Organization
20 Interestana reports mention U.S. Cybersecurity and Infrastructure Security Agency, newest first. Each is summarised from the original reporting and links back to its publisher.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added a critical security vulnerability affecting Fortinet's FortiMail email security gateway to its Known Exploited Vulnerabilities (KEV) catalog on Thursday, March 7, 2024.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Sunday, March 10, 2024, that it has added two critical vulnerabilities affecting Citrix NetScaler Application Delivery Controller (ADC) and Gateway products to its Known Exploited Vulnerabilities (KEV) catalog.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added two significant security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Friday, citing concrete evidence of their active exploitation in the wild.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), a division of the Department of Homeland Security, released a 13-page election infrastructure security plan on Thursday, approximately 40 days before the November midterm elections.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Wednesday, October 25, 2023, alerting federal civilian executive branch (FCEB) agencies to the active exploitation of a critical vulnerability in JetBrains' TeamCity software.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive on March 19, 2024, mandating federal agencies to patch a critical vulnerability affecting Zyxel GS1900 series network switches.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, indicating that both flaws are currently being actively exploited by malicious actors.
North Korean state-sponsored hacking groups have been actively targeting software developers and their employers by posing as recruiters and offering seemingly legitimate job opportunities, according to a joint advisory issued by cybersecurity agencies in the United States, South Korea…
Attackers are actively exploiting a critical-severity vulnerability within ConnectWise ScreenConnect, a remote access solution, according to an alert issued by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 14, 2024.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on September 21, 2023, alerting security teams that ransomware gangs have begun actively exploiting a critical remote code execution (RCE) vulnerability in VMware vCenter Server.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on June 12, 2024, detailing that malicious actors are actively exploiting a maximum-severity vulnerability within GitLab. This critical flaw, identified as CVE-2024-24784, allows for unauthorized access to sensitive information…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are actively exploiting a critical remote code execution (RCE) vulnerability within WatchGuard's Firebox firewall appliances. This confirmation follows CISA's initial advisory in December 2023, which flagged…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical pre-authentication remote code execution (RCE) vulnerability affecting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog. This designation, announced on Tuesday, mandates that Federal Civilian Executive Branch…
Attackers are actively exploiting a critical-severity vulnerability within the Gitea self-hosted Git service, enabling them to execute code injection attacks and gain unauthorized access to systems. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on May 21…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Tuesday regarding the active exploitation of a critical security vulnerability within the Gitea software. This vulnerability, identified as CVE-2026-60004, carries a high CVSS score of 9.8, indicating…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that malicious actors are actively exploiting a critical-severity command injection vulnerability within Progress Kemp LoadMaster devices. This vulnerability, identified as CVE-2024-1597, allows unauthenticated attackers to execute arbitrary commands…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical remote code execution (RCE) vulnerability in on-premise versions of JetBrains TeamCity that is currently being actively exploited in the wild.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added three critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on August 5, 2026, based on confirmed evidence of their active exploitation in real-world cyberattacks.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Cyber Security Centre (ACSC) have jointly released new guidance for critical infrastructure organizations. This guidance strongly recommends preparing to isolate vital operational technology (OT) systems in anticipation…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical security vulnerabilities affecting iCagenda and Balbooa extensions for the Joomla content management system to its Known Exploited Vulnerabilities (KEV) catalog.