CISA RELEASES MAJOR SCUBAGEAR AND SCUBAGOGGLES UPDATES TO STRENGTHEN MICROSOFT 365 AND GOOGLE WORKSPACE CLOUD SECURITY Blogging
CISA ADDS TWO ACTIVELY EXPLOITED PHP VULNERABILITIES TO KEV CATALOG AND UPDATES CRITICAL PHP ALERT Blogging
CISA ADDS ACTIVELY EXPLOITED ARISTA VELOCLOUD ORCHESTRATOR SQL INJECTION VULNERABILITY TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED COLLABORA ONLINE CODE SERVER COMMAND INJECTION VULNERABILITY TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED MICROSOFT WINDOWS AND IVANTI CONNECT SECURE VULNERABILITIES TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED CITRIX NETSCALER VULNERABILITY TO KEV CATALOG: CVE-2026-88779 ELEVATED FOR PRIORITY REMEDIATION Blogging
CISA ADDS TWO ACTIVELY EXPLOITED ZAMMAD VULNERABILITIES TO KEV CATALOG: SESSION FIXATION AND PRIVILEGE ESCALATION FLAWS CAN FORM A CRITICAL ATTACK CHAIN Blogging
CISCO CATALYST SD-WAN MANAGER CVE-2026-76504 ADDED TO CISA KEV CATALOG AFTER CONFIRMED ACTIVE EXPLOITATION Blogging
CISA ADDS TWO ACTIVELY EXPLOITED CITRIX NETSCALER VULNERABILITIES TO KEV CATALOG: CVE-2026-88771 AND CVE-2026-88772 ELEVATED FOR PRIORITY REMEDIATION Blogging
CISA ADDS ACTIVELY EXPLOITED WORDPRESS CORE VULNERABILITY TO KEV CATALOG: CVE-2026-87902 ELEVATED FOR PRIORITY REMEDIATION Blogging
FBI DEPLOYS EVERFOX INSIDER-THREAT MONITORING ACROSS TENS OF THOUSANDS OF ENDPOINTS Behavioral Analytics
FBI INVESTIGATES CLAIMED COMPROMISE OF FBIJOBS.GOV AND ALLEGED EXPOSURE OF EMPLOYEE PERSONAL INFORMATION Blogging
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES AFFECTING CHECK POINT, ARISTA VELOCLOUD, AND F5 BIG-IP TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED LINUX KERNEL TLS VULNERABILITY TO KEV CATALOG: CVE-2025-39682 ELEVATED FOR PRIORITY REMEDIATION Blogging
CISA ADDS TWO ACTIVELY EXPLOITED LINUX KERNEL VULNERABILITIES TO KEV CATALOG: RACE CONDITION AND OUT-OF-BOUNDS WRITE NOW REQUIRE PRIORITY REMEDIATION Blogging
CISA ADDS SEVEN ACTIVELY EXPLOITED VULNERABILITIES TO KEV CATALOG ACROSS SANGOMA, STARLETTE, KESTRA, LITELLM, JFROG AND SONICWALL Application Security
CISA VULNERABILITY REVIEW WARNS BASIC SOFTWARE FAILURES STILL DRIVE MOST CYBER COMPROMISES AI Vulnerabilities
CISA ADDS ACTIVELY EXPLOITED ORACLE HTTP SERVER AND WEBLOGIC SERVER PROXY PLUG-IN VULNERABILITY TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED PROGRESS LOADMASTER COMMAND-INJECTION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED N-ABLE N-CENTRAL AUTHENTICATION-BYPASS VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED IVANTI SENTRY VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA Adds Actively Exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to KEV Catalog Blogging
TRJ Cybersecurity: The 2026 Cyber Threat Landscape — AI Malware, Multi-Extortion, and the Escalating Targeting of Defense and Law Enforcement Infrastructure Artificial Intelligence
U.S. Cyber Command Launches Internal and External Reviews as Pentagon Accelerates CYBERCOM 2.0 Modernization Efforts Blogging
CISA Adds Three Known Exploited Vulnerabilities to KEV Catalog Following Active Exploitation Activity Blogging
CISA Adds CVE-2026-48172 LiteSpeed cPanel Plugin Vulnerability to KEV Catalog Following Active Exploitation Activity Blogging
CISA Adds Actively Exploited Drupal Core SQL Injection Vulnerability to KEV Catalog Active Exploitation
CISA Adds Seven Known Exploited Vulnerabilities to KEV Catalog Following Active Exploitation Activity Blogging
CISA Orders Federal Agencies to Patch Actively Exploited Cisco SD-WAN Vulnerability by Sunday AI Threat Intelligence
CISA Adds Microsoft Exchange Server Vulnerability to KEV Catalog Following Active Exploitation Activity Blogging
ACTIVE EXPLOITATION ALERT: GOOGLE DAWN USE-AFTER-FREE VULNERABILITY ENTERS FEDERAL PRIORITY INDEX Blogging
