Tag: cisa
-
City Water Facility in Kansas Hit by Cyberattack
A cyberattack on a water facility in Arkansas City Kansas again raises the concern of CISA and other U.S. agencies about the ongoing threat by bad act… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/city-water-facility-in-kansas-hit-by-cyberattack/
-
CISA Urges Software Makers to Eliminate XSS Flaws
The latest Secure by Design alert from CISA outlines recommended actions security teams should implement to reduce the prevalence of cross-site script… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/cisa-urges-software-makers-eliminate-xss-flaws
-
CISA boss: Makers of insecure software are enablers of the real villains
First seen on theregister.com Jump to article: www.theregister.com/2024/09/20/cisa_sloppy_vendors_cybercrime_villains/
-
OIG audit calls for more clarity from CISA, DHS on disinformation mission
First seen on cyberscoop.com Jump to article: cyberscoop.com/oig-audit-calls-for-more-clarity-from-cisa-dhs-on-disinformation-mission/
-
CISA Issues Advice to Help Eliminate XSS Bugs
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-advice-eliminate-xss-bugs/
-
CISA warns of actively exploited Apache HugeGraph-Server bug
The U.S. Cybersecurity and Infrastructure Agency (CISA) has added five flaws to its Known Exploited Vulnerabilities (KEV) catalog, among which is a re… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-actively-exploited-apache-hugegraph-server-bug/
-
CISA boss: Makers of insecure software are the real cyber villains
First seen on theregister.com Jump to article: www.theregister.com/2024/09/20/cisa_sloppy_vendors_cybercrime_villains/
-
CISA Flags Two Actively Exploited Vulnerabilities: Critical Threats to Windows and WhatsUp Gold
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning, adding two actively exploited security flaws to its Known Explo… First seen on securityonline.info Jump to article: securityonline.info/cisa-flags-two-actively-exploited-vulnerabilities-critical-threats-to-windows-and-whatsup-gold/
-
Updated CISA exploited vulnerabilities catalog adds several flaws
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/updated-cisa-exploited-vulnerabilities-catalog-adds-several-flaws
-
New CISA Guidance Seeks to Standardize Federal Agencies’ Cyber Defenses
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/new-cisa-guidance-seeks-to-standardize-federal-agencies-cyber-defenses
-
U.S. CISA adds new Ivanti Cloud Services Appliance Vulnerability to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Cloud Services Appliance Vulnerability to its Known Exploited Vulnerabilities… First seen on securityaffairs.com Jump to article: securityaffairs.com/168626/hacking/u-s-cisa-adds-ivanti-csa-flaw-known-exploited-vulnerabilities-catalog.html
-
U.S. CISA adds Microsoft Windows, Apache HugeGraph-Server, Oracle JDeveloper, Oracle WebLogic Server, and Microsoft SQL Server bugs to its Known Exploited Vulnerabilities catalog
Tags: apache, cisa, cybersecurity, exploit, infrastructure, kev, microsoft, oracle, sql, vulnerability, windowsU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows, Apache HugeGraph-Server, Oracle JDeveloper, Oracle WebLogic Serve… First seen on securityaffairs.com Jump to article: securityaffairs.com/168592/security/u-s-cisa-windows-apache-hugegraph-oracle-jdeveloper-oracle-weblogic-sql-server-bugs-to-its-known-exploited-vulnerabilities-catalog.html
-
CISA Releases Cyber Defense Alignment Plan for Federal Agencies
CISA has laid out the FOCAL plan, which aligns the collective operational defense capabilities across federal agencies. The post CISA Releases Cyber D… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-releases-cyber-defense-alignment-plan-for-federal-agencies/
-
Oracle Vulnerabilities From ‘Miracle Exploit’ Targeted in Attacks
CISA is warning organizations that two Oracle vulnerabilities tracked as CVE-2022-21445 and CVE-2020-14644 are being exploited in the wild. The post … First seen on securityweek.com Jump to article: www.securityweek.com/cisa-oracle-vulnerabilities-from-miracle-exploit-targeted-in-attacks/
-
U.S. CISA adds Microsoft Windows MSHTML Platform and Progress WhatsUp Gold bugs to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows MSHTML Platform and Progress WhatsUp Gold bugs to its Known Exploi… First seen on securityaffairs.com Jump to article: securityaffairs.com/168505/security/u-s-cisa-microsoft-windows-mshtml-platform-progress-whatsup-gold-bugs-known-exploited-vulnerabilities-catalog.html
-
CISA, FBI Urge Organizations to Eliminate XSS Vulnerabilities
CISA and the FBI have released an alert on XSS vulnerabilities, urging organizations to adopt a secure by design approach and eliminate them. The post… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-fbi-urge-organizations-to-eliminate-xss-vulnerabilities/
-
CISA warns of hackers exploiting bug for endlife Ivanti product
First seen on cyberscoop.com Jump to article: cyberscoop.com/ivanti-vulnerability-cisa-kev/
-
Can CISA’s Federal Cybersecurity Alignment Plan Really Work?
