CISA Red Team Compromised Two Critical Infrastructure Organizations
CISA published the results of two simultaneous red team assessments. Both organizations were compromised at the domain level, and both were accessed through sensitive business systems and cloud resources. Organization A detected none of the activity; Organization B detected the phishing payloads and isolated affected workstations within 2 to 20 minutes.
CERT24