CISA

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing their exploitation by a China-linked threat actor identified as Flax Typhoon.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added a critical security vulnerability affecting Fortinet's FortiMail email security gateway to its Known Exploited Vulnerabilities (KEV) catalog on Thursday, March 7, 2024.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities (KEV) catalog on Wednesday. This addition follows credible reports indicating that the vulnerability is currently…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on May 23, 2024, regarding a critical vulnerability present in MikroTik RouterOS. This flaw, designated CVE-2023-30799, allows for pre-authentication remote code execution (RCE) and can also lead…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Sunday, March 10, 2024, that it has added two critical vulnerabilities affecting Citrix NetScaler Application Delivery Controller (ADC) and Gateway products to its Known Exploited Vulnerabilities (KEV) catalog.

The Cybersecurity and Infrastructure Security Agency (CISA) issued a directive over the weekend, compelling U.S. federal civilian executive branch agencies to patch two critical vulnerabilities affecting Citrix NetScaler appliances. These vulnerabilities, identified as CVE-2023-4966 and CVE-2023-4967, are being actively exploited…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added two significant security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Friday, citing concrete evidence of their active exploitation in the wild.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of critical vulnerabilities affecting enterprise software products from Microsoft, WSO2, and Adobe Commerce. These exploits pose significant risks to organizations, enabling unauthorized access and potential…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two critical security flaws affecting WSO2 and Adobe Commerce, including Magento, to its Known Exploited Vulnerabilities (KEV) catalog on Thursday, March 7, 2024.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), a division of the Department of Homeland Security, released a 13-page election infrastructure security plan on Thursday, approximately 40 days before the November midterm elections.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive on March 19, 2024, mandating federal agencies to patch a critical vulnerability affecting Zyxel GS1900 series network switches.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, indicating that both flaws are currently being actively exploited by malicious actors.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a security alert regarding the active exploitation of three distinct vulnerabilities within the Linux kernel. One of these flaws has been classified as critical, indicating a significant risk to systems…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Friday, October 25, 2024, the addition of three security vulnerabilities affecting the Linux kernel to its catalog of Known Exploited Vulnerabilities (KEV).

Attackers are actively exploiting a critical-severity vulnerability within ConnectWise ScreenConnect, a remote access solution, according to an alert issued by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 14, 2024.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on September 21, 2023, alerting security teams that ransomware gangs have begun actively exploiting a critical remote code execution (RCE) vulnerability in VMware vCenter Server.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added five previously undisclosed security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. This action signifies that these flaws are currently being actively exploited by malicious actors in real-world attacks…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday, August 28, 2024, officially added three significant cybersecurity vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These flaws impact widely used products from major technology vendors Cisco, Citrix, and Fortinet.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are actively exploiting a critical remote code execution (RCE) vulnerability within WatchGuard's Firebox firewall appliances. This confirmation follows CISA's initial advisory in December 2023, which flagged…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Wednesday the addition of seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities have been actively targeted by malicious actors, indicating their significant risk to organizations.