Tag: cisa
347 articles
CISA Uncovers Firestarter Backdoor in Federal Network
The Firestarter backdoor was a masterfully crafted threat that allowed attackers to maintain secret access to compromised networks even after they'd been updated, essentially giving them a backdoor key to re-enter without having to exploit new vulnerabilities. This sneaky tactic left victims vulnerable to repeat attacks, highlighting the need for robust cybersecurity measures.
Hackers Exploit Cisco Firewalls with Persistent Backdoor
A custom implant called Firestarter can infiltrate Cisco network security devices, evading patches and routine reboots by manipulating device boot configuration to restore itself. Only a hard reboot, physically disconnecting the device from its power supply, can clear the persistence mechanism from memory.
Cybersecurity Nominee Plankey Withdraws Amid Senate Gridlock
Sean Plankey, a highly qualified cybersecurity expert with a background at the Department of Energy and National Security Council, has withdrawn his bid to lead the U.S. Cybersecurity and Infrastructure Security Agency after a 13-month confirmation process stalled in the Senate. His nomination, which had initially received committee approval, ultimately succumbed to procedural delays and partisan holds.
CISA Mandates Patching of Exploited BlueHammer Flaw in Federal Systems
Don't let your federal systems become an easy target: CISA is mandating the patching of the exploited BlueHammer flaw to prevent malicious cyber actors from gaining a foothold. A high-severity vulnerability in Microsoft Defender can allow low-privileged users to gain SYSTEM permissions - but a patch is available.
CISA Nominee Plankey Withdraws Amid Senate Gridlock
Sean Plankey, the nominee to lead the Cybersecurity and Infrastructure Security Agency, has withdrawn his nomination, citing Senate gridlock that had stalled his confirmation for 13 months. In a letter, he asked President Trump to remove his nomination, expressing support for the department's leadership.
CISA Warns of Active Cisco SD-WAN Exploits
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority warning to federal agencies, ordering them to patch three critical Cisco SD-WAN vulnerabilities within four days after discovering they're being actively exploited by hackers. This urgent directive comes after Cisco patched the flaws in its Catalyst SD-WAN Manager platform.
CISA Warns of Active Exploitation of SD-WAN Flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a newly discovered SD-WAN flaw that's already being exploited by attackers, giving US government agencies just four days to secure vulnerable systems. Time is of the essence in this urgent directive, which CISA has framed as an operational emergency.
CISA Catalog Adds 8 Exploited Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) just beefed up its catalog of actively exploited software flaws by adding eight new entries, including three Cisco vulnerabilities and a high-severity PaperCut flaw. Federal agencies now have until April and May 2026 to mitigate these risks.
CISA Warns of Active Exploits in Apache ActiveMQ Vulnerability
A 13-year-old vulnerability in Apache ActiveMQ has suddenly become a pressing concern, prompting the Cybersecurity and Infrastructure Security Agency (CISA) to issue an urgent directive for federal agencies to patch the flaw within two weeks. Attackers are already exploiting this long-dormant vulnerability, making swift action a critical priority.
CISA Warns of Active Exploitation of Apache ActiveMQ Flaw
A high-severity vulnerability in Apache ActiveMQ, hidden for 13 years, is now being actively exploited by attackers just days after a patch was released, putting organizations that rely on the software at risk. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning, urging companies to take immediate action to protect themselves.
CISA Flags Apache ActiveMQ Flaw as Actively Exploited
The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a high-severity flaw in Apache ActiveMQ Classic, warning that it's being actively exploited by hackers - and giving organizations a narrow window to assess their exposure and respond. With a CVSS score of 8.8, this vulnerability is a critical threat that demands immediate attention.
CISA Shutdown Cuts Staffing to 40%, Threatens Network Defense
With the Cybersecurity and Infrastructure Security Agency operating at just 40% staffing due to shutdown disruptions, the nation's cyber defenses are facing a critical vulnerability. The agency's acting director warns that major staffing gaps are undermining federal network defense, putting the country at risk.
