Government
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA"
ICS/OT
Revision 4 of NIST’s operational technology security guide is open for public comments until November 30.
Government
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Government
Complementing Zero Trust models, decoys enable organizations to detect, observe, and block malicious activity in their environments.
ICS/OT
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
Vulnerabilities
The flaws can be exploited for remote code execution, authentication bypass, and device takeover.
ICS/OT
CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems.
Risk Management
Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.
Vulnerabilities
Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known Exploited Vulnerabilities catalog, with federal agencies...
Government
The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries.
ICS/OT
Many ICS vendors have not released new advisories for the May 2026 Patch Tuesday.
Government
Agency issued guidance and calls on operators to build resilient OT environments capable of surviving extended isolation and cyber compromise.
Government
The Trump administration says the FY2027 budget refocuses CISA on its core mission: protecting federal agencies and critical infrastructure.
Incident Response
Police in Germany physically warned organizations about the critical PTC Windchill vulnerability tracked as CVE-2026-4681.
Government
Madhu Gottumukkala has been assigned to a new role within the Department of Homeland Security.
Government
CISA is currently operating at roughly 38% capacity (888 out of 2,341 staff) due to the DHS shutdown that began February 14, 2026.
Vulnerabilities
Disclosed at the end of January, the SolarWinds vulnerability was likely exploited as a zero-day since December 2025.
Network Security
Edge devices that are no longer supported have been targeted in attacks by state-sponsored hackers, the US says.
Government
CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks.
Vulnerabilities
The Emergency Directives were retired because they achieved objectives or targeted vulnerabilities included in the KEV catalog.
Vulnerabilities
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.
Vulnerabilities
Malware & Threats
Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.
Artificial Intelligence
Identity & Access
