
Iranian cyber actors are exploiting a recent Windows kernel vulnerability to target critical infrastructure networks. The National Security Agency (NSA) has issued an advisory to help protect healthcare, public health, government, IT, engineering, and energy sector networks against these cyber threats. The hackers are using brute-force attacks and multi-factor authentication (MFA) 'push bombing' to obtain credentials and enable persistent access. The FBI, NSA, Cybersecurity and Infrastructure Security Agency (CISA), Canadian Centre for Cyber Security (CSE), Australian Federal Police (AFP), and Australian Signals Directorate (ASD) have all issued warnings about these activities. Canada, the U.S., and Australia are warning critical sectors like healthcare and government are being targeted by Iranian hackers.