Tag: cisa
-
CISA’s ChatGPT Incident Exposes a Bigger AI Governance Problem
CISA’s ChatGPT incident exposes a growing AI governance gap as enterprises struggle to define who is accountable for actions taken by AI agents. The post CISA’s ChatGPT Incident Exposes a Bigger AI Governance Problem appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-cisa-chatgpt-ai-agent-governance-accountability/
-
U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
Tags: authentication, cisa, cisco, citrix, cve, cybersecurity, exploit, flaw, fortinet, google, infrastructure, kev, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-20079 (CVSS score of 10.0) is an authentication bypass issue. The flaw resides in Cisco Secure…
-
US CISA Hires Stalled in Red Tape
About 250 Qualified New Hires for the Nation’s Cyber Agency Are in Limbo. The first tranche of a 600-strong staff plus up promised in June for the U.S. Cybersecurity and Infrastructure Security Agency by Homeland Security Secretary Markwayne Mullin is waiting for the paperwork to clear so they can start work, officials said Wednesday. First…
-
CISA is on the verge of filling hundreds of critical vacancies
Meanwhile, the agency is finalizing an incident-reporting regulation and setting up a new industry coordination structure. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-hiring-circia-anchor-nick-andersen/829980/
-
Daily OT Security News: September 10, 2026
Cisco FMC Flaw Added to CISA’s Known Exploited Vulnerabilities Catalog SecurityWeek reported that Cisco and CISA flagged active exploitation of CVE-2026-20079, a critical authentication-bypass vulnerability in Cisco Secure Firewall Management Center that can let a remote unauthenticated attacker execute malicious… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-10-2026/
-
CISA Updates Insider Threat Guide With New Mitigation Advice
CISA has updated its insider threat guide with new advice on remote work, AI and risk detection First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-updates-insider-threat-guide/
-
NSA, FBI, CISA Warn of Industrial-Scale AI Model Distillation Attacks
US agencies say six China-based AI firms used large-scale distillation campaigns to extract capabilities from Claude, GPT, Gemini, and Grok models. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-ai-model-distillation-attacks/
-
NSA, FBI, CISA Warn of Industrial-Scale AI Model Distillation Attacks
US agencies say six China-based AI firms used large-scale distillation campaigns to extract capabilities from Claude, GPT, Gemini, and Grok models. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-ai-model-distillation-attacks/
-
NSA, FBI, CISA Warn of Industrial-Scale AI Model Distillation Attacks
US agencies say six China-based AI firms used large-scale distillation campaigns to extract capabilities from Claude, GPT, Gemini, and Grok models. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-ai-model-distillation-attacks/
-
NSA, FBI, CISA Warn of Industrial-Scale AI Model Distillation Attacks
US agencies say six China-based AI firms used large-scale distillation campaigns to extract capabilities from Claude, GPT, Gemini, and Grok models. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-ai-model-distillation-attacks/
-
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
Tags: authentication, cisa, cisco, citrix, cve, cybersecurity, exploit, flaw, fortinet, infrastructure, kev, update, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026.The vulnerabilities are listed below – CVE-2026-20079 (CVSS score: 10.0) – An authentication First seen…
-
WatchGuard RCE flaw now exploited in ransomware attacks
Tags: attack, cisa, cybersecurity, exploit, firewall, flaw, infrastructure, ransomware, rce, remote-code-execution, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a critical WatchGuard Firebox firewall vulnerability, which it flagged as actively exploited in December. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-watchguard-rce-flaw-now-exploited-in-ransomware-attacks/
-
U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog
Tags: adobe, cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, microsoft, vulnerability, windowsU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-75650 (CVSS score of 10.0) is an Adobe Commerce and Magento improper neutralization of special elements in a…
-
SMA 6210, SMA 7210 und SMA 8200v betroffen – CISA meldet aktive Angriffe auf Sonicwall-SMA1000-Systeme
First seen on security-insider.de Jump to article: www.security-insider.de/sonicwall-sma1000-schwachstellen-ssrf-rce-aktiv-ausgenutzt-a-5ec3cc45b6dd84f1a92d0cbb2bf6b266/
-
CISA head says agency must change quickly to prevent the ‘worst that could happen’
CISA’s cybersecurity, infrastructure security and emergency communications divisions are among the priorities as the agency fills vacancies created at the beginning of the Trump administration, acting director Nick Andersen says. First seen on therecord.media Jump to article: therecord.media/cisa-hiring-nick-andersen-warning
-
US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models
US agencies accuse six Chinese AI firms of extracting billions of tokens from US AI models to accelerate development and copy advanced capabilities. NSA, CISA, and the FBI jointly published an advisory accusing six Chinese AI companies, DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI, of running industrial-scale extraction campaigns against US frontier models since…
-
Daily OT Security News: September 06, 2026
