Cyber Risks · GreyNoise Blog

Storm Watch | Cyber Podcast | Cybersecurity Chaos: CISA Controversy, Telecom Hacks, and Exploited Vulnerabilities

Summary: This episode of GreyNoise's Storm Watch covers allegations that the Trump administration ordered U.S. Cyber Command and CISA to stand down on Russian cyber threats, and financial groups pushing back against CISA's proposed incident reporting rule. It also covers Homeland Security Secretary Kristi Noem disbanding eight federal advisory committees including key cybersecurity groups, a U.S. soldier planning to plead guilty to hacking 15 telecom carriers, Censys research on a toll-system phishing scam using cheap foreign SIM cards and Chinese-hosted infrastructure, and vulnerabilities including CVE-2025-1316 in Edimax IP cameras and mass exploitation of PHP-CGI flaw CVE-2024-4577.

What's compelling: One U.S. soldier allegedly hacked 15 telecom carriers, and the advisory committees meant to support public-private collaboration on critical infrastructure have been disbanded - two signals that the insider and coordination risks your organization depends on others to manage are not being contained.

Read the original at GreyNoise Blog ↗

Topics
OT / ICS & Critical Infrastructure
Mentions
CVE-2024-4577CVE-2025-1316
Related
CVE-2024-4577: PHP-CGI OS Command Injection Vulnerability Known Exploited Vulnerabilities · Jun 12, 2024