Tag: cisa
-
CISA says max severity GitLab flaw now exploited in the wild
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-now-exploiting-max-severity-gitlab-flaw-in-attacks/
-
CISA Confirms Active Exploitation of GitLab Vulnerability CVE-2026-97229
The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that CVE-2026-97229, a critical vulnerability affecting both GitLab Community Edition and Enterprise Edition, is actively being exploited. On October 29, 2026, CISA added this flaw to its Known Exploited Vulnerabilities catalog, increasing the urgency for organizations running affected servers to take action. This vulnerability allows unauthenticated…
-
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Tags: cisa, cisco, cve, cybersecurity, dos, exploit, firewall, flaw, gitlab, infrastructure, kev, rce, remote-code-execution, software, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation.The vulnerabilities are listed below – CVE-2026-97229 (CVSS score: 10.0) – An integer overflow or wraparound vulnerability in GitLab Community Edition and Enterprise First seen on…
-
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Tags: cisa, cisco, cve, cybersecurity, dos, exploit, firewall, flaw, gitlab, infrastructure, kev, rce, remote-code-execution, software, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation.The vulnerabilities are listed below – CVE-2026-97229 (CVSS score: 10.0) – An integer overflow or wraparound vulnerability in GitLab Community Edition and Enterprise First seen on…
-
Hacker leaks data on more than 40,000 Homeland Security employees
A hacker leaks personal data on more than 40,000 DHS employees, including CBP, ICE and CISA staff, after an undisclosed breach. Personal details of thousands of U.S. Department of Homeland Security (DHS) employees are now online after a hacker stole reams of data in a data breach that occurred earlier this year and nobody had…
-
U.S. CISA adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Linux Kernel and Broadcom VMWare ESX vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the flaws added to the catalog: In July, Broadcom released patches to address…
-
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws in the wild. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-fragnesia-linux-flaw-chained-in-php2shell-attacks/
-
HTTP2Shell: Kritische Brotli-Schwachstelle gefährdet zahlreiche Anwendungen und IT-Infrastrukturen
HTTP2Shell (CVE-2026-111497) betrifft weit mehr als Node.js. CISA bestätigt aktive Angriffe. Warum Brotli zur Gefahr für zahlreiche Anwendungen wird. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/http2shell-kritische-brotli-schwachstelle-gefaehrdet-zahlreiche-anwendungen-und-it-infrastrukturen/a46938/
-
CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom VMware ESX, to its Known Exploited Vulnerabilities (KEV) catalog. This decision was made after evidence of exploitation in the wild was discovered. The announcement, made on October 28, 2026, raised the priority of addressing this flaw, despite its…
-
CISA Warns of Active Attacks Exploiting Critical Node2Shell RCE Vulnerability in Node.js
CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following confirmed evidence of exploitation. Added on October 27, 2026, this flaw allows unauthenticated attackers to corrupt memory, disrupt services, disclose sensitive information, or potentially execute arbitrary code through maliciously crafted compressed streams. Federal agencies have…
-
U.S. CISA adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Brotliand Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Google Brotli and Adobe Commerce and Magento vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the flaws added to the catalog: Brotli is a data-compression algorithm…
-
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-now-exploiting-critical-node2shell-flaw/
-
CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster
CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/cisa-scubagear-scubagoggles-update/
-
CISA Offers Free Security Tools to Protect Microsoft 365 and Google Workspace From Cyber Threats
The Cybersecurity and Infrastructure Security Agency (CISA) offers two free assessment tools, ScubaGear and ScubaGoggles, to help organizations identify insecure configurations in Microsoft 365 and Google Workspace. Developed under the Secure Cloud Business Applications (SCuBA) project, these tools compare cloud tenant settings against established security baselines and generate reports that highlight configuration gaps. CISA established…
-
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its… First seen on hackread.com Jump to article: hackread.com/cisa-confirm-php2shell-exploit-federal-agencies-patch/
-
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its… First seen on hackread.com Jump to article: hackread.com/cisa-confirm-php2shell-exploit-federal-agencies-patch/
-
CISA, security researchers confirm successful exploitation of PHP flaws
The security community has come under increased scrutiny as earlier threat warnings were slow to materialize. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-security-researchers-exploitation-php-flaws/872886/
-
CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch
CISA added the widely publicized PHP vulnerabilities to the KEV, but didn’t specify what kind of exploitation it was observing. First seen on therecord.media Jump to article: therecord.media/php-vulnerabilities-cisa-kev
-
CISA lays out plan to push cyber adversaries out of US critical infrastructure
The Cybersecurity and Infrastructure Security Agency (CISA) has released CISA 2030: Defend, Harden, Prevail, a strategy to strengthen national security and the resilience of … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/cisa-2030-cyber-resilience-strategy/
-
U.S. CISA adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the PHP PHP2Shell vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: On October 21, PHP released emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (CVSS score of 9.2). The flaws…
-
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks/
-
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
Tags: cisa, cve, cvss, cybersecurity, exploit, flaw, infrastructure, kev, remote-code-execution, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog.The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate unauthenticated remote code execution on affected deployments – CVE-2026-109618 – An out-of-memory First seen on…
-
CISA 2030: Analysts Question Agency’s Ability to Deliver
Agency Vows ‘Aggressive, Anticipatory’ Stance After Losing a Third of Its StaffThe U.S.. Cybersecurity and Infrastructure Security Agency’s new CISA 2030 strategy vows to take an aggressive, anticipatory stance against adversaries – but analysts say it ignores ransomware payments, liability and the deep staffing cuts that could keep it from delivering. First seen on govinfosecurity.com…
-
CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
CISA’s new strategy, CISA 2030, will focus on rapid detection and response and resiliency of critical services ahead of “passive defense” First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-aggressive-strategy-critical/
-
CISA promises proactive defense in new strategic plan
The beleaguered agency, still recovering from major workforce cuts, promised to deepen partnerships and stay ahead of evolving threats. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-strategic-plan-2030-infrastructure-partnerships/872750/
-
When an AI Agent Is the Incident, the Identity Record Is the Evidence
A new NIST, CISA, and NSA guide treats runaway agents as incidents to be rehearsed. The hard part of the response is answering whose authority the agent used, and that answer has to exist before the incident does. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/when-an-ai-agent-is-the-incident-the-identity-record-is-the-evidence/
-
CISA publishes strategy with eye on the next four years
It includes a review of whether its existing capabilities will meet its three pillars: “defend, harden, prevail.” First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-2030-cybersecurity-strategy/
-
Security Affairs newsletter Round 601 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Capcom Data Breach Exposes 11.7 Million Email Addresses U.S. CISA adds Arista VeloCloud Orchestratorflaw to its Known…
-
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Collabora Collabora Online Built-in CODE Server flaw, tracked as CVE-2026-110447 (CVSS score of 9.2), to its Known Exploited Vulnerabilities (KEV) catalog. Collabora Online Built-in CODE Server is […] First…
-
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical Arista VeloCloud Orchestrator flaw, tracked as CVE-2026-114625 (CVSS score of 9.4), to its Known Exploited Vulnerabilities (KEV) catalog. VeloCloud Orchestrator (VCO) is the central management system for…