Government
The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA"
ICS/OT
Many ICS vendors have not released new advisories for the May 2026 Patch Tuesday.
Government
Agency issued guidance and calls on operators to build resilient OT environments capable of surviving extended isolation and cyber compromise.
Government
The Trump administration says the FY2027 budget refocuses CISA on its core mission: protecting federal agencies and critical infrastructure.
Incident Response
Police in Germany physically warned organizations about the critical PTC Windchill vulnerability tracked as CVE-2026-4681.
Government
Madhu Gottumukkala has been assigned to a new role within the Department of Homeland Security.
Government
CISA is currently operating at roughly 38% capacity (888 out of 2,341 staff) due to the DHS shutdown that began February 14, 2026.
Vulnerabilities
Disclosed at the end of January, the SolarWinds vulnerability was likely exploited as a zero-day since December 2025.
Network Security
Edge devices that are no longer supported have been targeted in attacks by state-sponsored hackers, the US says.
Government
CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks.
Vulnerabilities
The Emergency Directives were retired because they achieved objectives or targeted vulnerabilities included in the KEV catalog.
Vulnerabilities
With 24 new vulnerabilities known to be exploited by ransomware groups, the list now includes 1,484 software and hardware flaws.
Malware & Threats
Warp Panda has been using the BrickStorm, Junction, and GuestConduit malware in attacks against US organizations.
Mobile & Wireless
CISA has described the techniques used by attackers and pointed out that the focus is on high-value individuals.
Government
Federal agencies have reported as ‘patched’ ASA or FTD devices running software versions vulnerable to attacks.
Training & Awareness
This year’s theme focuses on government entities and small and medium-sized businesses that are vital to protecting the systems and services that keep our...
Government
The CISA is set to expire on September 30, 2025, raising urgent questions about risk, politics, and the future of threat intelligence.
Vulnerabilities
The hackers remained undetected for three weeks, deploying China Chopper, remote access scripts, and reconnaissance tools.
Malware & Threats
Hackers chained two Ivanti EPMM vulnerabilities to collect system information, dump credentials, and execute malware.
Government
CISA says it is time for the CVE Program to focus on improving trust, responsiveness, and the caliber of vulnerability data.
Artificial Intelligence
Anthropic takes Fable 5 and Mythos 5 offline to comply with a directive from the Trump administration to prevent use by foreign nationals.
Artificial Intelligence
Incident Response
Vulnerabilities
Data Breaches
Someone posted fake VRChat and Discord data breach reports on the system, prompting the Maine AG to take action.
Supply Chain Security
Management & Strategy
Artificial Intelligence
Vulnerabilities
