Cybersecurity Policy Report, NSA, CISA See Common Flaws in Network Security, (Oct 10, 2023)
The Cybersecurity and Infrastructure Security Agency (CISA) and National Security Agency (NSA) have published a joint cybersecurity advisory addressing the 10 most common cybersecurity misconfigurations found in large organizations' networks and detailing tactics, techniques, and procedures (TTPs) actors use to exploit those misconfigurations.
According to a news release, the advisory includes information from “red” and “blue” team assessments and incident response teams at NSA and CISA. The teams assessed the security posture of networks at the Department of Defense (DoD), federal civilian executive branch agencies, state and local governments, and the private sector.
The gaps the agencies found include a lack of network segmentation, poor patch management, and weak or misconfigured multifactor authentication (MFA), among others, according to the advisory.
The misconfigurations “illustrate a trend of systemic weaknesses in several large organizations and the importance of software manufacturers embracing secure-by-design principles to reduce the risk of compromise,” it says.
NSA and CISA encouraged network defenders and software manufacturers “to implement the recommendations found within the Mitigations section” of the advisory to reduce the risk of compromise and recommended that “network owners and operators examine their networks for similar misconfigurations even when running other software not specifically mentioned in the advisory.”
News: FederalLegislation DataSecurity