The US Department of Energy was affected by Cl0p exploitation of MOVEit Transfer. Canada’s oil-and-gas sector is a likely target for Russian cyberattacks. Nuclear weapons cybersecurity is lacking. Access to a US satellite is being hawked in a Russophone cybercrime forum. ICS patches.
Today’s guest is Christopher Ebley from Blackwood talking with us about OT cybersecurity concerns for Federal IT leaders.
The Learning Lab has part one of a 3-part discussion between Dragos’ Mark Urban and Vulnerability Analyst Logan Carpenter talking about vulnerabilities in the OT world.

Control Loop News Brief.
US Department of Energy affected by Cl0p exploitation of MOVEit Transfer.
US government hit by Russia's Clop in MOVEit mass attack (The Register)
Energy Department among ‘several’ federal agencies hit by MOVEit breach (Federal News Network)
Canada’s oil-and-gas sector a likely target for Russian cyberattacks.
The cyber threat to Canada’s oil and gas sector (Canadian Centre for Cyber Security)
Nuclear weapons cybersecurity is lacking.
Nuclear Weapons Cybersecurity: Status of NNSA's Inventory and Risk Assessment Efforts for Certain Systems (GAO)
Access to a US satellite is being hawked in a Russophone cybercrime forum.
Military Satellite Access Sold on Russian Hacker Forum for $15,000 (HackRead)
ICS patches.
ICS Patch Tuesday: Siemens Addresses Over 180 Third-Party Component Vulnerabilities (SecurityWeek)
CISA Releases Four Industrial Control Systems Advisories (CISA)
Lessons learned from the electrical power sector.
Electric Industry Cybersecurity: Lessons Learned from the Frontlines (Dragos)

Control Loop Interview.
The interview is with Christopher Ebley of Blackwood talking about OT cybersecurity concerns for Federal IT leaders.

Control Loop Learning Lab.
On the Learning Lab, Mark Urban is joined by Dragos Vulnerability Analyst Logan Carpenter in the first of three segments to discuss vulnerabilities in the OT world.

Control Loop OT Cybersecurity Briefing.
A companion monthly newsletter is available through free subscription and on the CyberWire's website.