Tag: cisa
-
Ivanti EPM vulnerabilities actively exploited in the wild, CISA warns
Tags: apt, china, cisa, cyberespionage, exploit, flaw, group, ivanti, remote-code-execution, vpn, vulnerability, zero-dayIvanti products in attackers’ crosshairs: Multiple Ivanti products have been targeted by attackers over the past year, especially by state-sponsored cyberespionage groups who developed zero-day exploits for them.Back in January Ivanti patched a critical remote code execution flaw in its Connect Secure SSL VPN appliance that a Chinese APT group had exploited as a zero-day…
-
Trump Taps Sean Plankey to Fill Empty CISA Director Chair
Plankey has served in numerous cybersecurity positions in the past, including during the first Trump presidency from 2018-2020. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/trump-sean-plankey-cisa-director
-
3 Ivanti flaws added to CISA list of known exploited vulnerabilities
First seen on scworld.com Jump to article: www.scworld.com/news/3-ivanti-flaws-added-to-cisa-list-of-known-exploited-vulnerabilities
-
Advantive VeraCore, Ivanti EPM flaws added to CISA vulnerabilities catalog
First seen on scworld.com Jump to article: www.scworld.com/brief/advantive-veracore-ivanti-epm-flaws-added-to-cisa-vulnerabilities-catalog
-
DOGE axes CISA ‘red team’ staffers amid ongoing federal cuts
Affected staff say more than 100 employees working to protect U.S. government networks were ‘axed’ with no prior warning First seen on techcrunch.com Jump to article: techcrunch.com/2025/03/11/doge-axes-cisa-red-team-staffers-amid-ongoing-federal-cuts/
-
Trade groups worry information sharing will worsen without critical infrastructure panel, CISA law renewal
The groups told lawmakers that both the committee and the law provide vital protections for cyber threat information swapping. First seen on cyberscoop.com Jump to article: cyberscoop.com/cyber-information-sharing-critical-infrastructure-panel-cisa-law-renewal/
-
Trump nominates Plankey to lead CISA
Tags: cisaSean Plankey previously held key roles at the Department of Energy and National Security Council during the first Trump administration. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/trump-nominates-plankey-to-lead-cisa/742189/
-
3 Ivanti endpoint vulnerabilities exploited in the wild
Researchers last month published a proof-of-concept exploit for the critical flaws in Endpoint Manager. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-3-ivanti-endpoint-vulnerabilities-exploited-in-the-wild/742168/
-
Trump Taps Ex-DOE, NSC Leader Sean Plankey as CISA Director
Plankey Led Efforts to Engage Energy Sector in Cyber Prep During Trump’s First Term. President Donald Trump has nominated a former Energy Department and National Security Council cybersecurity official to lead the U.S. Cybersecurity and Infrastructure Security Agency. National Guard and Coast Guard Veteran Sean Plankey has been tapped to replace Jen Easterly as the…
-
Sean Plankey picked by Trump to be CISA director
Plankey’s nomination fills the biggest remaining gap among cyber leaders in the second Trump administration. First seen on cyberscoop.com Jump to article: cyberscoop.com/sean-plankey-cisa-nomination/
-
Trump nominates Sean Plankey as new CISA director
Tags: cisaPlankey, if approved by the Senate, will serve as CISA’s third director. First seen on techcrunch.com Jump to article: techcrunch.com/2025/03/11/trump-nominates-sean-plankey-as-new-cisa-director/
-
CISA tags critical Ivanti EPM flaws as actively exploited in attacks
CISA warned U.S. federal agencies to secure their networks against attacks exploiting three critical vulnerabilities affecting Ivanti Endpoint Manager (EPM) appliances. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-tags-critical-ivanti-epm-flaws-as-actively-exploited-in-attacks/
-
CISA Urges All Organizations to Patch Exploited Critical Ivanti Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) has added five new flaws in Ivanti and VeraCore products to its Known Exploited Vulnerabilities catalog First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-kev-ivanti-critical/
-
CISA Added 3 Ivanti Endpoint Manager Bugs to Wildly Exploited Vulnerabilities Catalog
Tags: cisa, cyber, cybersecurity, endpoint, exploit, flaw, infrastructure, ivanti, kev, risk, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog with the addition of three high-risk security flaws affecting Ivanti Endpoint Manager (EPM). These vulnerabilities, which involve absolute path traversal issues, have been observed being actively exploited in the wild, prompting federal agencies and organizations to implement remediation measures before…
-
CISA Warns of Ivanti EPM Vulnerability Exploitation
CISA has added three critical-severity flaws in Ivanti EPM to its Known Exploited Vulnerabilities catalog. The post CISA Warns of Ivanti EPM Vulnerability Exploitation appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-ivanti-epm-vulnerability-exploitation/
