Primary Mitigations to Reduce Cyber Threats to Operational Technology
Cybersecurity and Infrastructure Security Agency sent this bulletin at 05/06/2025 04:14 PM EDT
You are subscribed to Cybersecurity Advisories for Cybersecurity and Infrastructure Security Agency. This information has recently been updated and is now available.
CISA is increasingly aware of unsophisticated cyber actor(s) targeting ICS/SCADA systems within U.S. critical Infrastructure sectors (Oil and Natural Gas), specifically in Energy and Transportation Systems. Although these activities often include basic and elementary intrusion techniques, the presence of poor cyber hygiene and exposed assets can escalate these threats, leading to significant consequences such as defacement, configuration changes, operational disruptions and, in severe cases, physical damage. CISA strongly urges Critical Infrastructure Asset Owners and Operators to review this fact sheet for detailed guidance on reducing the risk of potential intrusions.
Please share your thoughts with us via our anonymous product survey; we’d welcome your feedback.