ICS/OT
Government agencies are sharing recommendations following attacks claimed by pro-Russian hacktivists on ICS/OT systems.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA"
Artificial Intelligence
New CISA guidelines categorize AI risks into three significant types and pushes a four-part mitigation strategy.
Data Breaches
The US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts "presents a grave and unacceptable risk to federal agencies."
Data Breaches
The US government issues a red-alert for what appears to be a massive supply chain breach at Sisense, a company that sells big-data analytics...
Government
CISA's Malware Next-Gen system is now available for any organization to submit malware samples and other suspicious artifacts for analysis.
Government
CISA is seeking comment on the implementation of CIRCIA, which will cost $2.6 billion and will impact 316,000 entities.
Vulnerabilities
CISA and the FBI issue a secure-by-design alert on eliminating SQL injection vulnerabilities from software.
Government
GAO study finds that CISA does not have enough staff to respond to significant OT attacks in multiple locations at the same time.
Application Security
Concluding a two-day OSS security summit, CISA details key actions to help improve open source security.
Government
White House calls for the “timely, complete, and consistent” publication of CVE and CWE data to help solve the security metrics problem.
Malware & Threats
US government and allies expose TTPs used by notorious Russian hacking teams and warn of the targeting of dormant cloud accounts.
Email Security
CISA has added the Roundcube flaw tracked as CVE-2023-43770 to its known exploited vulnerabilities catalog.
Malware & Threats
New CISA alert includes technical mitigations to harden attack surfaces and instructions to hunt for the Chinese government-backed hackers.
Nation-State
Ivanti is struggling to hit its own timeline for the delivery of patches for critical -- and already exploited -- flaws in its flagship...
ICS/OT
CISA informs organizations that Westermo Lynx switches are affected by eight vulnerabilities and some devices are reportedly exposed to the internet.
Malware & Threats
The US government’s cybersecurity agency CISA ramps up the pressure on organizations to mitigate two exploited Ivanti VPN vulnerabilities.
Government
CISA, FBI and EPA document aims to help water and wastewater organizations improve their cyber resilience and incident response.
Incident Response
A joint advisory from CISA and the FBI warns about Androxgh0st malware attacks ensnaring devices in a botnet.
Malware & Threats
CISA released ICS advisories for FXC router and QNAP NRV flaws and added them to its known exploited vulnerabilities catalog.
ICS/OT
CISA is advising device makers to stop relying on customers to change default passwords following attacks targeting water sector ICS.
IoT Security
The new attack technique uses smartwatches to capture ultrasonic covert communication in air-gapped environments and exfiltrate data.
Artificial Intelligence
Incident Response
Malware & Threats
Government
Citizen Lab publishes forensic proof that spyware maker Paragon can compromise up-to-date iPhones. Journalists in Europe among victims.
Artificial Intelligence
Artificial Intelligence
