Tag: cisa
-
CISA Warns Kemp LoadMaster OS Command Injection Vulnerability Exploited in Attacks
Tags: advisory, attack, cisa, cyber, cybersecurity, exploit, infrastructure, injection, threat, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent security advisory warning organizations about an active exploitation of a critical vulnerability in Progress Kemp LoadMaster, a popular load balancing and application delivery solution. Designated as CVE-2024-1212, the vulnerability allows remote, unauthenticated attackers to execute arbitrary commands on affected systems, posing a severe threat to organizations…
-
CISA tags Progress Kemp LoadMaster flaw as exploited in attacks
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added three new flaws in its Known Exploited Vulnerabilities (KEV) catalog, including a critical OS command injection impacting Progress Kemp LoadMaster. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-tags-progress-kemp-loadmaster-flaw-as-exploited-in-attacks/
-
MSSP Market Update: CISA Director Expected to Depart
First seen on scworld.com Jump to article: www.scworld.com/news/mssp-market-update-cisa-director-expected-to-depart
-
Salt Typhoon Hits T-Mobile as Part of Telecom Attack Spree
The company says no sensitive data was stolen, but federal agencies claim otherwise. CISA and FBI sources said attackers accessed all records of specific customers and the private communications of targeted individuals. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/salt-typhoon-tmobile-telecom-attack-spree
-
CISA Director Jen Easterly to Step Down
Tags: cisaCISA told SecurityWeek that all appointees of the Biden-Harris administration will leave by noon on inauguration day. The post CISA Director Jen Easterly to Step Down appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/cisa-director-jen-easterly-to-step-down/
-
CISA Chief Jen Easterly Set to Step Down on January 20
Easterly and her Deputy Director Nitin Natarajan are expected to leave office before President-elect Trump names a new leadership First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-chief-jen-easterly-to-step/
-
Federal probe finds vulnerabilities across more than 300 US water systems
The Environmental Protection Agency lacks a documented plan to coordinate incident reporting with CISA, the agency’s Office of Inspector General found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/federal-probe-vulnerabilities-us-water-systems/733331/
-
CISA Director Easterly to Leave When Trump Assumes Presidency
Jen Easterly, who took over as CISA director in 2021, will step down in January when Donald Trump takes over as president, creating an uncertain future for the critical cybersecurity agency and the country’s larger security posture in an increasingly complex cyberthreat environment. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/cisa-director-easterly-to-leave-when-trump-assumes-presidency/
-
Kritische Palo-Alto-Lücke: Details und Patches sind da, CISA warnt vor Exploit
Fast drei Wochen nach ersten Exploit-Gerüchten hat der Hersteller nun endlich reagiert, trickst aber. Derweil warnt die US-Cyberbehörde vor Angriffen. First seen on heise.de Jump to article: www.heise.de/news/Kritische-Palo-Alto-Luecke-Patches-sind-da-CISA-warnt-vor-Exploit-10051696.html
-
Sicherheitsinfos: CISA erweitert Schwachstellenliste (Palo Alto Networks, Progress Kemp) und mehr
Kleiner Sammelbeitrag in Richtung Sicherheit. Die CISA hat gerade ihre Schwachstellenliste um CVEs zu Palo Alto Networks, Progress Kemp (LoadMaster) erweitert und vor einigen Tagen die Liste der 2023 am häufigsten angegriffenen Schwachstellen veröffentlich. Darüber hinaus gibt es Meldungen zu … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/19/sicherheitsinfos-cisa-erweitert-schwachstellenliste-palo-alto-networks-progress-kemp-und-mehr/
-
U.S. CISA adds Progress Kemp LoadMaster, Palo Alto Networks PAN-OS and Expedition bugs to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Progress Kemp LoadMaster, Palo Alto Networks PAN-OS and Expedition bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the descriptions of the above vulnerabilities: CVE-2024-1212 is a Progress Kemp LoadMaster…
-
CISA Alert: Active Exploitation of VMware vCenter and Kemp LoadMaster Flaws
Now-patched security flaws impacting Progress Kemp LoadMaster and VMware vCenter Server have come under active exploitation in the wild, it has emerged.The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added CVE-2024-1212 (CVSS score: 10.0), a maximum-severity security vulnerability in Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog. It was First seen…
-
Kritische Palo-Alto-Lücke: Patches sind da, CISA warnt vor Exploit
Fast drei Wochen nach ersten Exploit-Gerüchten hat der Hersteller nun endlich reagiert, trickst aber. Derweil warnt die US-Cyberbehörde vor Angriffen. First seen on heise.de Jump to article: www.heise.de/news/Kritische-Palo-Alto-Luecke-Patches-sind-da-CISA-warnt-vor-Exploit-10051696.html
-
Jen Easterly, CISA Director, to Step Down on Inauguration Day
Tags: cisaOther Biden administration appointees at CISA will also submit their resignations on Jan. 20, as the cyberdefense agency prepares for President-elect Trump’s new DHS director. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/jen-easterly-cisa-director-resign-inauguration-day
-
Easterly to step down from CISA director role on Inauguration Day
Tags: cisaCISA confirmed that political appointees of the Biden administration will also depart the agency as the Trump administration takes over. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/easterly-step-down-cisa-director-inauguration/733199/
-
CISA director Jen Easterly to depart agency on January 20
CISA’s director will depart the agency after three years at the helm, as part of the “seamless transition” of government power. First seen on techcrunch.com Jump to article: techcrunch.com/2024/11/18/cisa-director-jen-easterly-to-depart-agency-on-january-20/
