February 2, 2021: A Day of Critical Cybersecurity Alerts

# Lead Story: Florida Water Treatment Facility Cyber Attack

On February 2, 2021, a serious cyber attack targeted a water treatment facility in Oldsmar, Florida. An unknown threat actor gained unauthorized access via remote access software, attempting to increase sodium hydroxide levels in the water supply to dangerously high levels. Fortunately, the operator recognized the changes and quickly reversed them, averting a potential disaster. This incident underscores significant vulnerabilities in public utilities that utilize outdated technology and remote access tools, raising alarms about the security of critical infrastructure.

# Secondary Items

Microsoft Exchange Vulnerabilities Exploited

In early February 2021, multiple zero-day vulnerabilities in Microsoft Exchange servers were actively exploited by cybercriminals. These vulnerabilities, which affected servers worldwide, allowed attackers to access sensitive emails and administrative controls. As of February 2, reports indicated that approximately 250,000 servers were at risk, including those belonging to U.S. government entities. This breach exemplifies the critical need for timely patch management and vigilance against emerging threats.

DDoSecrets Hacks Gab, Leaks User Data

Hacktivist group DDoSecrets took responsibility for a significant data breach involving the right-wing social platform Gab. The group leaked over 70GB of sensitive user data, including passwords, following their successful infiltration of the platform. This incident, occurring in the wake of the Parler breach, highlights ongoing vulnerabilities in platforms that host controversial content and raises questions about data protection measures in such environments.

# Analyst Perspective The events of February 2, 2021, paint a concerning picture of the current cybersecurity landscape. The Florida water treatment facility attack illustrates the potential ramifications of exploiting public sector vulnerabilities, while the Microsoft Exchange incidents reveal widespread risks that could affect numerous organizations, including government entities. Additionally, the DDoSecrets breach signifies ongoing threats posed by hacktivist groups targeting platforms with controversial affiliations. Together, these incidents emphasize the critical need for enhanced security protocols, regular software updates, and a proactive approach to threat detection and response.