CISA Warns US Organizations of Possible Russian Cyber Threat

The Cybersecurity and Infrastructure Agency has advised U.S. organizations to take extra cybersecurity precautions amid Russia’s military buildup near its border with Ukraine.

In a new “Shields Up” alert, CISA said that Russia has previously turned to cyber operations to increase its force projection, a tactic that impacted Ukraine in 2015.

While no credible threat exists at the moment, American organizations should still be alert to the possible impact of Russia’s actions outside of Ukraine, CISA said.

The agency added that Russia understands the destabilizing effect of striking at critical infrastructure like power or communications.

As the U.S. government’s national coordinator for critical infrastructure security, CISA said it has been working with its partners over the past months to maintain awareness of potential threats. The agency said that the effort is part of its strategy to be more proactive.

CISA advised organizations to ensure that their cybersecurity staff can rapidly detect potential breaches. A designated crisis response team should be prepared to tend to suspected intrusions, the agency added.

Regardless of size, organizations should also ensure that they are resilient enough to survive a successful cyberattack, CISA said.

Organizations should test their procedures for backing up critical data in case they are targeted by ransomware or a destructive cyberattack, the agency added.

CISA said that by following its guidance, organizations can improve their cybersecurity and resilience at least in the near term.

The agency urged cybersecurity professionals to review its January guidance on mitigating Russian state-sponsored cyber threats to critical infrastructure.