-
18th November Threat Intelligence Report
The FBI and CISA issued a joint statement detailing a major Chinese cyber-espionage campaign targeting U.S. telecommunications infrastructure, led by the APT group Salt Typhoon. This operation compromised networks to steal call […] First seen on research.checkpoint.com Jump to article: research.checkpoint.com/2024/18th-november-threat-intelligence-report/
-
T-Mobile is one of the victims of the massive Chinese breach of telecom firms
T-Mobile confirmed being a victim of recent hacking campaigns linked to China-based threat actors targeting telecom companies. T-Mobile confirms it was hacked as part of a long-running cyber espionage campaign targeting Telco companies. Recently, the FBI and CISA announced they are continuing to investigate a large-scale cyber-espionage campaign by China-linked threat actors targeting U.S. telecoms,…
-
Palo Alto Networks’ customer migration tool hit by trio of CVE exploits
CISA warned of two critical and actively exploited vulnerabilities in Expedition one week after another CVE came under active exploitation in the same product. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/palo-alto-networks-migration-tool-exploits/733072/
-
BSI/CISA-Warnung: Angriffe auf Ungepatchte Schwachstelle in Firewalls von Palo Alto Networks
In den Firewalls von Palo Alto Networks soll eine ungepatchte Schwachstelle existieren. Über diese Schwachstelle kann auf das Management Interface zugegriffen werden. Das wird wohl bereits für Angriffe ausgenutzt. Sowohl das BSI als auch die US-Behörde CISA warnen: Kunden sollten … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/16/bsi-cisa-warnung-angriffe-auf-ungepatchte-schwachstelle-in-firewalls-von-palo-alto-networks/
-
CISA Faces Uncertain Future Under Trump
Trump Administration Picks May Test Bipartisan Support for Cybersecurity Agency. Newly empowered Republicans in U.S. president-elect Donald Trump’s orbit appear slated to enact far-reaching changes to the federal cyber defense agency, with one senator pledging to act on his long-standing enmity to the Cybersecurity and Infrastructure Security Agency. First seen on govinfosecurity.com Jump to article:…
-
More bugs in Palo Alto Expedition see active exploitation, CISA warns
Hackers have been actively targeting the firewall management software through multiple vulnerabilities. First seen on cyberscoop.com Jump to article: cyberscoop.com/palo-alto-expedition-firewall-exploit-cisa-kev/
-
CISA Warns of Two More Palo Alto Expedition Flaws Exploited in Attacks
CISA has added two more Palo Alto Networks Expedition flaws, CVE-2024-9463 and CVE-2024-9465, to its KEV catalog. The post CISA Warns of Two More Palo Alto Expedition Flaws Exploited in Attacks appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-two-more-palo-alto-expedition-flaws-exploited-in-attacks/
-
U.S. CISA adds Palo Alto Networks Expedition bugs to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks Expedition bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following Palo Alto Networks Expedition vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Last week, Palo Alto Networks addressed multiple vulnerabilities that an attacker can chain to hijack…
-
Zero-Day Exploits Surge in 2023, Cisco, Fortinet Vulnerabilities Targeted
A report from the Five Eyes cybersecurity alliance, released by the CISA, highlights the majority of the most exploited vulnerabilities last year were initially zero-day flaws, a significant increase compared to 2022 when less than half of the top vulnerabilities were zero-day exploits. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/zero-day-exploits-surge-in-2023-cisco-fortinet-vulnerabilities-targeted/
-
CISA warnt vor Angriffen auf Palo-Alto-Software
Erst vergangene Woche warnte die CISA vor einer angegriffenen Sicherheitslücke in Palo Altos Expedition, jetzt stehen weitere Lecks unter Beschuss. First seen on heise.de Jump to article: www.heise.de/news/Palo-Alto-Weitere-Sicherheitslecks-in-MIgrationstool-aktiv-angegriffen-10036380.html
-
Vietnam Strengthens Cybersecurity by Partnering with CISA to Secure Critical Infrastructure
The Vietnam Authority of Information Security (AIS), part of the Ministry of Information and Communications, has signed a memorandum of understanding (MoU) with the Cybersecurity and Infrastructure Security Agency (CISA) under the US Department of Homeland Security. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/vietnam-authority-of-information-security-cisa/
-
CISA Warns of Actors Exploiting Two Palo Alto Networks Vulnerabilities
Tags: cisa, cve, cyber, cybersecurity, exploit, infrastructure, kev, malicious, network, risk, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert and added two new vulnerabilities related to Palo Alto Networks to its Known Exploited Vulnerabilities Catalog. These vulnerabilities, CVE-2024-9463 and CVE-2024-9465, are reportedly actively exploited by malicious cyber actors. CISA emphasizes that both vulnerabilities pose significant risks, particularly to federal systems. CVE-2024-9463: Palo…
-
CISA Flags Two Actively Exploited Palo Alto Flaws; New RCE Attack Confirmed
Tags: attack, cisa, cybersecurity, exploit, flaw, infrastructure, kev, network, rce, remote-code-execution, update, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that two more flaws impacting the Palo Alto Networks Expedition have come under active exploitation in the wild.To that, it has added the vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the necessary updates by…
-
CISA Flags Critical Palo Alto Network Flaws Actively Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that two more flaws impacting the Palo Alto Networks Expedition have come under active exploitation in the wild.To that, it has added the vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the necessary updates by…