Nation-State
Ivanti is struggling to hit its own timeline for the delivery of patches for critical -- and already exploited -- flaws in its flagship...
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA"
ICS/OT
CISA informs organizations that Westermo Lynx switches are affected by eight vulnerabilities and some devices are reportedly exposed to the internet.
Malware & Threats
The US government’s cybersecurity agency CISA ramps up the pressure on organizations to mitigate two exploited Ivanti VPN vulnerabilities.
Government
CISA, FBI and EPA document aims to help water and wastewater organizations improve their cyber resilience and incident response.
Incident Response
A joint advisory from CISA and the FBI warns about Androxgh0st malware attacks ensnaring devices in a botnet.
Malware & Threats
CISA released ICS advisories for FXC router and QNAP NRV flaws and added them to its known exploited vulnerabilities catalog.
ICS/OT
CISA is advising device makers to stop relying on customers to change default passwords following attacks targeting water sector ICS.
Network Security
The US cybersecurity agency CISA issues cybersecurity recommendations for the healthcare and public health sector.
Government
CISA is asking for public opinion on SCuBA secure configuration baselines for nine Google Workspace services.
Cyberwarfare
The US cybersecurity agency calls attention to a Russian APT targeting academia, defense, governmental organizations, NGOs and think-tanks.
Security Architecture
New CISA alerts shed light on the harm occurring when software vendors fail to implement secure by design principles.
Government
New CISA pilot program brings cutting-edge cybersecurity services to critical infrastructure entities that need support.
Artificial Intelligence
CISA details its efforts to promote the use of AI in cybersecurity and guide critical infrastructure in adopting AI.
Government
CISA and the HHS have released resources for healthcare and public health organizations to improve their security.
Vulnerabilities
CISA, FBI, and MS-ISAC warn of potential widespread exploitation of CVE-2023-22515, a critical vulnerability in Atlassian Confluence.
Government
CISA is now flagging vulnerabilities and misconfigurations that are known to be exploited in ransomware attacks.
Vulnerabilities
CISA has removed from its KEV catalog five Owl Labs video conferencing flaws that require the attacker to be in Bluetooth range.
Government
Roughly 80% of CISA staff will be sent home at the end of the week in case of a government shutdown.
Government
CISA unveils a new Hardware Bill of Materials (HBOM) framework for buyers and sellers to communicate about components in physical products.
Risk Management
CISA says Known Exploited Vulnerabilities Catalog has helped federal agencies significantly accelerate their vulnerability remediation pace.
Supply Chain Security
The hackers exfiltrated data from Salesforce instances of Klue customers, such as Huntress and Recorded Future.
Data Breaches
Vulnerabilities
Hacker Conversations
Artificial Intelligence
French President Emmanuel Macron urged the world’s wealthy democracies to work together on regulating advanced AI systems.
Malware & Threats
Malware & Threats
