XFTF Blog
Writing from the community
Cyber, IT, IoT and OT — written by the folks. Anyone with an account can publish; add yours.
-
New cybersecurity help for small utilities: what to ask before signing up
A new foundation promises tools, hardware, deployment help and training for small utilities. Here is how a small utility can evaluate the offer.
-
Zero trust for OT: start with the remote maintenance session
The NSA's October zero trust guidance is written for defense OT, but a small utility can borrow from it. One remote maintenance workflow is a practical place to begin.
-
ConnectWise Cloud Backup incident: review the Microsoft 365 tenant before reconnecting
ConnectWise is preparing a phased return of Cloud Backup. Customer administrators still need to investigate application access, persistent credentials, and recovery gaps.
-
BeyondTrust Remote Support flaw: patch the appliance and investigate its access
An exploited Remote Support vulnerability entered CISA's catalog this month. Administrators need to verify the BT26-05 patch and investigate what a compromised appliance could reach.
-
New Upcoming Conferences
We’re excited to officially launch the new Upcoming Page on XFTF!