Briefing for OT, ICS, IoT, and cyber-physical-security leaders: concise summaries of verified developments and recommended follow-up actions from the named sources below. CISA Scraps Six Free Cybersecurity Assessments for Critical Infrastructure Operators Cybersecurity Dive reports that CISA is ending six… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-06-2026/
-
CISA Flags Old ownCloud Flaw After Reported Philippine Nuclear Data Theft
CISA added CVE-2023-49105 to its exploited-flaws catalog after researchers tied the old ownCloud bug to reported Philippine nuclear data theft. The post CISA Flags Old ownCloud Flaw After Reported Philippine Nuclear Data Theft appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-owncloud-nuclear-data-breach-apac-philippines/
-
CISA Adds 7 Exploited Flaws as Attackers Target AI Infrastructure
CISA added seven exploited flaws to its KEV catalog, including LiteLLM, Kestra, Starlette, and SonicWall vulnerabilities under active attack. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-cisa-exploited-ai-flaws/
-
Daily OT Security News: September 4, 2026
Daily OT Security News: concise summaries of notable operational-technology security reporting from the previous 24-hour window. CISA publishes eight new ICS advisories and two updates JPCERT/CC reports that CISA issued eight new ICS advisories and updated two others on September… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-4-2026/
-
Daily OT Security News: September 04, 2026
Summary of five ICS advisories published in CISA’s September 3, 2026 advisory batch; review each item and follow vendor recommendations or mitigations as available. CISA Flags OPC UA LocalDiscoveryServer Installation Privilege Issue CISA advisory ICSA-26-246-01 (published September 3, 2026) covers… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-04-2026/
-
G7 urges organizations to prepare for quantum cyber threats
In a joint advisory released Thursday, the G7 Cyber Security Working Group and the U.S. Cybersecurity and Infrastructure Security Agency, CISA, said organizations should begin moving to post-quantum cryptography now. First seen on therecord.media Jump to article: therecord.media/g7-urges-organizations-to-prepare-for-quantum-threats
-
G7 urges organizations to prepare for quantum cyber threats
In a joint advisory released Thursday, the G7 Cyber Security Working Group and the U.S. Cybersecurity and Infrastructure Security Agency, CISA, said organizations should begin moving to post-quantum cryptography now. First seen on therecord.media Jump to article: therecord.media/g7-urges-organizations-to-prepare-for-quantum-threats
-
Daily OT Security News: September 3, 2026
Multinational joint guidance for service providers on IT and OT outage communications On September 2, 2026 the Canadian Centre for Cyber Security (Canada) joined CISA, ASD’s ACSC, NCSC”‘NZ, NCSC”‘UK and the FBI to publish joint guidance addressing IT and OT… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-3-2026/
-
CISA Warns SonicWall SMA1000 Flaws Are Actively Exploited in Attacks
Tags: access, attack, cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, kev, mobile, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities affecting SonicWall SMA1000 appliances to its Known Exploited Vulnerabilities (KEV) Catalog, warning that these flaws are actively being exploited in real-world attacks. The vulnerabilities, identified as CVE-2026-83548 and CVE-2026-83549, affect SonicWall’s Secure Mobile Access (SMA1000) remote-access appliances. CISA Warns SonicWall SMA1000 Flaws CISA…
-
CISA Warns SonicWall SMA1000 Flaws Are Actively Exploited in Attacks
Tags: access, attack, cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, kev, mobile, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities affecting SonicWall SMA1000 appliances to its Known Exploited Vulnerabilities (KEV) Catalog, warning that these flaws are actively being exploited in real-world attacks. The vulnerabilities, identified as CVE-2026-83548 and CVE-2026-83549, affect SonicWall’s Secure Mobile Access (SMA1000) remote-access appliances. CISA Warns SonicWall SMA1000 Flaws CISA…
-
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers’ crosshairs.The vulnerabilities are as follows – CVE-2026-83548 (CVSS score: 10.0) – A server-side request forgery vulnerability in SonicWall SMA 1000 Appliances that could allow a remote unauthenticated First seen…
-
What a 14-Day Federal Patch Clock Costs a Team That Isn’t a Federal Agency
(MLflow, CVE-2026-64849, August 2026)By Pablo Bleck, Engineering Manager & Software Engineer, ActiveStateMLflow shipped its webhook API open by default across a platform with more than 30 million monthly downloads, and a CISA listing turned that unauthenticated endpoint into a 14-day… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/what-a-14-day-federal-patch-clock-costs-a-team-that-isnt-a-federal-agency/
-
Daily OT Security News: September 02, 2026
Viakoo daily OT security briefing, September 02, 2026. Below are concise summaries of five recent developments affecting industrial, maritime and grid-connected operational technology. CISA Releases Eight Industrial Control Systems Advisories On September 1, 2026, CISA released eight industrial control… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-02-2026/
-
CISA scraps 6 free cybersecurity assessments for critical infrastructure operators
The agency’s decision, spurred by workload concerns, could leave organizations without valuable insights into their vulnerabilities. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-cybersecurity-assessments-ending/829371/