Tag: cisa
-
Medusa-Ransomware erhöht den Druck auf Opfer mit Countdown-Timern
Check Point Software Technologies veröffentlicht weitere Informationen über die Medusa-Ransomware. Seit Februar 2025 haben die Operationen der Gruppe zugenommen. Mehr als 300 Opfer haben sich bei den US-Behörden gemeldet. Die betroffenen Branchen reichen von Technologie über die Fertigung bis hin zum Bildungs- und Versicherungswesen. Die CISA hat hier eine Liste von Empfehlungen veröffentlicht, die Sicherheitsverantwortliche…
-
CISA Adds Sitecore CMS Code Execution Vulnerability to Exploited List
The Cybersecurity and Infrastructure Security Agency (CISA) has included a critical deserialization vulnerability affecting Sitecore CMS and Experience Platform (XP). This vulnerability, tracked as CVE-2019-9874, allows unauthenticated attackers to execute arbitrary code by manipulating HTTP POST parameters, specifically the __CSRFTOKEN field. The vulnerability exploits a weakness in the Sitecore.Security.AntiCSRF module, enabling malicious actors to send…
-
CISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek Devices
Tags: cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, rce, remote-code-execution, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two six-year-old security flaws impacting Sitecore CMS and Experience Platform (XP) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.The vulnerabilities are listed below -CVE-2019-9874 (CVSS score: 9.8) – A deserialization vulnerability in the Sitecore.Security.AntiCSRF First seen on thehackernews.com Jump to…
-
ESET CEO Richard Marko Dives Into Cybersecurity’s AI Era
ESET CEO Richard Marko talks AI, cybersecurity, CISA, MDR, XDR and more. First seen on crn.com Jump to article: www.crn.com/news/security/2025/eset-ceo-richard-marko-dives-into-cybersecurity-s-ai-era
-
CISA Highlights Four ICS Flaws Being Actively Exploited
Tags: automation, cisa, control, cyber, cybersecurity, exploit, flaw, infrastructure, risk, threat, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) released four significant Industrial Control Systems (ICS) advisories, drawing attention to potential security risks and vulnerabilities affecting various industrial control equipment. These advisories underscore the imperative for prompt action to mitigate these threats, which are being actively exploited in the field. ABB RMC-100 Vulnerability Rockwell Automation Verve Asset…
-
Trump shifts cyberattack readiness to state and local governments in wake of info-sharing cuts
Tags: advisory, cio, cisa, ciso, communications, cyber, cyberattack, cybersecurity, election, government, group, infrastructure, intelligence, Internet, metric, office, resilience, risk, russia, strategy, technology, threatCreating a national resilience strategy The EO requires the assistant to the President for national security affairs (APNSA), in coordination with the assistant to the President for economic policy and the heads of relevant executive departments and agencies, to publish within 90 days (by June 17) a National Resilience Strategy that articulates the priorities, means,…
-
What CISA’s Red Team Disarray Means for US Cyber Defenses
DOGE is making wild moves at CISA, including bringing back fired probationary employees only to put them on paid leave, and reportedly gutting the agency’s red teams. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/cisa-red-team-disarray-cyber-defenses
-
CISA warnt vor NAKIVO Backup Replication-Schwachstelle
Setzt jemand aus der Leserschaft NAKIVO Backup & Replication zur Datensicherung ein? Die US Cybersicherheitsbehörde CISA hat eine Warnung bezüglich einer Schwachstelle in dieser Lösung veröffentlicht. Administratoren sollten die neuesten Sicherheitsupdates einspielen. NAKIVO Backup & Replication Ich habe mal kurz nachgesehen, … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/22/cisa-warnt-vor-nakivo-backup-replication-schwachstelle/
-
Updated KEV Catalog From CISA Includes Edimax, NAKIVO, and SAP NetWeaver Bugs
First seen on scworld.com Jump to article: www.scworld.com/brief/updated-kev-catalog-from-cisa-includes-edimax-nakivo-and-sap-netweaver-bugs
-
Updated CISA vulnerabilities catalog includes Edimax, NAKIVO, SAP NetWeaver bugs
First seen on scworld.com Jump to article: www.scworld.com/brief/updated-cisa-vulnerabilities-catalog-includes-edimax-nakivo-sap-netweaver-bugs
-
CISA marks NAKIVO’s critical backup vulnerability as actively exploited
Tags: access, advisory, backup, cisa, ciso, cloud, cybersecurity, exploit, kev, mitigation, network, service, update, vulnerabilityCISOs advised to push for immediate patching: CISA has advised immediate federal and civilian patching of the flaw. For the Federal Civilian Executive Branch (FCEB) agencies, the US cybersecurity watchdog has stipulated a patching deadline of April 19, 2025, in accordance with the BOD 22-01 directive.”Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance…
-
CISA Issues Five Advisories on Industrial Control System Vulnerabilities and Exploits
The Cybersecurity and Infrastructure Security Agency (CISA) released five critical advisories related to vulnerabilities and exploits affecting Industrial Control Systems (ICS). These advisories highlight significant security issues across various industrial equipment and software, underscoring users’ and administrators’ need for immediate attention and mitigation. Overview of the Advisories CISA’s release of these advisories emphasizes the pressing…
-
CISA tags NAKIVO backup flaw as actively exploited in attacks
CISA has warned U.S. federal agencies to secure their networks against attacks exploiting a high-severity vulnerability in NAKIVO’s Backup & Replication software. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-tags-nakivo-backup-flaw-as-actively-exploited-in-attacks/
-
CISA Warns of Exploited Nakivo Vulnerability
CISA has added an absolute path traversal bug in Nakivo Backup and Replication to its Known Exploited Vulnerabilities list. The post CISA Warns of Exploited Nakivo Vulnerability appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-exploited-nakivo-vulnerability/
-
