Tag: cisa
348 articles
federal funding lifeline Stunning Cut Risks Security
As CISA ends funding to CIS on Oct. 1, thousands of towns and school districts risk losing free threat‑sharing, scanning and incident support — turning an IT funding cut into a public‑safety problem. Without a quick replacement, smaller jurisdictions face costly gaps, fragmented defenses and greater exposure to attackers probing for blind spots.
Cybersecurity Information Sharing Act: Critical or Risky?
What if the law that lets companies and the government swap cyber threat signals overnight simply vanished? With the 2015 CISA at risk amid a possible shutdown, automated feeds, legal protections, and the trusted channels that stop attacks fast could all be thrown into doubt.
AI and machine learning: Must-Have Best Efficiency Boost
From outdated systems to AI-powered workflows, federal agencies can speed services, cut backlogs, and predict risks to stretch scarce resources — but doing it right means modernizing data, upskilling staff, and baking in strong safeguards so innovation boosts efficiency without sacrificing accountability.
Cisco firewalls Urgent Critical Fixes for Risky Flaws
Cisco firewall flaws are being actively exploited — U.S. and U.K. agencies are urging immediate patches and mitigations. Don’t wait: update ASA/FTD devices, boost monitoring, and isolate critical assets now to stop attackers using your perimeter as a foothold.
critical vulnerability in GeoServer: Stunning Risk Exposed
Last year’s GeoServer exploit that breached an unnamed federal agency turned CISA’s mantra assume breach into a wake-up call — proving how quickly widely used open-source tools can become a systemic risk unless agencies speed up patching, segment networks, and shore up visibility.
deepfake phone calls: Must-Have Defenses for Risky Attacks
If a familiar voice can be faked, you can’t rely on phone calls alone—recent research shows deepfake calls are already hitting nearly half of businesses. Start using multi‑channel verification, stronger technical checks, and regular staff training now to stop convincing scams before they cost you money and trust.
Ivanti EPMM Urgent: Must-Have Fixes for Risky Flaws
Urgent: CISA found attackers exploited Ivanti EPMM flaws to push multiple malware families — if your organization uses this MDM, patch immediately and rotate admin credentials. Lock down management access with MFA and monitor console activity now to prevent a potentially wide-scale breach.
Ivanti EPMM Critical Risk: Exclusive Malware Warning
CISA is warning that threat actors have exploited critical Ivanti EPMM flaws (CVE-2025-4427/4428) to drop stealthy loaders and listeners that give attackers remote control and a wide blast radius. If you manage EPMM, patch now, lock down access and credentials, and start looking for suspicious listener and remote-execution activity before it’s too late.
retention incentive program: Stunning Risky Mismanagement
When watchdogs say CISA mismanaged a retention bonus program, it’s not just about wasted money — it’s about trust, talent gaps, and the agency’s ability to defend our networks. The OIG’s findings force a careful balance: tighten controls and accountability without hamstringing efforts to recruit and keep the cyber experts we need.
CVE program: Must-Have Global Control Sparks Risky Debate
CISA wants a bigger role running the CVE vulnerability list — promising more stability and coordination but sparking worries that government control could politicize a vital global standard.
CVE program Must-Have Roadmap for Best Security
CISA just released a roadmap to modernize the CVE program, insisting on public stewardship and vendor neutrality while calling for broader industry–government collaboration to keep vulnerability tracking trustworthy and scalable. If implemented well, it could speed up patching, reduce disputes and harden defenses — but success depends on sustainable funding, transparency and real buy-in from all stakeholders.
TP-Link routers: Must-Fix Risky Vulnerabilities
CISA warns that attackers are actively exploiting multiple vulnerabilities in widely used TP‑Link routers, putting homes and small businesses at risk of persistent compromise. Check for firmware updates, disable remote management, change default passwords, and replace aging devices if you can to close the door on intruders.
