Vulnerabilities
CISA is urging federal agencies to patch a recent AMI BMC vulnerability and a half-a-decade-old bug in FortiOS by July 17.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA KEV"
Vulnerabilities
Qualys has disclosed two Linux vulnerabilities that can be chained for full root access, and CISA added a flaw to its KEV catalog.
Vulnerabilities
CISA warns that a vulnerability impacting multiple discontinued TP-Link router models is exploited in the wild.
Incident Response
New report says organizations should always consider environmental context when assessing the impact of vulnerabilities in CISA KEV catalog.
Artificial Intelligence
CISA warns organizations that threat actors are exploiting a critical-severity vulnerability in low-code AI builder Langflow.
Vulnerabilities
PoC code targeting two exploited SonicWall flaws was published just CISA added them to the KEV catalog.
Vulnerabilities
CISA urges immediate patching for recently disclosed Broadcom, Commvault, and Qualitia vulnerabilities exploited in the wild.
Vulnerabilities
CISA has added fresh CentreStack and Windows CLFS vulnerabilities to the Known Exploited Vulnerabilities catalog.
Vulnerabilities
CISA has added an absolute path traversal bug in Nakivo Backup and Replication to its Known Exploited Vulnerabilities list.
Vulnerabilities
CISA has added three critical-severity flaws in Ivanti EPM to its Known Exploited Vulnerabilities catalog.
Vulnerabilities
Exploitation has been known for months or years for most of the latest vulnerabilities added by CISA to its KEV catalog.
Vulnerabilities
CISA has added CVE-2024-20953, an Oracle Agile PLM vulnerability patched in January 2024, to its KEV catalog.
Vulnerabilities
CISA has added a Craft CMS flaw tracked as CVE-2025-23209 to its Known Exploited Vulnerabilities (KEV) catalog.
Vulnerabilities
Palo Alto Networks is warning customers that a second vulnerability patched in February is being exploited in attacks.
Vulnerabilities
CISA has added CVE-2024-29059, a flaw affecting Microsoft .NET, to its Known Exploited Vulnerabilities catalog.
Vulnerabilities
CISA has added the JQuery flaw CVE-2020-11023, previously linked to APT1, to its Known Exploited Vulnerabilities (KEV) catalog.
Malware & Threats
Attackers have been exploiting a second vulnerability in BeyondTrust’s remote management solutions, CISA warns.
Vulnerabilities
CISA says two recently disclosed path traversal vulnerabilities in the Mitel MiCollab collaboration platform have been exploited in attacks.
Vulnerabilities
CISA is urging federal agencies to patch a recent critical vulnerability in BeyondTrust remote access products in one week.
Government
CISA has updated its National Cyber Incident Response Plan in line with the changing threat landscape and is now seeking public comment.
ICS/OT
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
Vulnerabilities
Malware & Threats
Artificial Intelligence
Cybercrime
Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.
Cybersecurity Funding
Vulnerabilities
Vulnerabilities
