Risk Management
Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA"
Vulnerabilities
Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known Exploited Vulnerabilities catalog, with federal agencies...
Government
The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries.
ICS/OT
Many ICS vendors have not released new advisories for the May 2026 Patch Tuesday.
Government
Agency issued guidance and calls on operators to build resilient OT environments capable of surviving extended isolation and cyber compromise.
Government
The Trump administration says the FY2027 budget refocuses CISA on its core mission: protecting federal agencies and critical infrastructure.
Incident Response
Police in Germany physically warned organizations about the critical PTC Windchill vulnerability tracked as CVE-2026-4681.
Government
Madhu Gottumukkala has been assigned to a new role within the Department of Homeland Security.
Government
CISA is currently operating at roughly 38% capacity (888 out of 2,341 staff) due to the DHS shutdown that began February 14, 2026.
Vulnerabilities
Disclosed at the end of January, the SolarWinds vulnerability was likely exploited as a zero-day since December 2025.
Network Security
Edge devices that are no longer supported have been targeted in attacks by state-sponsored hackers, the US says.
Government
CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks.
Vulnerabilities
The Emergency Directives were retired because they achieved objectives or targeted vulnerabilities included in the KEV catalog.
Vulnerabilities
With 24 new vulnerabilities known to be exploited by ransomware groups, the list now includes 1,484 software and hardware flaws.
Malware & Threats
Warp Panda has been using the BrickStorm, Junction, and GuestConduit malware in attacks against US organizations.
Mobile & Wireless
CISA has described the techniques used by attackers and pointed out that the focus is on high-value individuals.
Government
Federal agencies have reported as ‘patched’ ASA or FTD devices running software versions vulnerable to attacks.
Training & Awareness
This year’s theme focuses on government entities and small and medium-sized businesses that are vital to protecting the systems and services that keep our...
Government
The CISA is set to expire on September 30, 2025, raising urgent questions about risk, politics, and the future of threat intelligence.
Vulnerabilities
The hackers remained undetected for three weeks, deploying China Chopper, remote access scripts, and reconnaissance tools.
Vulnerabilities
The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.
Vulnerabilities
Artificial Intelligence
Endpoint Security
Artificial Intelligence
Artificial Intelligence
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and...
Cybersecurity Funding
Cybersecurity Funding
Cybersecurity Funding
Cybersecurity Funding
