Government
The US government's cybersecurity agency adds VMware and Roundcube server flaws to its Known Exploited Vulnerabilities (KEV) catalog.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA"
ICS/OT
Enphase Energy has ignored CISA requests to fix remotely exploitable vulnerabilities in Enphase products.
Government
CISA’s Binding Operational Directive 23-02 requires federal agencies to secure the network management interfaces of certain classes of devices.
Vulnerabilities
Several old Linux vulnerabilities for which there are no public reports of malicious exploitation have been added to CISA’s KEV catalog.
Government
CISA has described and published a set of principles for the development of security-by-design and security-by-default cybersecurity products.
Ransomware
CISA has sent notifications to more than 60 organizations as part of a new initiative to alert entities of early-stage ransomware attacks.
Supply Chain Security
Chainguard OpenVEX Spec adds clarity to Supply Chain Vulnerability warnings specifications to help software vendors and maintainers communicate precise metadata about the vulnerability status...
Vulnerabilities
CISA gave federal agencies a February deadline to patch a critical vulnerability in the CentOS Control Web Panel utility.
Malware & Threats
Cleo has released patches for the exploited vulnerability and security firms have detailed the malware delivered in attacks.
Tracking & Law Enforcement
Malware & Threats
Vulnerabilities
Two vulnerabilities in the Hunk Companion and WP Query Console WordPress plugins allow attackers to backdoor websites.
Mobile & Wireless
Malware & Threats
Endpoint Security
Malware & Threats
Artificial Intelligence