CISA ADDS ACTIVELY EXPLOITED IVANTI SENTRY VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA Adds Three Actively Exploited Vulnerabilities to KEV Catalog Affecting Arista EOS, Google Chromium V8, and Cisco SD-WAN Infrastructure Blogging
CISA Adds SolarWinds Serv-U Vulnerability to KEV Catalog Following Confirmed Active Exploitation Activity Blogging
Federal Watchdog Warns NIST Vulnerability Database Failures Are Undermining U.S. Cybersecurity Blogging
CISA Adds Actively Exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to KEV Catalog Blogging
CISA Adds Three Known Exploited Vulnerabilities to KEV Catalog Following Active Exploitation Activity Blogging
CISA Adds CVE-2026-48172 LiteSpeed cPanel Plugin Vulnerability to KEV Catalog Following Active Exploitation Activity Blogging
Copper Theft Surge Targeting EV Charging Infrastructure Prompts Federal Cross-Sector Security Alert Blogging
Critical ABB AC500 PLC Vulnerability Exposes Industrial Systems to Potential Remote Code Execution Attacks Blogging
ABB Automation Builder Gateway Vulnerability Exposes Industrial Control Environments to Remote PLC Discovery Risks Blogging
Multiple Critical ABB AC500 V3 Vulnerabilities Expose Industrial Control Systems to Access Bypass, Certificate Manipulation, and Denial-of-Service Risks Blogging
CISA Expands Federal Hiring Push Across Cybersecurity, Infrastructure Security, Acquisition, and Incident Response Divisions Blogging
MAXHUB Pivot Client Application Exposed by Cryptographic Weakness in Newly Released ICS Advisory Blogging
CI FORTIFY: CISA WARNS CRITICAL INFRASTRUCTURE OPERATORS TO PREPARE FOR COMMUNICATIONS FAILURE, OT SABOTAGE, AND LONG-DURATION GEOPOLITICAL CYBER CONFLICT Blogging
CISA KEV ALERT — ACTIVE EXPLOITATION OF CITRIX NETSCALER VULNERABILITY EXPANDS ATTACK SURFACE ACROSS ENTERPRISE EDGE SYSTEMS Blogging
KEV CATALOG EXPANSION — F5 BIG-IP REMOTE CODE EXECUTION VULNERABILITY ADDED AFTER ACTIVE EXPLOITATION CONFIRMED Blogging
ICS DEVICE COMPROMISE VECTOR — WAGO INDUSTRIAL MANAGED SWITCHES CONTAIN HIDDEN CLI FUNCTION ENABLING FULL DEVICE TAKEOVER Blogging
CISA CAPABILITY COLLAPSE — FEDERAL SHUTDOWN FORCES CYBER DEFENSE INTO REACTIVE MODE AS WORKFORCE DROPS AND SYSTEMIC RISK EXPANDS Blogging
ICS ACCESS CONTROL FAILURE — OPENCODE MESSAGING AND USSD GATEWAY VULNERABILITY ENABLES CROSS-TENANT SMS DATA EXPOSURE Blogging
CISA MOVES TO ELIMINATE END-OF-SUPPORT EDGE DEVICES AS OPENEOX STANDARD TARGETS LIFECYCLE BLIND SPOTS Blogging
CISA Retires Ten Emergency Directives as KEV Enforcement Replaces Crisis-Driven Patch Mandates Blogging
Chinese Hackers Target Global Cisco ASA Firewalls — Storm-1849 Expands State-Sponsored Exploitation Campaign Blogging
FCC to Vote on Repeal of Telecom Cybersecurity Rules Enacted After Chinese Hackers Stole Trump, Vance Communications Blogging
THE NATION-STATE ADVANTAGE: How a Breach of F5 Source Code Became a Silent Weapon Against U.S. Federal Networks Blogging
Hackers Exploiting Critical Sudo Flaw: CISA Orders Five Vulnerabilities Patched by October 20th Blogging
Sitecore Zero-Day Exploited: CISA Orders Federal Agencies to Patch by September 25 Application Security
FIVE EYES, FRAYED EDGES: UK Intelligence Officials Express Concern Over U.S. Cyber Leadership Instability Blogging
North Korean-Linked Spyware Found in Bogus Android Apps Targeting Korean and English Speakers Android Security
FBI and CISA Investigate China-Linked Telecom Hacks and Russian Election Disinformation Ahead of U.S. Elections Blogging
CISA Pledges to Resolve Issues with Threat Sharing System After Watchdog Report: A Critical Revamp on the Horizon Blogging
Stolen Account Information Remains Top Threat to Federal Agencies, CISA’s Annual Audit Reveals Blogging
CISA Mandates Urgent Upgrades or Removal of End-of-Life Ivanti Appliances After Multiple Cyber Attacks Blogging
FBI Investigates Alleged Hack of Trump Campaign Amid Broader Concerns of Election Interference Congressional Affairs
