The recommendations stem from a red team assessment (RTA) CISA conducted in 2022 at the request of an unnamed, large critical infrastructure firm with several geographically separated buildings. “The team gained persistent access to the organization’s network, moved laterally across the organization’s multiple geographically separated sites, and eventually gained access to systems adjacent to the organization’s sensitive business systems (SBSs),” CISA wrote in a Tuesday advisory.

Read full article on Infosecurity