Tag: cisa
450 articles
CISA Unveils Plan to Boost CVE Program Quality
The Cybersecurity and Infrastructure Security Agency (CISA) is taking its CVE Program to the next level with a new plan to boost quality, accuracy, and consistency, ensuring organizations have a reliable catalog of software and product vulnerabilities to build on. This Quality Era marks a major milestone in CISA's 25-year commitment to leading and growing the program.
Network Management Systems Targeted in Widespread Exploitation Efforts
In a recent surge of cyber threats, 158 security advisories were issued across 17 vendors, exposing 1,699 vulnerabilities, including 42 critical flaws that could be exploited remotely. This alarming trend highlights the growing risk to network management systems, with some vulnerabilities already added to the government's catalog of known threats.
Congress Proposes AI-Powered Cyber Defense Program
Rep. Josh Gottheimer is taking a proactive stance against cyber threats with the AI Cyber Defense Act, a new legislative proposal that would provide critical infrastructure operators with free access to cutting-edge AI technology to identify and fix security gaps. This innovative program aims to safeguard families and communities from potential disasters by staying ahead of emerging threats.
CISA Warns of Active Exploits in Zyxel Switch Vulnerability
A high-severity vulnerability in Zyxel GS1900 series switches is under active attack, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to issue a directive for federal agencies to patch the flaw and prevent data theft. This urgent warning highlights the vulnerability's potential impact on enterprise and agency environments.
CISA Flags Active Exploitation of Zyxel, Veeam Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a high-severity Zyxel vulnerability, warning that hackers are actively exploiting it to gain control of unpatched GS1900 series switches. This critical flaw, now patched, has a CVSS score of 8.8 and could allow attackers to execute malicious OS commands via a simple HTTP request.
CISA Warns of Active Exploitation of Linux Kernel Flaws
Hackers are actively exploiting three Linux kernel vulnerabilities, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to escalate them to the highest federal priority, requiring immediate security updates and forensic analysis. The alarming part? One of these flaws, CVE-2025-39964, had been lurking in the Linux kernel for a staggering 14 years.
Democrats Push for CISA Workforce Assessment Amid Cyber Threats
House Democrats are pushing for a comprehensive review of the Cybersecurity and Infrastructure Security Agency's workforce to ensure America's cyber defenses are equipped to tackle growing threats. The proposed assessment would determine if the agency has the right personnel, training, and certifications to succeed.
CISA Flags Linux Kernel Flaws Exploited in Wild
Linux kernel flaws are being actively exploited in the wild, prompting CISA to add three vulnerabilities to its Known Exploited Vulnerabilities catalog. This high-risk threat has known public exploits, making swift remediation a top priority.
CISA Overhauls Vulnerability Reporting with Automated Platform Upgrade
CISA has launched VINCE-NT, a cutting-edge platform that's revolutionizing vulnerability reporting and coordination by streamlining collaboration between reporters, suppliers, and case managers. This upgrade marks a significant improvement over the previous system, enabling faster and more efficient disclosure processes.
CISA Promotes Decoys to Detect Breaches
Want to catch cyber attackers in the act? Planting decoy files, accounts, and credentials inside your network can expose machine-driven threats and help you detect breaches before they cause harm.
CISA Deploys Cyber Decoys to Disrupt Attackers
CISA is shaking things up in the cybersecurity world with a clever tactic: deploying cyber decoys to lure in and expose attackers, making it easier to detect and respond to threats. By using these low-cost, high-impact decoys, critical infrastructure owners and operators can stay one step ahead of intruders.
CISA Scraps Weekly Vulnerability Bulletin
Big change alert: starting September 28, CISA is ditching its weekly vulnerability bulletin to shake up its approach to cybersecurity, shifting from severity-based listings to a modern, risk-based strategy. This move aims to help prioritize vulnerabilities based on real-world risks, not just their severity.
CISA and NIST Issue Guidance to Safeguard Cloud Identity Tokens
As cyber threats escalate, protecting cloud identity tokens has become crucial - and CISA and NIST have just released guidance to help safeguard these vulnerable targets. The new interagency report provides critical advice for federal agencies, cloud service providers, and organizations that rely on them to stay secure.
CISA Warns of Active ScreenConnect Exploit in Ongoing Attacks
Beware: hackers are actively exploiting a critical flaw in ConnectWise ScreenConnect, allowing them to transfer files and execute code on vulnerable systems without permission. The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning, ordering federal agencies to secure affected systems within three days.
CISA's CDM Program Accelerates Federal Cybersecurity Push
The Continuous Diagnostics and Mitigation program at CISA is shifting into high gear, with a focus on speed, unification, and data-driven risk management to supercharge federal cybersecurity. We have to get faster, and CISA is taking bold steps to equip federal entities to defend themselves against rapidly evolving threats.
Ransomware gangs exploit VMware flaw
Ransomware gangs are actively exploiting a critical VMware flaw, CVE-2026-59310, that was patched just two weeks ago, putting organizations at risk of devastating attacks. The US Cybersecurity and Infrastructure Security Agency has warned of the vulnerability, which allows unauthenticated attackers to execute arbitrary code.
CISA Flags Actively Exploited Flaws in Artifactory, ScreenConnect, RouterOS
CISA has flagged five severe vulnerabilities in popular software, including JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS, that are being actively exploited by attackers to gain unauthorized control. These flaws are now added to CISA's Known Exploited Vulnerabilities catalog, serving as a wake-up call for operators to prioritize patching before they become the next target.
CISA Updates Insider Threat Guide to Combat Evolving Risks
The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Insider Threat Mitigation Guide to tackle today's complex risks, offering fresh insights and resources to help organizations stay ahead. This update acknowledges that insider threats are no longer just about disgruntled employees, but also about adapting to emerging trends like AI and remote work.
CISA Revamps Insider Threat Guide with Expanded Mitigation Advice
Stay ahead of insider threats with the latest guidance from CISA's revised Insider Threat Mitigation Guide, your go-to playbook for protecting your organization from evolving security risks. The updated guide offers practical advice on tackling emerging challenges like hybrid work, AI, and more.
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws Ahead of Federal Patch Deadline
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on three critical vulnerabilities in Cisco, Citrix, and Fortinet products, adding them to its list of Known Exploited Vulnerabilities - and federal agencies have just until September 12, 2026 to patch up. These flaws, including a severe CVE-2026-20079 with a CVSS score of 10.0, could leave systems exposed to serious threats if not addressed.
CISA Warns Against PR Spin in IT Outages
When IT outages strike, clear communication is key - and that means ditching the PR spin and getting straight to the facts. The CISA and FBI recommend a straightforward approach: provide regular, transparent updates that separate knowns from unknowns.
US Agencies Warn of Chinese AI Firms' Large-Scale Model Distillation Attacks
US cybersecurity experts have sounded the alarm on a massive AI heist, revealing that six Chinese tech firms have launched large-scale "distillation attacks" on American AI models, siphoning off billions of tokens since late 2022. This brazen cyber theft, involving millions of requests, is believed to have had the backing of the Chinese government.
N-able N-central Flaw Exploited in Wild
A critical vulnerability in N-able N-central has been exploited in the wild, allowing hackers to execute remote code without even needing to log in. A patch was released on September 5, 2026, and federal agencies are required to apply it by September 11, 2026.
Federal Cyber Defense Shifts to Offense-Driven Mindset
The conventional cyber defense approach is no match for modern threats, as attackers often exploit valid credentials, misconfigurations, and low-severity weaknesses to bypass months of patching efforts. A new offense-driven mindset, like CISA's BOD 26-04, is shifting the focus from patch lists to exploitability to better address real-time risk.