Organization
67 Interestana reports mention CISA, newest first. Each is summarised from the original reporting and links back to its publisher.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added a critical security flaw affecting the ownCloud file-sharing platform to its Known Exploited Vulnerabilities (KEV) catalog on Thursday. This addition follows confirmed reports that a Chinese-speaking threat actor successfully weaponized…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive mandating all federal civilian executive branch agencies to patch a critical remote code execution (RCE) vulnerability affecting Citrix NetScaler appliances.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Wednesday, citing evidence of active exploitation. This action mandates that federal agencies patch these vulnerabilities by a specific deadline to mitigate…
Attackers are actively exploiting a critical-severity vulnerability within the Gitea self-hosted Git service, enabling them to execute code injection attacks and gain unauthorized access to systems. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on May 21…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Tuesday regarding the active exploitation of a critical security vulnerability within the Gitea software. This vulnerability, identified as CVE-2026-60004, carries a high CVSS score of 9.8, indicating…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security vulnerability affecting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive mandating that U.S. federal civilian executive branch agencies urgently patch a critical vulnerability affecting the Zimbra Collaboration Suite (ZCS).
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive mandating that all U.S. federal agencies prioritize the patching of two actively exploited vulnerabilities within the TrueConf Server platform.
The U.S. government issued a warning on Wednesday regarding an "active threat" that utilizes artificial intelligence (AI)-generated exploit scripts to target critical infrastructure organizations within the country. This emergent threat specifically targets Siemens S7 Series Programmable Logic Controllers (PLCs)…
The Cybersecurity and Infrastructure Security Agency (CISA) issued a warning to federal agencies on May 15, 2024, detailing that threat actors are actively exploiting a critical vulnerability within the MLflow open-source AI engineering platform.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Tuesday, October 24, 2023, the addition of four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities are confirmed to be actively exploited in the wild, posing…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are actively exploiting a high-severity vulnerability within the Windows Task Host service. This confirmation follows an earlier advisory in April that initially flagged the vulnerability as being…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical flaw impacting the Ray framework to its Known Exploited Vulnerabilities (KEV) catalog on Monday, citing evidence of active exploitation.
The Cybersecurity and Infrastructure Security Agency (CISA) confirmed on August 17, 2023, that ransomware gangs have begun actively exploiting a high-severity remote code execution (RCE) vulnerability within Microsoft SharePoint. This critical flaw, identified as CVE-2023-29357, allows unauthenticated attackers to execute…
The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware groups are actively exploiting two recently patched vulnerabilities affecting SonicWall's Secure Mobile Access (SMA) 1000 series appliances. These exploits target a maximum-severity Server-Side Request Forgery (SSRF) flaw, identified…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that malicious actors are actively exploiting a critical-severity command injection vulnerability within Progress Kemp LoadMaster devices. This vulnerability, identified as CVE-2024-1597, allows unauthenticated attackers to execute arbitrary commands…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added a critical-severity security flaw affecting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog on Friday, March 15, 2024.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical remote code execution (RCE) vulnerability in on-premise versions of JetBrains TeamCity that is currently being actively exploited in the wild.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive mandating federal agencies to address critical vulnerabilities within three days. These vulnerabilities are present in IBM Langflow, N-central, and Apache Tomcat, and CISA has confirmed they are actively…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added a significant security vulnerability affecting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog on Monday. This addition follows numerous reports indicating that the flaw is being actively exploited…