Experts Warn Federal Cyber Strategies Increasingly Lack Accompanying Resources. The U.S. Cybersecurity and Infrastructure Security Agency has released… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cisas-federal-cybersecurity-alignment-plan-really-work-a-26304
-
CISA urges software devs to weed out XSS vulnerabilities
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-urges-software-devs-to-weed-out-xss-vulnerabilities/
-
CISA warns of Windows flaw used in infostealer malware attacks
CISA has ordered U.S. federal agencies to secure their systems against a recently patched Windows MSHTML spoofing zero-day bug exploited by the Void B… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-windows-flaw-used-in-infostealer-malware-attacks/
-
CISA warnt: Acht Jahre alte Lücke in ImageMagick und weitere angegriffen
First seen on heise.de Jump to article: www.heise.de/news/Acht-Jahre-alte-Luecke-in-ImageMagick-und-weitere-Lecks-missbraucht-9863292.html
-
FBI, CISA Warn of Fake Voter Data Hacking Claims
Hackers keep making claims about voter information compromise, but the US government says they’re just trying to sow distrust in the elections. The po… First seen on securityweek.com Jump to article: www.securityweek.com/fbi-cisa-warn-of-fake-voter-data-hacking-claims/
-
U.S. CISA adds Ivanti Cloud Services Appliance Vulnerability to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Cloud Services Appliance Vulnerability to its Known Exploited Vulnerabilities… First seen on securityaffairs.com Jump to article: securityaffairs.com/168398/hacking/u-s-cisa-adds-ivanti-csa-vulnerability-to-its-known-exploited-vulnerabilities-catalog.html
-
CVE-2024-8190: Investigating CISA KEV Ivanti Cloud Service Appliance Command Injection Vulnerability
On September 10, 2024, Ivanti released a security advisory for a command injection vulnerability for it’s Cloud Service Appliance (CSA) product. Initi… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/cve-2024-8190-investigating-cisa-kev-ivanti-cloud-service-appliance-command-injection-vulnerability/
-
RansomHub Ransomware Has Hit 210 Victims
A new advisory by CISA and the FBI warned of recent attacks by RansomHub and said that the group and its affiliates have successfully hit over 210 vic… First seen on duo.com Jump to article: duo.com/decipher/cisa-ransomhub-ransomware-has-hit-210-victims
-
Multiple attacks force CISA to order agencies to upgrade or remove endlife Ivanti appliance
First seen on therecord.media Jump to article: therecord.media/cisa-urges-federal-agencies-remove-ivanti-product
-
Multiple attacks forces CISA to order agencies to upgrade or remove endlife Ivanti appliance
First seen on therecord.media Jump to article: therecord.media/cisa-urges-federal-agencies-remove-ivanti-product
-
CISA announces its first chief artificial intelligence officer (CAIO)
On August 1, 2024, CISA announced that it had appointed Lisa Einstein as its first chief artificial intelligence officer (CAIO). Einstein has worked w… First seen on securityintelligence.com Jump to article: securityintelligence.com/news/cisa-announces-first-chief-artificial-intelligence-officer/
-
CISA Flags ICS Bugs in Baxter, Mitsubishi Products
Tags: cisaFirst seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/cisa-flags-ics-bugs-in-baxter-mitsubishi-products
-
CISA Breaks Silence On Controversial Airport Security Bypass Vulnerability
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36316/CISA-Breaks-Silence-On-Controversial-Airport-Security-Bypass-Vulnerability.html