Dispatches from a hybrid war. CISA releases its election cybersecurity toolkit. Post-incident disruption at NHS is expected to last at least three weeks. Cisco discloses a security incident.

CyberWire Daily

KillMilk says his crew downed Lockheed Martin's website. Industroyer2, and what became of it. CISA releases its election cybersecurity toolkit. Post-incident disruption at Britain’s NHS. Carl Wright of AttackIQ shares strategies for CISOs to successfully prepare for the next attack. Dr. Christopher Pierson from Blackcloak joins us from Black Hat. And Cisco seems to have thwarted a security incident.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/11/154

Selected reading.

Russian hacking group claims attack on Lockheed Martin (SiliconANGLE

HIMARS-Maker Lockheed Martin "confident" against Russian hackers (Newsweek)

Industroyer2: How Ukraine avoided another blackout attack (SearchSecurity)

Researchers Look Inside Russian Malware Targeting Ukrainian Power Grid (PCMAG)

CISA Releases Toolkit of Free Cybersecurity Resources for Election Community (CISA)

Cybersecurity Toolkit to Protect Elections (CISA)

NHS staff told to plan for three weeks of disruption following cyberattack (Computing)

Major NHS IT outage to last for three weeks (The Independent)

Exclusive: NHS chiefs fear cyber attackers have accessed patient data (Health Service Journal)

Cisco Event Response: Corporate Network Security Incident (Cisco)

Cisco Talos shares insights related to recent cyber attack on Cisco (Cisco Talos)

Cisco confirms May attack by Yanluowang ransomware group (The Record by Recorded Future)

Cisco Hit by Cyberattack From Hacker Linked to Lapsus$ Gang (Bloomberg)

Cisco's own network compromised by gang with Lapsus$ links (Register)

Cisco hacked by Yanluowang ransomware gang, 2.8GB allegedly stolen (BleepingComputer)