Ransomware incidents: Must-Have Resilience or Costly Chaos
Pennsylvania’s Attorney General says “we refused to pay,” choosing to withstand a ransomware attack that has delayed court filings and strained case processing across the state. The decision highlights the painful trade-off between short-term recovery and long-term deterrence—and underscores why public agencies must invest in stronger backups, better defenses, and robust continuity plans.
software procurement Must-Have Guide: Essential Security
CISA’s new Software Acquisition Guide Web Tool puts buyers back in control of supply‑chain risk with practical checklists, vendor assessment criteria and contract language to make secure software purchasing repeatable and auditable. If adopted thoughtfully, it can turn procurement from a blind spot into a frontline defense—though success will hinge on implementation, resources and market incentives.
cyber incident: Maryland’s Stunning, Risky Wake-Up
Maryland has confirmed a cyber incident affecting parts of its transportation system, but officials say all scheduled trips this week will be honored while investigators work to determine the scope. Commuters should stay alert for updates as authorities probe the issue and protect essential services.
SBOM minimums Must-Have Best Practices
CISA is revisiting its 2021 SBOM minimums and asking stakeholders for input to strike the right balance between useful, machine-readable inventories that speed vulnerability response and safeguards that prevent sensitive detail from aiding attackers. The update could nudge industry toward interoperable, automatable SBOMs while building practical options for protecting proprietary or security-sensitive information.
reducing cyber risk: Must-Have Culture for Best Defense
Technology can only take you so far—attackers now target people and culture, not just systems. Building a stronger security culture with clear policies, consistent training, and aligned incentives is the simplest, most effective way to cut cyber risk.
optimizing cloud use: Must-Have Best Federal Resilience
Moving to the cloud was just the beginning — federal agencies are now optimizing configurations, identity controls, and automation to boost security, lower costs, and keep critical services running during outages or attacks. Treating resilience as an ongoing practice helps isolate failures faster, speed recovery, and better protect citizens.
election workers Must-Have Shield Against Dire Threats
Election workers warn federal protections that once shielded them from harassment and disinformation are fraying just as threats escalate. With fewer resources and rising intimidation, understaffed counties are struggling to recruit staff and safeguard the vote.
Industrial control systems: Must-Have Best Practices
CISA is urging operators of power grids, water plants, and factories to stop treating industrial control systems like IT checkboxes and finally harden OT with layered defenses and cross‑functional programs. Patchwork fixes and convenient remote connections are leaving critical infrastructure exposed — it’s time to lock the front door before someone walks in.
N‑able N‑central Critical Risk: Urgent Must-Fix Flaws
Heads-up: CISA has added two N‑able N‑central flaws to its KEV catalog after evidence of active exploitation, so MSPs and customers should urgently locate, patch or isolate affected RMM instances and tighten admin controls. Because a compromised RMM can give attackers broad access, demand proof of remediation and enforce strong segmentation, MFA, and monitoring now.
AI Cybersecurity Threats: Must-Have Best Practices
AI can be both defender and threat—and NIST’s NCCoE is leading virtual sessions to shape the Cyber AI Profile, offering practical guidance to spot AI-enabled risks and harden defenses. Whether you’re a technologist, policymaker, or business leader, this essential guide shows how to harness AI safely and stay ahead of evolving cyber threats.
WinRAR vulnerability: Stunning RomCom Risk Exposed
A newly discovered zero-day in WinRAR (CVE-2025-8088) is being weaponized by the RomCom hacking crew, turning a tool used by millions into a malware delivery system. If you use WinRAR, update and patch now—this is a wake-up call about how convenience can become a major security risk.
DEF CON hackers: Stunning, Risky Water Defenders
When DEF CON hackers swap notoriety for expertise, five pilot projects across four states are already shoring up America’s vulnerable water systems—proving that the very people we fear might be the ones who can keep our taps safe. It’s a hopeful, urgent reminder that with the right collaboration and investment, unconventional allies could be the key to protecting public safety.