On February 16, 2022, the Cybersecurity & Infrastructure Security Agency, which is part of the Department of Homeland Security, issued Alert (AA22-047A), “Russian State-Sponsored Cyber Actors Target Cleared Defense Contractor Networks to Obtain Sensitive U.S. Defense Information Technology.” The Alert contains useful background on the situation and guidance for companies on response and risk mitigation efforts. Companies should consider using this threat intelligence as an opportunity to review their cybersecurity incident response plans; ensure they understand and are prepared to meet applicable legal, regulatory, and contractual reporting obligations; and evaluate their ability to detect and respond to attacks such as these.
Source: