CISA has published a report from a "proactive hunt" at an unnamed US critical infrastructure operator.

CISA has published a report from a "proactive hunt" at an unnamed US critical infrastructure operator.

It's a headache-inducing report, and I'm being generous on the findings.

CISA and USCG Identify Areas for Cyber Hygiene Improvement After Conducting Proactive Threat Hunt at US Critical Infrastructure Organization | CISA

Cybersecurity and Infrastructure Security Agency CISA (www.cisa.gov)