CISA A Tale of Two SOCs mitigation advisory
Advisory/Mitigation
Summary
Hide ▲
Show ▼
CISA published A Tale of Two SOCs, an advisory that turns red team findings into mitigation guidance for critical infrastructure organizations defending IT, cloud, and OT environments. The advisory highlights how detection and response outcomes differed sharply between two assessed organizations. It directs defenders to strengthen baselines, monitoring, and coordination to improve resistance to real-world threat activity.
Related Happenings
CISA red-team advisory for critical infrastructure
Public Sector Action
H score28
First: 25.08.2026 15:00
Last: 25.08.2026 15:00
Sources 1
How related:
Today, the Cybersecurity and Infrastructure Security Agency (CISA) published an advisory about lessons learned from red team assessments performed at the request of two critical infrastructure organizations to help organizations strengthen detection, response and protections in information technology (IT), cloud, and operational technology (OT) environments.
About this happening:
On 2026-08-25, CISA published A Tale of Two SOCs, a public advisory drawn from red team assessments for two critical infrastructure organizations. The guidance hel...
CISA red-team advisory for critical infrastructure
Public Sector ActionHow related: Today, the Cybersecurity and Infrastructure Security Agency (CISA) published an advisory about lessons learned from red team assessments performed at the request of two critical infrastructure organizations to help organizations strengthen detection, response and protections in information technology (IT), cloud, and operational technology (OT) environments.
About this happening: On 2026-08-25, CISA published A Tale of Two SOCs, a public advisory drawn from red team assessments for two critical infrastructure organizations. The guidance hel...
CISA, ACSC, and FBI release CI Fortify isolation guidance for critical infrastructure
Public Sector Action
H score28
First: 28.07.2026 21:41
Last: 28.07.2026 21:41
Sources 1
About this happening:
CISA, ACSC, the FBI, and partners released CI Fortify – Advice for isolating vital systems for critical infrastructure operators. The guidance tells organizati...
CISA, ACSC, and FBI release CI Fortify isolation guidance for critical infrastructure
Public Sector ActionAbout this happening: CISA, ACSC, the FBI, and partners released CI Fortify – Advice for isolating vital systems for critical infrastructure operators. The guidance tells organizati...
CISA-led CI Fortify guidance for isolating vital systems
Public Sector Action
H score28
First: 28.07.2026 15:00
Last: 28.07.2026 15:00
Sources 1
About this happening:
CISA, ASD, NCSC-UK, and CCCS published CI Fortify – Advice for Isolating Vital Systems, issuing new public guidance for critical infrastructure operators...
CISA-led CI Fortify guidance for isolating vital systems
Public Sector ActionAbout this happening: CISA, ASD, NCSC-UK, and CCCS published CI Fortify – Advice for Isolating Vital Systems, issuing new public guidance for critical infrastructure operators...
CISA-led joint advisory on Russian router targeting
Public Sector Action
H score32
First: 14.07.2026 15:00
Last: 14.07.2026 15:00
Sources 1
About this happening:
CISA and partner agencies released a joint cybersecurity advisory warning that Russian state-sponsored actors are targeting vulnerable networking devices in crit...
CISA-led joint advisory on Russian router targeting
Public Sector ActionAbout this happening: CISA and partner agencies released a joint cybersecurity advisory warning that Russian state-sponsored actors are targeting vulnerable networking devices in crit...
CISA-led joint advisory to secure internet-exposed ATG systems
Public Sector Action
H score43
First: 05.06.2026 17:50
Last: 05.06.2026 17:50
Sources 1
About this happening:
On 2026-06-05, CISA, the FBI, the NSA, the Department of Energy, and other U.S. partners issued a joint advisory telling critical infrastructure organiza...
CISA-led joint advisory to secure internet-exposed ATG systems
Public Sector ActionAbout this happening: On 2026-06-05, CISA, the FBI, the NSA, the Department of Energy, and other U.S. partners issued a joint advisory telling critical infrastructure organiza...
Timeline
-
25.08.2026 15:00 2 articles · 6h ago
CISA publishes A Tale of Two SOCs advisory for critical infrastructure organizations
Initial DisclosureCISA publishes A Tale of Two SOCs, an advisory on red team assessments requested by two critical infrastructure organizations. The findings say one organization’s security operations center (SOC) remained unaware after initial access to multiple workstations, privilege escalation over the domain, and lateral movement to other systems and resources, while the second organization’s SOC detected and quarantined initial access and some follow-on activity, forcing an assumed breach model. CISA says organizations should review the advisory and strengthen detection, response, baselines, monitoring, and coordination across IT, cloud, and OT environments.
Show sources
- CISA Advisory Highlights Red Team Findings to Help Organizations Assess Risk, Identify Threats and Enable Effective Incident Response — www.cisa.gov — 25.08.2026 15:00
- CISA Advisory Highlights Red Team Findings to Help Organizations Assess Risk, Identify Threats and Enable Effective Incident Response — www.cisa.gov — 25.08.2026 15:00