ENISA Pursues Elevated Status in Global CVE Program
The European Union's cybersecurity agency, ENISA, is taking a major step forward in global cybersecurity by seeking top-tier status in the prestigious CVE Program, a move that could reshape the landscape of vulnerability management. If approved, ENISA would join an elite group of just three organizations with the highest level of authority in this critical program.
CISA Warns of Exploited Windows Task Host Vulnerability
Stay one step ahead of cyber threats by securing your Windows systems - a recently exploited vulnerability in Windows Task Host could let attackers escalate privileges and take full control of your machines. The Cybersecurity and Infrastructure Security Agency (CISA) has flagged this issue as high-risk, urging swift action to protect affected systems.
CISA Warns of Active Attacks on Decade-Old Excel Vulnerability
A 17-year-old Microsoft Excel vulnerability has become a pressing public safety concern after the US cybersecurity agency CISA added it to its exploited-vulnerabilities list, warning of active attacks. This outdated flaw is now being actively exploited, making it crucial to patch immediately.
CISA Pushes AI Firms to Join Vulnerability Disclosure Efforts
The Cybersecurity and Infrastructure Security Agency (CISA) is calling on AI companies to take a more active role in disclosing vulnerabilities, sparking a crucial conversation about who's responsible for revealing flaws in AI systems. By joining forces, CISA and AI firms can work together to strengthen vulnerability disclosure efforts and protect against potential threats.
CISA Scraps Internships Amid Funding Lapse
The Cybersecurity and Infrastructure Security Agency's sudden cancellation of summer internships for cyber scholarship students has left aspiring cybersecurity professionals in limbo, compounding existing pressures on the program. This move comes as a result of a Department of Homeland Security funding lapse, putting the development of a specialized cyber workforce at risk.
CISA Recalls Furloughed Workers Amid Funding Lapse
In a surprise move, the Cybersecurity and Infrastructure Security Agency (CISA) has called back furloughed workers despite a funding lapse, leaving many wondering what this means for operational duties and the nation's cybersecurity. With Congressional negotiations still unresolved, CISA's directive has sparked a mix of relief, concern, and unanswered questions.
CISA Awaits Senate Confirmation of Director Plankey Amid Rising Cyber Threats
As cyber threats escalate and budget cuts loom, the Cybersecurity and Infrastructure Security Agency is in urgent need of a Senate-confirmed director - will Secretary Mullin help get the job done by urging the Senate to confirm Sean Plankey? Time is of the essence, with the nation's cyber security hanging in the balance.
CISA Mandates Emergency Patch for Exploited Ivanti EPMM Flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert, ordering US government agencies to patch a critical vulnerability in Ivanti Endpoint Manager Mobile (EPMM) within just four days, as the flaw has been under active exploitation since January. With a Sunday deadline looming, federal IT teams are racing against the clock to secure systems and prevent further attacks.
CISA Warns of Iranian Cyber Actors Targeting US Infrastructure
The Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm: Iranian-linked cyber actors are targeting US critical infrastructure, posing a threat to public safety, services, and commerce. American organizations must take immediate action to assess their risk and bolster defenses.
Iranian Hackers Infiltrate US Critical Infrastructure via OT Weaknesses
US critical infrastructure providers are reeling from a wake-up call after Iranian-backed hackers exploited weaknesses in internet-exposed operational technology assets, causing disruption and financial loss. The alarming breach, revealed by the Cybersecurity and Infrastructure Security Agency, highlights the high stakes of vulnerable systems.
Iranian Actors Exploit OT Vulnerabilities in US Critical Infrastructure
US critical infrastructure is under threat as Iranian-linked actors exploit vulnerabilities in operational technology (OT) systems, allowing them to gain network access and potentially disrupt operations. The alarming warning from federal agencies highlights the urgent need to secure the nation's industrial backbone from these increasingly targeted attacks.
White House Slashes CISA Funding by $707 Million
The White House's plan to slash $707 million from CISA funding raises critical questions about the impact on the agency's vital services and the trade-offs policymakers will have to make. This massive cut will have far-reaching consequences for the people who rely on CISA's work to keep them safe and secure.