Cyberthreat Actors 'Don't Take Holidays': CISA, FBI

Organizations need to “remain vigilant” against ransomware attacks and other cyberthreats, warned the Cybersecurity and Infrastructure Security Agency and FBI Monday. Groups and enterprises need to deploy “multi-factor authentication” for remote access and administrative accounts, and should mandate “strong passwords and ensure they are not reused across multiple accounts,” said the agencies. “Remind employees not to click on suspicious links, and conduct exercises to raise awareness,” they said. “Review and, if needed, update incident response and communication plans that list actions an organization will take if impacted by a ransomware incident.” Though CISA isn't aware of a specific threat, “we know that threat actors don’t take holidays,” said Director Jen Easterly. Cybercriminals “have historically viewed holidays as attractive times to strike,” said FBI Cyber Assistant Director Bryan Vorndran. “We urge network defenders to prepare and remain alert over the upcoming holiday weekend.”