Attack surface management

This week's security update looks at the SEC cybersecurity incident reporting rule a year later and the mistakes businesses make when it comes to pen testing.

An already-addressed flaw could be reanimated and used to attack patched machines.

Legacy Siemens devices could be impacted by a flaw that enables brute-force attacks.

Attacks against cyber-physical systems are growing ever more costly, according to Claroty.

The G7 Cyber Expert Group is urging finance orgs to prepare for post-quantum cyberthreats.

CISA noted that threat actors are attacking OT/ICS systems using unsophisticated attack TTPs.

BlackByte is targeting vulnerable VMware ESXi instances, according to Cisco Talos threat intelligence.

The SEC won't pursue action against Progress Software for the MOVEit attack.