CISA Alert AA22-131A – Protecting against cyber threats to managed service providers and their customers. [CISA Cybersecurity Alerts]
The cybersecurity authorities of the UK, Australia, Canada, New Zealand, and the US have observed a recent increase in malicious cyber activity against managed service providers (MSPs). Allied cybersecurity authorities expect state-sponsored cyber actors to increase their targeting of MSPs in an attempt to exploit provider-customer trust relationships. This advisory includes security guidance tailored for both MSPs and their customers.
AA22-131A Alert, Technical Details, and Mitigations
Technical Approaches to Uncovering and Remediating Malicious Activity
Mitigations and Hardening Guidance for MSPs and Small- and Mid-sized Businesses
APTs Targeting IT Service Provider Customers
ACSC's Managed Service Providers: How to manage risk to customer networks
Global Targeting of Enterprise Managed Service Providers
Cyber Security Considerations for Consumers of Managed Services
How to Manage Your Security When Engaging a Managed Service Provider
Kaseya Ransomware Attack: Guidance for Affected MSPs and their Customers
Baseline Cyber Security Controls for Small and Medium Organizations
Actions to take when the cyber threat is heightened
Top 10 IT Security Action Items to Protect Internet Connected Networks and Information
CCCS's Alert: Malicious Cyber Activity Targeting Managed Service Providers
CISA Cybersecurity Alert: APT Activity Exploiting MSPs (2018)
CISA Cyber Essentials and CISA Cyber Resource Hub
Improving Cybersecurity of Managed Service Providers
All organizations should report incidents and anomalous activity to CISA’s 24/7 Operations Center at central@cisa.dhs.gov or (888) 282-0870 and to the FBI via your local FBI field office or the FBI’s 24/7 CyWatch at (855) 292-3937 or CyWatch@fbi.gov.
Available Results
Generated results are saved to your library for reuse and search.
Choose Template
Pick the result you want. You can review provider and model before generating.
A concise first-pass summary for understanding the episode quickly.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Explicit actions, next steps, habits, recommendations, and things to avoid.
Repeatable methods, frameworks, mental models, processes, and systems.
A dedicated inventory of concrete resources named in the episode.
A concise first-pass summary for understanding the episode quickly.
A detailed readable summary organized by chapter or topic.
A navigable map of subjects, topic flow, and suggested chapters.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
Reusable atomic knowledge units extracted from the episode.
A comprehensive extraction focused on health practices, protocols, claims, and safety caveats.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Explicit actions, next steps, habits, recommendations, and things to avoid.
A dedicated inventory of concrete resources named in the episode.
A dedicated analysis of warnings, limitations, trade-offs, weak evidence, and uncertainty.
A concise first-pass summary for understanding the episode quickly.
A detailed readable summary organized by chapter or topic.
A navigable map of subjects, topic flow, and suggested chapters.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
Reusable atomic knowledge units extracted from the episode.
A comprehensive extraction focused on health practices, protocols, claims, and safety caveats.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Scientific findings, mechanisms, studies, hypotheses, and the limits of the evidence discussed.
Technologies, AI models, technical methods, capabilities, limitations, and adoption implications.
Investment theses, assets, catalysts, valuation reasoning, time horizons, and risks.
Chronologies, actors, causes, consequences, turning points, and competing historical interpretations.
Policies, proposals, stakeholders, arguments, implementation constraints, and predicted effects.
Career paths, skills, hiring signals, workplace decisions, transitions, and limitations of the advice.
Behavioral mechanisms, biases, motivation, habits, emotions, interventions, and evidence limitations.
Economic mechanisms, incentives, indicators, market structure, forecasts, and uncertainty.
Leadership principles, team systems, organizational design, culture, feedback, and failure modes.
Audience, positioning, messaging, acquisition, retention, experiments, metrics, and failed approaches.
Teaching methods, learning strategies, practice, feedback, assessment, and effectiveness evidence.
Theses, premises, arguments, objections, values, thought experiments, and unresolved questions.
Communication patterns, conflict, boundaries, expectations, repair methods, and contextual limitations.
Books, papers, authors, courses, and other learning resources mentioned in the episode.
Repeatable methods, frameworks, mental models, processes, and systems.
Explicit actions, next steps, habits, recommendations, and things to avoid.
Memorable statements and important claims with attribution and source context.
A dedicated inventory of concrete resources named in the episode.
A dedicated analysis of warnings, limitations, trade-offs, weak evidence, and uncertainty.