CISA red team cracks a critical infrastructure provider’s defenses, a lesson in lateral access

The voluntary assessment raises concerns as the unnamed organization with a mature security program was unable to detect simulated actors moving laterally across its systems for months.

access assessment cisa cisa red team critical critical infrastructure detect infrastructure moving organization program red team security security program systems team