DHS: APT behind Half of Cyber Incidents In Critical Infrastructure

A DHS ICS-CERT report summary states that in 2014 there were 245 reported incidents affecting critical infrastructure—55% linked to APT/sophisticated actors—with attacks ranging from malware infections (including air-gapped networks) and watering-hole compromises to zero-day exploitation; energy and critical manufacturing were the most affected sectors, and many organizations lacked detection/monitoring capabilities to determine intrusion vectors.