Vulnerabilities
With 24 new vulnerabilities known to be exploited by ransomware groups, the list now includes 1,484 software and hardware flaws.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA"
Malware & Threats
Warp Panda has been using the BrickStorm, Junction, and GuestConduit malware in attacks against US organizations.
Mobile & Wireless
CISA has described the techniques used by attackers and pointed out that the focus is on high-value individuals.
Government
Federal agencies have reported as ‘patched’ ASA or FTD devices running software versions vulnerable to attacks.
Training & Awareness
This year’s theme focuses on government entities and small and medium-sized businesses that are vital to protecting the systems and services that keep our...
Government
The CISA is set to expire on September 30, 2025, raising urgent questions about risk, politics, and the future of threat intelligence.
Vulnerabilities
The hackers remained undetected for three weeks, deploying China Chopper, remote access scripts, and reconnaissance tools.
Malware & Threats
Hackers chained two Ivanti EPMM vulnerabilities to collect system information, dump credentials, and execute malware.
Government
CISA says it is time for the CVE Program to focus on improving trust, responsiveness, and the caliber of vulnerability data.
Application Security
SBOM adoption will drive software supply chain security, decreasing risks and costs, and improving transparency.
Vulnerabilities
CISA urges federal agencies to immediately patch an exploited arbitrary file write vulnerability in Git that leads to remote code execution.
Application Security
CISA has updated the Minimum Elements for a Software Bill of Materials (SBOM) guidance and is seeking public comment.
Government
Committee Members voted to recommend Sean Plankey for director of the Cybersecurity and Infrastructure Security Agency.
Ransomware
The US government has issued an alert on the Interlock ransomware, which targets organizations via drive-by download attacks.
Government
Casie Antalis is the new program director of the Joint Cyber Coordination Group at the Cybersecurity and Infrastructure Security Agency.
Malware & Threats
CISA warns that vulnerable SimpleHelp RMM instances have been exploited against a utility billing software provider’s customers.
Ransomware
Play ransomware attacks have hit roughly 900 organizations and recently involved the exploitation of SimpleHelp vulnerabilities.
Incident Response
New report says organizations should always consider environmental context when assessing the impact of vulnerabilities in CISA KEV catalog.
Malware & Threats
CISA warns companies of a widespread campaign targeting a Commvault vulnerability to hack Azure environments.
Malware & Threats
Russian military intelligence hackers intensify targeting of Western logistics and technology companies moving supplies into Ukraine.
Vulnerabilities
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.
Vulnerabilities
Malware & Threats
Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.
Artificial Intelligence
Identity & Access
