these compromises to grow as the investigation continues".

Refer a friend

Another Group Called "Volt Typhoon" Embedded In US Networks For At Least Five Years

Seoul: North Korea To Blame For 331 GPS Disruptions So Far This Month

Defcon Level — Mon, 11 Nov 2024 04:35:34 GMT

Seoul - The South Korean Ministry of Science, as well as Information and Communication Technologies (ICT), has reported that there were 331 cases where GPS signals in the region were disrupted this month, which include the first 10 days of November.

Recent Cyber Alerts

The Standeford Journal - News, Intel Analysis

NASA Working With NGA To Implement Full GPS Capability On The Moon

3 years ago · 1 like · Donald Standeford

SJ Reports On Space

The Standeford Journal - News, Intel Analysis

China Says It Carried Out First Successful Attack By Quantum Computer On Military-Grade Encryption

2 years ago · 1 like · Donald Standeford

SJ Reports On Cyber/Tech

Of the disruptions reported:

279 targeted aircraft
52 targeted vessels

Despite the GPS disruptions, the ministry said that there were no major issues or damages caused by the interference, with the ICT reporting that it "consistently detected radio interference originating from the Kaepung and Haeju areas of North Korea”.

According to the ministry, it has been continuously monitoring the activities while coordinating with the land and maritime ministries in order to ensure the safety of air and sea navigation while maintaining a high level of readiness, according to South Korean media.

What Is GPS Jamming?

Reports That Nearly All Three Branches Of Iranian Government, Including Nuclear Facilities Hit With Cyberattacks

Defcon Level — Fri, 11 Oct 2024 21:10:27 GMT

TEHRAN - London Headquartered, Persian-language news channel Iran International is reporting that "nearly all three" branches of the Iranian government has been hit by heavy cyberattacks, including nuclear facilities.

Alerts On Mideast

The Standeford Journal - News, Intel Analysis

Israel Preparing "Significant Strike" On Iran In Retaliation For Recent Missile Attack

JERUSALEM - The Israeli military is currently preparing a "significant strike" on Iran following the recent Iranian missile attack on Israel and said that they do not rule out the possibility that Iran may retaliate with an additional strike, according to a statement by the Israel Defense Forces (IDF…

2 years ago · 1 like · Donald Standeford

SJ Reports On Mideast

Although there are other reports on this, thus far they are all citing Iran International's report. We have it on our radar and are watch…

Reports Of Outages At Bank Of America - Some Users Have Zero Balance Or Can't Login

Defcon Level — Wed, 02 Oct 2024 19:27:44 GMT

NORTH AMERICA - An outage has been reported for Bank of America which caused some customers to have a zero balance in their account and some customers unable to login to their online banking, according to a CNN report as well as NBC Los Angeles.

All Cyber Alerts

All SJ Cyber Reports

Down Detector shows that Bank of America has recently begun to have service interruptions. Check the comment …

Services Affected Worldwide Traced To Microsoft And A CrowdStrike Update

Defcon Level — Fri, 19 Jul 2024 10:16:19 GMT

WORLDWIDE - The Microsoft service status page says all services are up and running after CrowdStrike issued an update reported to have affected Windows operating systems globally, with many systems showing a "Blue Screen of Death" or BSOD on systems worldwide.

Microsoft says that the systems have been restored and CrowdStrike says they are rolling their update back globally.

Microsoft also said it is "investigating an issue" after companies worldwide began reporting issues with its services.

Thus far, the attack does not look to be the result of a cyberattack, but rather a consequence of an update that had been rolled out on systems worldwide.

What Is CrowdStrike? Effects Of The Outage Worldwide, More Information:

Internet Archive Hit With DDoS Cyberattack

Defcon Level — Mon, 27 May 2024 22:47:15 GMT

WEB - The Internet Archive has come under a distributed denial of service (DDoS) attack, according to the archive, which says the data has not been affected, but reported that most services were unavailable as of May 27th (Memorial Day in the United States), then later reported that its services were back up and running.

Read SJ Cyber Reports

Increase Of Cyberattacks On Critical US Water Infrastructure. Every Critical Infrastructure Sector Targeted

Defcon Level — Mon, 20 May 2024 22:50:40 GMT

UNITED STATES - The United States Environmental Protection Agency (EPA) has released an "Enforcement Alert" to address cybersecurity vulnerabilities of the country's drinking water after EPA Deputy Administrator Janet McCabe reported cyberattacks against critical water infrastructure have become not only more frequent but have also increased in severity.

All Alerts On Critical Infrastructure

In light of both the increase in reported attacks on the water supply and an increase in vulnerabilities found in the country's water systems, the EPA urged water systems to act immediately to take steps to protect the nation's drinking water.

Refer a friend

Not only have cyberattacks become more frequent and severe against critical infrastructure, but the EPA says that around 70% of the water utilities inspected by the federal government over the last year were in violation of cybersecurity standards put into place to prevent attacks on the systems.

