Cyber Incidents USA 2026-27

[Commonground]

New CISA Guidance Helps Critical Infrastructure Detect, Observe and Impede Malicious Cyber Activity​

Provides Practical Approaches to Implementing Cyber Decoy Strategies Aligned to MITRE Engage and ATT&CK Frameworks
Released September 16, 2026

WASHINGTON – Today, the Cybersecurity and Infrastructure Security Agency (CISA) released guidance that helps critical infrastructure owners and operators implement realistic decoy systems and information assets to quickly detect and disrupt malicious activity occurring in their networks, which will ultimately improve their cyber defenses. Using Cyber Decoys to Strengthen Detection and Response is the first guide from CISA that offers a detailed explanation of the defensive cyber decoy process.

Continued: https://www.cisa.gov/news-events/ne...t-observe-and-impede-malicious-cyber-activity

 

[Commonground]

[please see post #79. https://flutrackers.com/threads/cyber-incidents-usa-2026-27.1039752/post-1041306]​

Coast Guard, FBI investigating after 2 oil tankers bound for US hit with cyberattacks: Sources​

September 16, 2026,
U.S. authorities said there were no reports of "operational disruptions."

The Coast Guard and FBI are investigating after two oil tankers bound for the U.S. were hit with suspected cyberattacks last month, prompting American authorities to launch investigations into both incidents, sources told ABC News.

Continued: https://abcnews.com/Politics/coast-guard-fbi-investigating-after-2-oil-tankers/story?id=136482324

 

[Commonground]

USCG, FBI assess OT and IT systems aboard two oil tankers following suspected foreign cyberattacks​

SEPTEMBER 17, 2026
Excerpt:

...This disclosure comes as American utility company CenterPoint Energy said it became aware in September of an online post by a third party claiming to have obtained a dataset containing certain customer information, prompting the company to activate its cybersecurity incident response protocols and launch an investigation with third-party cybersecurity experts.

“The Company’s delivery of electric and gas services has not been impacted and remains operational and undisrupted,” CenterPoint detailed in an SEC filing this week. “As of the date of this filing, the Company does not believe it is reasonably likely that there will be a material impact on the Company’s financial condition or results of operations.”...

...https://industrialcyber.co/industrial-cyber-attacks/uscg-fbi-assess-ot-and-it-systems-aboard-two-oil-tankers-following-suspected-foreign-cyberattacks/

 

[Commonground]

Using Cyber Decoys to Strengthen Detection and Response​

Publish Date September 16, 2026
CISA developed this guidance to help defensive teams at varying levels of cybersecurity maturity plan and implement cyber decoy strategies that strengthen their detection and response capabilities. Many organizations struggle to detect adversaries who use legitimate credentials, native tools, and living off the land (LOTL) techniques to conduct discovery, move laterally, and access data. Cyber decoys are assets that appear to be legitimate systems, accounts, or data, but are designed to distract adversaries, detect their presence, or facilitate collection of cyber threat intelligence (CTI). As organizations adopt Zero Trust models, they should assume that a malicious threat actor may gain some level of access to their environment and plan accordingly.

Cyber decoys complement Zero Trust by:

continued: https://www.cisa.gov/resources-tools/resources/using-cyber-decoys-strengthen-detection-and-response