Cybersecurity Briefing: December 30, 2022 - Ransomware Strikes Again

# Lead Story: LockBit Targets Port of Lisbon

On December 30, 2022, the LockBit ransomware gang executed a cyberattack against the Port of Lisbon, disrupting operations during the crucial holiday season. The attack aimed not only to cripple port activities but also to steal sensitive data from the port's systems. This incident underscores the escalating threats posed by ransomware groups to critical infrastructure, highlighting vulnerabilities that can be exploited even during peak operational times. Organizations must prioritize their defenses against such threats as the tactics of these actors continue to evolve.

# Secondary Items

North Carolina Counties Breached

A significant cyberattack affected operations across six counties in North Carolina, disrupting public access to online records. This incident raises concerns about the security of local government systems and their preparedness against cyber threats. The breach serves as a reminder of the importance of robust cybersecurity measures in safeguarding public services.

Copper Mountain Mining Ransomware Attack

Copper Mountain Mining Corporation, a Canadian mining company, experienced a ransomware attack that resulted in the shutdown of its mill operations. This incident highlights the increasing vulnerability of industrial sectors to ransomware threats, emphasizing the need for enhanced cybersecurity protocols in critical industries.

CISA Updates on Exploited Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) added two critical vulnerabilities to its Known Exploited Vulnerabilities Catalog, indicating they are actively being exploited in the wild. This update aims to alert organizations to these vulnerabilities, which require immediate attention to prevent potential breaches and protect sensitive data.

# Analyst Perspective The events of December 30, 2022, illustrate the persistent challenges facing organizations in the realm of cybersecurity. The rise in ransomware attacks, particularly targeting critical infrastructure and local government systems, reflects a shift in focus for malicious actors. Additionally, the proactive measures taken by CISA in highlighting exploited vulnerabilities serve as a crucial reminder for organizations to maintain vigilance and ensure their cybersecurity defenses are robust and responsive to emerging threats. As we move forward into 2023, the need for comprehensive cybersecurity strategies will only become more pressing.