McCabe said in many cases systems are not doing what they should be doing and have no available plans for vulnerability prevention. As the water systems often rely on computers with operating systems, some of the ways the utilities failed the standards:

Failing to change default passwords for equipment
Failing to lock out system access to ex-employees

Cyberattacks on water systems can lead to numerous problems with either the water supply or the alteration of the chemical composition of the water to hazardous levels:

Interruption in the water treatment process
Interruption in the water storage process
Damage to valves that control the water flow
Damage to the water pumps
Altering of the water's chemical composition
Change of chemical levels to dangerous amounts

“In many cases, systems are not doing what they are supposed to be doing, which is to have completed a risk assessment of their vulnerabilities that includes cybersecurity and to make sure that plan is available and informing the way they do business,” McCabe stated.

McCabe: Cyberattacks On Water Infrastructure Are Not Just Private Individuals, Many Government-Backed Entities. FDA: Every US Critical Infrastructure Sector Has Been Targets Of Cyberattacks

UK Border Force Experiencing Nationwide Issue Affecting Its E-Gates

Defcon Level — Wed, 08 May 2024 01:18:44 GMT

BRITAIN - The UK Border Force is currently experiencing a "nationwide issue" affecting its gates at British airports. The British Border Force is currently down and has caused long queues at the airports.

The Standeford Journal - News & Intel

Chinese Affiliated Hackers Compromise Critical Infrastructure With Intent To Sow Panic, Chaos, Deploy Future Attacks

WASHINGTON - Chinese affiliated hackers have compromised over two dozen “critical entities” within the United States, including critical infrastructure such as water utility companies, at least one oil and gas pipeline, an attempt on the Texas power grid to…

2 years ago · 1 like · Donald Standeford

See Cyber/Tech Reports

Airport Announcements Regarding The Nationwide Issue:

Reports: China Hacked British Ministry Of Defense Systems. British Government: Malign Actor Hacked Armed Forces Payment Network

Defcon Level — Mon, 06 May 2024 21:28:45 GMT

UK - Sky News has reported that China has hacked the British Ministry of Defense, targeting service personnel belonging to the Ministry. The British government later released a statement saying that a "Malign Actor" gained access to the British Armed Forces payment network.

The news agency reported that the attack occurred on a payroll system which targeted service personnel, officials, and some veterans.

The attack is said by the news agency to have exposed the names of the personnel, and their bank details.

It should be noted that the system reported to have been attacked is not connected to the main computer systems for the British Ministry of Defense.

The Standeford Journal - News & Intel

Chinese Affiliated Hackers Compromise Critical Infrastructure With Intent To Sow Panic, Chaos, Deploy Future Attacks

2 years ago · 1 like · Donald Standeford

Defcon Alerts Threat Monitor: Cyber/Tech

Directed Energy Device Tested in Norway Sparks CIA, Pentagon Havana Syndrome Inquiry

Inquiry into Norwegian Directed-Energy Device

Poland's Energy Sector Faced Coordinated Cyberattacks Targeting Renewable Facilities and Deploying Wiper Malware

Incident Details

PRC State-Sponsored Cyber Actors Deploy BRICKSTORM Malware Targeting Public Sector and Information Technology Systems

Cloudflare Global Outage: Internal Threat-Traffic Configuration Failure

What is Cloudflare and Why Does It Matter?

U.S. Secret Service Dismantles Imminent Telecommunications Threat in the New York Tri-State Area

Investigation Details

China's Great Firewall Temporarily Enforces HTTPS Traffic Block

Acronym Index

Details of the Block:

Cyber Analysis: U.S. Maritime Cybersecurity Threats From Foreign Adversarial Technologies

Specific Threats, Vulnerabilities In Port Infrastructure, Navigation Systems

GPS Interference Disrupts Navigation Near Bandar Jask, Iran

FBI/CISA Issue Urgent Warnings on Cyber Threats Targeting Corporations and Vulnerable Populations

Corporate Executives Under Siege: The BianLian Ransomware Scam

Satellite Transition Impacts Some AFN Customers in the Pacific

Joint US, Israeli "Cyberdome IX" Exercise In United States Concludes

Full Report On Cyberdome IX:

Chinese-Backed Salt Typhoon Botnet Attacks Critical US Infrastructure, Volt Typhoon Adapts, Resurfaces Globally

Another Group Called "Volt Typhoon" Embedded In US Networks For At Least Five Years

Seoul: North Korea To Blame For 331 GPS Disruptions So Far This Month

What Is GPS Jamming?

Reports That Nearly All Three Branches Of Iranian Government, Including Nuclear Facilities Hit With Cyberattacks

Reports Of Outages At Bank Of America - Some Users Have Zero Balance Or Can't Login

Services Affected Worldwide Traced To Microsoft And A CrowdStrike Update

What Is CrowdStrike? Effects Of The Outage Worldwide, More Information:

Internet Archive Hit With DDoS Cyberattack

Increase Of Cyberattacks On Critical US Water Infrastructure. Every Critical Infrastructure Sector Targeted

McCabe: Cyberattacks On Water Infrastructure Are Not Just Private Individuals, Many Government-Backed Entities. FDA: Every US Critical Infrastructure Sector Has Been Targets Of Cyberattacks

UK Border Force Experiencing Nationwide Issue Affecting Its E-Gates

Airport Announcements Regarding The Nationwide Issue:

Reports: China Hacked British Ministry Of Defense Systems. British Government: Malign Actor Hacked Armed Forces Payment Network

Statement Transcript Released By British Government: