Tag: cisa
-
U.S. CISA adds Trimble Cityworks flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Trimble Cityworks vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Trimble Cityworks vulnerability, tracked as CVE-2025-0994, to its Known Exploited Vulnerabilities (KEV) catalog. Trimble Cityworks is a GIS-centric asset management and permitting software designed for local governments, utilities, and…
-
Trump Targets FBI, CISA Cyber Officials in Workforce Purge
White House Ousts Key FBI and CISA Cyber Leaders, Raising Security Concerns. President Donald Trump’s federal workforce purge and sweeping firings have forced out senior FBI cyber officials while sidelining election security experts at the Cybersecurity and Infrastructure Security Agency, raising significant security concerns. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/trump-targets-fbi-cisa-cyber-officials-in-workforce-purge-a-27474
-
Actively-Exploited Linux Kernel Flaw Requires Immediate Remediation
First seen on scworld.com Jump to article: www.scworld.com/brief/cisa-actively-exploited-linux-kernel-flaw-requires-immediate-remediation
-
Linux kernel flaw added to CISA’s exploited vulnerabilities list
First seen on scworld.com Jump to article: www.scworld.com/news/linux-kernel-flaw-added-to-cisas-exploited-vulnerabilities-list
-
CISA Warns of Active Exploits Targeting Trimble Cityworks Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management software has come under active exploitation in the wild.The vulnerability in question is CVE-2025-0994 (CVSS v4 score: 8.6), a deserialization of untrusted data bug that could permit an attacker to conduct remote code execution.”This could…
-
CISA Warns of Active Exploitation in Trimble Cityworks Vulnerability Leading to IIS RCE
Tags: cisa, cve, cybersecurity, data, exploit, flaw, infrastructure, rce, remote-code-execution, software, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management software has come under active exploitation in the wild.The vulnerability in question is CVE-2025-0994 (CVSS v4 score: 8.6), a deserialization of untrusted data bug that could permit an attacker to conduct remote code execution.”This could…
-
7-Zip 0-Day Flaw Added to CISA’s List of Actively Exploited Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical 0-day vulnerability affecting the popular file compression utility, 7-Zip, to its Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability, identified as CVE-2025-0411, highlights a severe flaw that allows attackers to bypass the Mark-of-the-Web (MotW) security feature and execute arbitrary code on targeted systems. Details…
-
U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog
Tags: cisa, cve, cybersecurity, exploit, firewall, flaw, infrastructure, kev, microsoft, remote-code-execution, sophos, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Outlook, Sophos XG Firewall, and otherflaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: The vulnerability CVE-2024-21413 (CVSS score of 9.8) is a Remote Code Execution flaw in Microsoft Outlook.…
-
Agencies Sound Alarm on Patient Monitors With Hardcoded Backdoor
CISA and the FDA are warning that Contec CMS8000 and Epsimed MN-120 patient monitors are open to meddling and data theft; Claroty Team82 flagged the vulnerability as an avoidable insecure design issue. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/agencies-sound-alarm-patient-monitors-hardcoded-backdoor
-
Actively exploited Linux kernel flaw requires immediate remediation
First seen on scworld.com Jump to article: www.scworld.com/brief/cisa-actively-exploited-linux-kernel-flaw-requires-immediate-remediation
-
Critical RCE bug in Microsoft Outlook now exploited in attacks
CISA warned U.S. federal agencies on Thursday to secure their systems against ongoing attacks targeting a critical Microsoft Outlook remote code execution (RCE) vulnerability. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-rce-bug-in-microsoft-outlook-now-exploited-in-attacks/
-
CISA warnt vor Angriffen auf Linux, Apache OFBiz, .NET und Paessler PRTG
DIe US-amerikanische Cybersicherheitsbehörde CISA warnt vor beobachteten Angriffen auf Lücken in Linux, Apache OFBiz, .NET und Paessler PRTG. First seen on heise.de Jump to article: www.heise.de/news/CISA-warnt-vor-Angriffen-auf-Linux-Apache-OFBiz-NET-und-Paessler-PRTG-10271835.html
-
U.S. CISA adds Linux kernel flaw to its Known Exploited Vulnerabilities catalog
Tags: android, attack, cisa, cve, cybersecurity, exploit, infrastructure, kev, linux, vulnerability, zero-dayU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux kernel vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Linux kernel vulnerability, tracked as CVE-2024-53104, to its Known Exploited Vulnerabilities (KEV) catalog. The February 2025 Android security updates addressed 48 vulnerabilities, the zero-day flaw CVE-2024-53104 which is actively exploited in attacks…
-
CISA Adds Four Vulnerabilities to Catalog for Federal Enterprise
CISA adds four new vulnerabilities to its catalog, urging agencies to remediate risks. Learn about the latest exploits and how they impact enterprise security. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/cisa-vulnerabilities-catalog-update/
-
CISA, international agencies offer guidance on edge threats
First seen on scworld.com Jump to article: www.scworld.com/news/cisa-international-agencies-offers-guidance-on-edge-threats
-
CISA Updates KEV Catalog with High-Severity Vulnerabilities”, Patch Now!
The Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its Known Exploited Vulnerabilities (KEV) Catalog by adding several new vulnerabilities that have been actively exploited by cybercriminals. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cisa-adds-new-known-exploited-vulnerabilities-2/
-
CISA Issues Exploitation Warning for .NET Vulnerability
CISA has added CVE-2024-29059, a flaw affecting Microsoft .NET, to its Known Exploited Vulnerabilities catalog. The post CISA Issues Exploitation Warning for .NET Vulnerability appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/cisa-issues-exploitation-warning-for-net-vulnerability/
-
CISA Adds Actively Exploited Apache and Microsoft Vulnerabilities to its Database
Tags: apache, cisa, cyber, cybersecurity, exploit, flaw, framework, infrastructure, kev, microsoft, network, software, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities Catalog with several critical security flaws, prompting heightened vigilance among organizations using affected software platforms. Among these newly added vulnerabilities are severe flaws in Apache OFBiz, Microsoft .NET Framework, and Paessler PRTG Network Monitor. These vulnerabilities, if exploited, could enable attackers to…
-
CISA Releases Nine Security Advisories on ICS Vulnerabilities and Exploits
The Cybersecurity and Infrastructure Security Agency (CISA) has released nine advisories targeting security vulnerabilities in Industrial Control Systems (ICS). These vulnerabilities pose significant risks, including denial of service (DoS), information disclosure, and even remote code execution. Organizations using ICS technologies are urged to immediately address these vulnerabilities to avoid potential exploitation. 1. Western Telematic Inc…
-
CISA Releases New Guidelines to Secure Firewalls, Routers, and Internet-Facing Servers
Tags: cisa, cyber, cybersecurity, firewall, Hardware, infrastructure, international, Internet, network, router, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has unveiled a new set of guidelines to fortify firewalls, routers, internet-facing servers, and other edge devices against cyber threats. This collaborative guidance, supported by leading international cybersecurity organizations, aims to address vulnerabilities in hardware that form the backbone of critical infrastructure and operational networks worldwide. Edge devices”,…
-
Team82 stuft vermeintliche Hintertür in medizinischem Überwachungsmonitor als Schwachstelle ein
Am 30. Januar veröffentlichte die US-amerikanische Cybersicherheitsbehörde CISA eine Warnung, die durch eine Benachrichtigung der US-Arzneimittelbehörde (FDA) ergänzt wurde. Demnach enthalten der in China hergestellte medizinische Überwachungsmonitor Contec-CMS8000 sowie OEM-White-Label-Varianten eine Backdoor, die mit einer chinesischen IP-Adresse kommuniziert. Die Sicherheitsforscher von Team82, der Forschungsabteilung des Spezialisten für die Sicherheit von cyberphysischen Systemen (CPS) Claroty, untersuchten…
-
U.S. CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog
Tags: apple, cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, update, vulnerability, zero-dayU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple Multiple Products Use-After-Free Vulnerability, tracked as CVE-2025-24085, to its Known Exploited Vulnerabilities (KEV) catalog. This week, Apple released security updates to address 2025’s first zero-day vulnerability, tracked as CVE-2025-24085, actively exploited…
-
CISA warns of critical, high-risk flaws in ICS products from four vendors
Tags: access, authentication, automation, cisa, cloud, computing, control, credentials, cve, cvss, cybersecurity, data, exploit, flaw, infrastructure, injection, leak, mitigation, monitoring, open-source, remote-code-execution, risk, service, software, threat, update, vulnerability, windowsThe US Cybersecurity and Infrastructure Security Alliance has issued advisories for 11 critical and high-risk vulnerabilities in industrial control systems (ICS) products from several manufacturers.The issues include OS command injection, unsafe deserialization of data, use of broken cryptographic algorithms, authentication bypass, improper access controls, use of default credentials, sensitive information leaks, and more. The flaws…
-
CISA Warns of Flaws in Aircraft Collision Avoidance Systems
Hackers Unlikley to Exploit Flaws in The Wild. Security researchers found an unpatchable flaw in the system that prevents commercial aircraft from crashing into each other, the U.S. federal government said in a Tuesday advisory that called the likelihood of its exploitation unlikely outside of a laboratory setting First seen on govinfosecurity.com Jump to article:…
-
Ivanti Vulns Chained Together in Cyberattack Onslaught
The threat actors are abusing the vulnerabilities to gain initial access, obtain credentials, and install malicious scripts on user devices. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/cisa-ivanti-vulns-chained-attacks
-
CISA, FBI Examine Ivanti CSA Exploit Chains
First seen on scworld.com Jump to article: www.scworld.com/brief/cisa-fbi-examine-ivanti-csa-exploit-chains