A Tale of Two SOCs: Insights From Two Red Team Assessments

CISA advisories describe active and emerging cyber threats affecting critical infrastructure, enterprise collaboration platforms, networking devices, cloud environments, ransomware victims, and industrial control systems. Key activity includes Gunra ransomware double extortion, Russian state-supported exploitation of Zimbra Collaboration Suite, Russian targeting of vulnerable routers, China-nexus compromised-device networks, and Iranian-affiliated or broader threat activity against internet-exposed PLCs. The advisories emphasize patching known vulnerabilities, eliminating direct internet andая