Overview

• The Cybersecurity and Infrastructure Security Agency, FBI, NSA and Department of Defense Cyber Crime Center said defense firms tied to Israeli companies are at increased risk of cyberattacks by Iranian-affiliated hackers exploiting unpatched software and weak passwords.
• The June 30 advisory recapped prior hack-and-leak operations against water, energy and manufacturing sectors and cautioned that malicious campaigns may persist despite the Iran-Israel ceasefire.
• On July 1, hackers using the alias “Robert,” allegedly overseen by Iran’s Revolutionary Guard Corps, claimed to hold 100 GB of emails from President Trump’s inner circle including key aides and threatened to leak or monetize the data.
• CISA, the FBI and the Justice Department branded the threat a calculated smear campaign, opened investigations and pledged to prosecute anyone involved in national security breaches.
• Agencies urged critical infrastructure operators to bolster defenses by segmenting networks, enforcing multifactor authentication, disconnecting vulnerable systems and applying software patches.