Critical infrastructure warnings and healthcare test fail

Today's cybersecurity news is dominated by two themes: the inevitability of major infrastructure disruptions and the human cost of botched security tests. A Newfoundland health care drill goes wrong, while CISA's acting director tells us to brace for impact. Meanwhile, a Secure Boot certificate deadline looms, and Chinese AI code raises supply chain fears.

Sources

Infrastructure at risk

Two stories today underscore the fragility of critical systems and the shift from prevention to resilience.

#01www.cybersecuritydive.comJun 21

Major critical infrastructure disruptions are inevitable, acting CISA chief says

Acting CISA Director Nick Andersen says major disruptions are inevitable, framing the new goal as resilience over prevention. This is a significant strategic shift for critical infrastructure defenders.

3 min readRead original

#02briefly.coJun 21

A Critical Deadline Is Approaching for Windows and Linux Security

Three Microsoft-signed Secure Boot certificates expire June 24, potentially allowing UEFI bootkits to bypass protections. This is a concrete, near-term threat for Windows and Linux systems.

1 min readRead original

#03worldnewsguru.usJun 21

Chinese AI models raise ‘sleeper agent’ fears after report finds more vulnerable code for US users

A Booz Allen report warns that code from Chinese AI models may introduce hidden vulnerabilities into U.S. software supply chains. This adds a new dimension to AI supply chain security concerns.

When tests go wrong

A cybersecurity test in a Canadian healthcare system caused real harm, highlighting communication failures in security operations.

#04www.ctvnews.caJun 21

‘Cheap shot’: N.L. officials apologize after health care cybersecurity test went horribly wrong

Newfoundland health officials apologized after a poorly communicated cybersecurity test led healthcare workers to believe they had an extra day off. The incident shows how security drills can backfire without proper communication.