U.S. CISA adds Edimax IC-7100 IP Camera, NAKIVO, and SAP NetWeaver AS Java flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Edimax IC-7100 IP Camera, NAKIVO, and SAP NetWeaver AS Java flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: In early March, 2025, US CISA warned that multiple botnets are exploiting a…
-
CISA Adds NAKIVO Vulnerability to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity security flaw impacting NAKIVO Backup & Replication software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.The vulnerability in question is CVE-2024-48248 (CVSS score: 8.6), an absolute path traversal bug that could allow an unauthenticated attacker to First seen on…
-
CISA Alerts on Edimax IP Camera OS Command Injection Exploit
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a critical vulnerability found in Edimax IC-7100 IP cameras. The alert centers on an OS command injection vulnerability due to improper input sanitization, which allows malicious actors to send specially crafted requests and achieve remote code execution on affected devices. This severe…
-
CISA Warns of NAKIVO Backup Flaw Exploited in Attacks with PoC Released
Tags: attack, backup, cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, software, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a serious vulnerability in the NAKIVO Backup and Replication software, known as CVE-2024-48248. This vulnerability allows attackers to exploit an absolute path traversal flaw, enabling them to read arbitrary files without authentication. The vulnerability resides in the Director Web Interface of the…
-
Critical Fortinet Vulnerability Draws Fresh Attention
CISA this week added CVE-2025-24472 to its catalog of known exploited vulnerabilities, citing ransomware activity targeting the authentication bypass flaw. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/critical-fortinet-vulnerability-draws-fresh-attention
-
How DHS is working to continually improve the Continuous Diagnostics and Mitigation program
Two CISA officials detailed the way agencies are leveraging the program to get the best CDM can offer. First seen on cyberscoop.com Jump to article: cyberscoop.com/dhs-cdm-improvement-elasic-shelly-hartsook-matt-house/
-
CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise
Tags: breach, cisa, cve, cybersecurity, exploit, flaw, github, infrastructure, kev, malicious, supply-chain, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a vulnerability linked to the supply chain compromise of the GitHub Action, tj-actions/changed-files, to its Known Exploited Vulnerabilities (KEV) catalog.The high-severity flaw, tracked as CVE-2025-30066 (CVSS score: 8.6), involves the breach of the GitHub Action to inject malicious code that enables a remote First…
-
CISA Issues Security Warning on Fortinet FortiOS Authentication Bypass Exploit
Tags: authentication, cisa, csf, cve, cyber, cybersecurity, exploit, fortinet, infrastructure, threat, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) issued a critical security warning regarding a severe vulnerability in Fortinet’s FortiOS and FortiProxy systems. Specifically, CVE-2025-24472, an authentication bypass vulnerability, poses a significant threat as it allows remote attackers to gain super-admin privileges through carefully crafted CSF proxy requests. This exploit is classified under Common Weakness Enumeration…
-
CISA urges fired probationary workers to respond after federal judge grants order
The agency still plans to keep workers on paid administrative leave, despite ongoing concerns about its ability to address cyber threats. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-fired-probationary-workers-to-federal-tro/742892/
-
CISA fires, now rehires and immediately benches security crew on full pay
Tags: cisaDOGE efficiency in action First seen on theregister.com Jump to article: www.theregister.com/2025/03/18/cisa_rehired_doge/
-
CISA scrambles to contact fired employees after court rules layoffs ‘unlawful’
Federal court rules U.S. cybersecurity agency must re-hire over 100 former employees First seen on techcrunch.com Jump to article: techcrunch.com/2025/03/18/cisa-scrambles-to-contact-fired-employees-after-court-rules-layoffs-unlawful/
-
>>My vas pokhoronim!<<
CISA, in collaboration with the FBI and NSA, identified and attributed multiple attacks to Russian entities, emphasizing the risks posed by state-backed Advanced Persistent Threats (APTs). First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/my-vas-pokhoronim/
-
White House exempts cyber pros from mass layoffs; Judge reinstates CISA firings
CISA document process raises security concerns: It’s unclear why CISA posted its request for fired employees to send a password-protected attachment containing personally identifiable information to a publicly promoted email address. It’s also unclear how the password-protected document process would work. CISA did not respond to CSO’s request for clarification.Some cybersecurity professionals cast doubt on…
-
CISA Rehires Fired Employees, Immediately Puts Them on Leave
Agency Places Probationary Employees on Administrative Leave Pending Court Decision. The Cybersecurity and Infrastructure Security Agency announced plans to rehire probationary employees that had been ousted amid an ongoing federal workforce purge, following a temporary court restraining order. Those employees will be immediately placed on administrative leave, a spokesperson said. First seen on govinfosecurity.com Jump…
-
Medusa Ransomware Strikes 300+ Targets: FBI CISA Urge Immediate Action to #StopRansomware
Medusa ransomware now operates as a RaaS model, recruiting affiliates from criminal forums to launch attacks, encrypt data, and extort victims worldwide. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-medusa-ransomware-fbi-cisa/
-
Medusa Ransomware Warning: CISA and FBI Issue Urgent Advisory
CISA and the FBI warn about Medusa ransomware, urging organizations to update security, enable MFA, and report incidents to mitigate the growing threat. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/trends/medusa-ransomware-cisa-fbi-advisory/