Organization
67 Interestana reports mention CISA, newest first. Each is summarised from the original reporting and links back to its publisher.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a stark warning regarding a substantial rise in cyberattacks directed at internet-exposed programmable logic controllers (PLCs) within the nation's water and wastewater systems.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog.
A Russian state-sponsored espionage group successfully exploited a previously unknown vulnerability in Zimbra's webmail client for several months, gaining access to sensitive information within Western organizations. The exploitation allowed the attackers to exfiltrate the last 90 days of emails…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning this week detailing how the Russian state-sponsored hacking group Laundry Bear, also identified as Void Blizzard, is actively targeting organizations utilizing Zimbra Collaboration email servers.
The Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent directive on Tuesday, mandating U.S. federal agencies to prioritize patching a critical remote code execution (RCE) vulnerability within the Langflow visual framework.
The Cybersecurity and Infrastructure Security Agency (CISA) issued a directive on Thursday, compelling federal agencies to immediately address two critical vulnerabilities within the Fortinet FortiSandbox threat detection platform. These vulnerabilities, identified as CVE-2024-3657 and CVE-2024-3658, are reportedly being actively exploited…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical remote code execution (RCE) vulnerability affecting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog on Thursday. This newly patched flaw, identified as CVE-2026-58644, carries a critical CVSS…
The Cybersecurity and Infrastructure Security Agency (CISA) issued a directive on Friday, October 27, 2023, ordering all federal civilian executive branch agencies to patch a critical vulnerability in Oracle E-Business Suite by Saturday, October 28, 2023.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Tuesday, March 12, 2024, detailing that malicious actors are actively exploiting three vulnerabilities in Internet-exposed, on-premises SharePoint Server instances.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning this week regarding actively exploited vulnerabilities in two popular Joomla extensions: iCagenda and Balbooa Forms. These flaws allow attackers to achieve remote code execution (RCE) by uploading arbitrary files…
The Cybersecurity and Infrastructure Security Agency (CISA) has published a postmortem report detailing the lessons learned from a significant data leak that exposed dozens of internal CISA credentials, including AWS Govcloud keys, in a public GitHub repository.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical security vulnerabilities affecting iCagenda and Balbooa extensions for the Joomla content management system to its Known Exploited Vulnerabilities (KEV) catalog.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a directive on Monday, mandating that all federal agencies prioritize patching a critical authentication bypass vulnerability within the Langflow visual framework.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a directive on May 22, 2024, compelling federal civilian executive branch agencies to address a critical vulnerability within the Adobe ColdFusion web application development platform.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog on Tuesday, citing evidence of active exploitation. These vulnerabilities are now subject to mandatory patching for federal agencies.
Sam Altman, CEO of OpenAI, is reportedly in discussions to grant the U.S. government a 5% stake in the artificial intelligence company. At OpenAI's current valuation, this proposed stake would be worth approximately $320 for every American household.
The Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Wednesday that attackers have begun actively exploiting a critical remote code execution (RCE) vulnerability in Microsoft SharePoint. This flaw, identified as CVE-2023-29357, was patched by Microsoft in its May…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical vulnerability affecting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog on Wednesday, citing evidence of active exploitation.
The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have updated their March advisory concerning Russian intelligence operations targeting Signal users. The latest warning, issued this week, details an escalated phishing tactic where attackers are…