Ransomware
The US oil giant updated an SEC filing to confirm malicious hackers “accessed and exfiltrated information” from its corporate systems.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA"
Ransomware
Iranian state-sponsored APT Lemon Sandstorm is working closely with ransomware groups on monetizing network intrusions.
Government
Government agencies in the US and allied countries have released guidance on how organizations can define a baseline for event logging best practices.
Government
Clark Construction has been tasked with building the 630,000 square foot sustainable state-of-the-art facility for CISA.
Vulnerabilities
CISA is warning organizations about abuse of Cisco Smart Install feature, as Cisco is notifying customers about critical phone vulnerabilities it’s not patching.
CISO Strategy
SecurityWeek fireside chat: Google Cloud CISO on CISA’s secure-by-design initiatives, government regulations, holding vendors accountable, and transformational security leadership.
ICS/OT
Progress Software calls attention to a critical remote code execution flaw in the Telerik Report Server product.
Application Security
CISA says a SILENTSHIELD red team assessment found gaping holes in the security posture of a federal civilian executive branch organization.
Application Security
Most critical open source software contains code written in a memory unsafe language, US, Australian, and Canadian government agencies warn.
Data Breaches
CISA says CFATS program data was likely accessed after an Ivanti Connect Secure appliance was hacked in January.
Network Security
Government agencies in the US, New Zealand, and Canada have published new guidance on improving network security.
Artificial Intelligence
The US cybersecurity agency CISA has conducted a tabletop exercise with the private sector focused on AI cyber incident response.
Cloud Security
Google is invoking the 'monoculture' word in response to a scathing U.S. government report on Microsoft's inadequate cybersecurity practices.
Management & Strategy
CISA executive assistant director for cybersecurity Eric Goldstein is leaving the agency after more than three years.
Vulnerabilities
CISA’s Vulnrichment project is adding important information to CVE records to help improve vulnerability management processes.
Vulnerabilities
CISA and the FBI warn of threat actors abusing path traversal software vulnerabilities in attacks targeting critical infrastructure.
ICS/OT
Government agencies are sharing recommendations following attacks claimed by pro-Russian hacktivists on ICS/OT systems.
Artificial Intelligence
New CISA guidelines categorize AI risks into three significant types and pushes a four-part mitigation strategy.
Data Breaches
The US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts "presents a grave and unacceptable risk to federal agencies."
Data Breaches
The US government issues a red-alert for what appears to be a massive supply chain breach at Sisense, a company that sells big-data analytics...
Vulnerabilities
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.
Vulnerabilities
Malware & Threats
Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.
Artificial Intelligence
Identity & Access
