CISA has released the findings based on an analysis and infographic detailing from the 143 Risk and Vulnerability Assessments (RVAs) conducted across multiple critical infrastructure in FY23.
The analysis details a sample attack path including tactics and steps a cyber threat actor could follow to compromise an organization with weaknesses representative of those CISA observed in FY23 RVAs.
The infographic highlights the most successful techniques for each tactic that RVAs documented. Both the analysis and infographic map threat actor behavior to the MITRE ATT&CK framework.
CISA recommends reviewing the analysis and infographic and applying the recommended mitigations to protect against the observed tactics and techniques.
The findings can be found below.