-
U.S. CISA adds Advantive VeraCore and Ivanti EPM flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Advantive VeraCore and Ivanti EPM flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: A Vietnamese cybercrime group, tracked as XE Group, is exploiting the above VeraCore vulnerabilities, deploying reverse shells and web shells…
-
CISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild.The list of vulnerabilities is as follows -CVE-2024-57968 – An unrestricted file upload vulnerability in Advantive VeraCore First…
-
Trump Administration and the Russian Cyber Threat, Firefox Privacy Changes
In this episode, we discuss whether the Trump administration ordered the U.S. Cyber Command and CISA to stand down on the Russian cyber threat. We also touch on the Canadian tariff situation with insights from Scott Wright. Additionally, we discuss the recent changes to Firefox’s privacy policy and what it means for user data. **……
-
CISA-Warnung: Cyberkriminelle (BianLian Groupe) versuchen Führungskräfte zu erpressen
Die US-Behörde CISA hat eine Warnung veröffentlicht, weil Kriminelle, die sich als ‘BianLian Group” ausgeben, eine Erpressungskampagne gestartet haben. Die Kriminellen senden Erpresserbriefe an Führungskräfte von Unternehmen und drohen damit, sensible Informationen weiterzugeben, wenn sie nicht bezahlen. Die Cybersecurity and … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/09/cisa-warnung-cyberkriminelle-bianlian-groupe-versuchen-fuehrungskraefte-zu-erpressen/
-
Mirai-based botnets exploit CVE-2025-1316 zero-day in Edimax IP cameras
Mirai-based botnets are exploiting a zero-day flaw, tracked as CVE-2025-1316, in Edimax IP cameras, to achieve remote command execution. US CISA warns that multiple botnets are exploiting a recently disclosed vulnerability, tracked as CVE-2025-1316 (CVSS score of 9.8), in Edimax IC-7100 IP cameras. The issue is an Improper Neutralization of Special Elements used in an…
-
CISA completed its election security review. It won’t make the results public
Critics said the decision creates broad uncertainty among other stakeholders who work to protect elections. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-election-security-review-lacks-transparency/
-
Angriffe auf Edimax IP-Kameras: Botnetze missbrauchen Sicherheitslücke
Eine CISA Warnung beschreibt Angriffe auf Edimax IP-Kameras: Bestimmte Modelle sind über eine kritische Schwachstelle verwundbar. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/angriffe-auf-edimax-ip-kameras-botnetze-missbrauchen-sicherheitsluecke-311276.html
-
Edimax Camera Zero-Day Disclosed by CISA Exploited by Botnets
Multiple Mirai-based botnets are exploiting CVE-2025-1316, an Edimax IP camera vulnerability that allows remote command execution. The post Edimax Camera Zero-Day Disclosed by CISA Exploited by Botnets appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/edimax-camera-zero-day-disclosed-by-cisa-exploited-by-botnets/
-
CISA, FBI warn of BianLian mail scam targeting executives with $500k ransom note
In an alert on Thursday, the FBI said scammers are mailing letters to corporate executives claiming that they stole sensitive data and will publish it unless a demand is paid in Bitcoin. First seen on therecord.media Jump to article: therecord.media/cisa-fbi-warn-bianlian-mail-scam-extortion
-
Financial groups urge CISA to revise proposed incident reporting rule
First seen on scworld.com Jump to article: www.scworld.com/news/financial-groups-urge-cisa-to-revise-proposed-incident-reporting-rule
-
CISA Cuts: A Dangerous Gamble in a Dangerous World
The Cybersecurity and Infrastructure Security Agency’s role in risk management needs to expand, not shrink. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/cisa-cuts-dangerous-gamble-dangerous-world
-
CISA Issues Alert on Actively Exploited VMware Vulnerabilities
Tags: cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, kev, linux, mitigation, threat, vmware, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) escalated warnings on March 4, 2025, by adding four severe vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. Federal agencies and private organizations are urged to prioritize mitigation efforts, as threat actors are actively weaponizing these flaws in VMware ESXi, Workstation, Fusion, and the Linux kernel. CVE-2025-22225:…
-
CISA Expands Known Exploited Vulnerabilities Catalog with Four Critical Issues
The Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its Known Exploited Vulnerabilities (KEV) Catalog with four new vulnerabilities, adding to the growing list of cyber risks that have been actively exploited. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cisa-known-exploited-vulnerabilities-catalog-3/