Stories tagged “Cisa.”
30 stories
The Trump administration's cuts to the Cybersecurity and Infrastructure Security Agency (CISA) have left the US vulnerable to cyberattacks, particularly from Iran, which has been targeting US water and wastewater systems. CISA's budget was reduced and its staff cut by one…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability. Kemp LoadMaster is a popular Application Delivery Controller (ADC) and server load balancer us…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned federal agencies of hackers exploiting vulnerabilities in IBM Langflow, N-central, and Apache Tomcat. The agency has given federal agencies three days to mitigate the vulnerabilities.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability is CVE-2026-63077, a JetBrains TeamCity Deserialization of Untrusted Data Vulnerability.
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. These vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability, CVE-2026-18577, is an authentication bypass using an alternate path or channel in N-able N-central.
Cyberattacks have hit water facilities in seven states across the US, causing flooding and loss of water pressure. The FBI and EPA warn that hackers are targeting critical infrastructure, specifically Programmable Logic Controllers (PLCs).
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. The agency's urgent alert comes after hackers disr…
2026 Minimum Elements for a Software Bill of Materials (SBOM)
CISA, the National Security Agency, the Federal Bureau of Investigation, and international partners released joint guidance on the 2026 Minimum Elements for a Software Bill of Materials (SBOM). This updates and replaces the minimum elements for an SBOM published by the Na…
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability is a use of hard-coded password in Cisco Secure Firewall Management Center.
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
CISA has issued an advisory for multiple vulnerabilities found in the GNU/Linux subsystem of Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP firmware version V3.1.6. Siemens is preparing fixes and recommends countermeasures for affected products.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerabilities are CVE-2025-68686 and CVE-2026-16812.
Weintek cMT3092X | CISA
CISA has identified vulnerabilities in Weintek cMT3092X that could allow a non-privileged user to escalate privileges or view the credentials of other users. The affected versions are cMT3092X firmware <20210218 and Weintek EasyWeb <v2.1.20. Weintek recommends users apply…
Panduit IntraVUE Vulnerabilities Exposed: Multiple Flaws in Industrial Control System
CISA has identified multiple vulnerabilities in Panduit IntraVUE, a industrial control system. The vulnerabilities, including plaintext storage of a password, unintended proxy or intermediary, exposure of sensitive system information, and inadequate encryption strength, c…
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. These vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Rockwell Automation 1734 POINT I/O
CISA advisory warns of a high-severity denial-of-service flaw in Rockwell Automation 1734 POINT I/O modules that can be triggered remotely via crafted CIP messages, requiring a restart to recover.
CISA Warns of SALTO ProAccess Space Vulnerability
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory warning of a vulnerability in SALTO ProAccess Space, a software used for managing access to industrial control systems. The vulnerability, identified as CVE-2026-11889, allows an authent…
CISA Adds Three Known Exploited Vulnerabilities to Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. These vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal ent…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their systems by Saturday against ongoing attacks exploiting a critical vulnerability in the Oracle E-Business Suite (EBS) financial application.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. CISA urged security teams to closely monitor affected servers for signs o…
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. These vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.
ABB Ability Edgenius Vulnerability CVE-2026-31431
A vulnerability in the ABB Ability Edgenius product versions listed as affected in the advisory may allow a locally authenticated user or compromised container workload to gain elevated (root) privileges on affected systems.
CISA Urges SharePoint Hardening After New Exploitations
CISA has issued an alert regarding active exploitation of multiple vulnerabilities (CVE-2026-32201, CVE-2026-45659, CVE-2026-56164) in on-premises SharePoint Server instances, enabling unauthorized access and remote code execution. The agency urges organizations to apply …
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials in a public GitHub repository for almost six months. Experts say the gaps identified in the agency…
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability, CVE-2008-4128, is a Cisco IOS Cross-Site Request Forgery Vulnerability.
The US federal cybersecurity agency CISA revealed that it had to build its incident playbook during the incident after an investigative reporter notified the agency that a contractor had publicly exposed sensitive keys and credentials for accessing U.S. government systems.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. These vulnerabilities, CVE-2026-48939 and CVE-2026-56291, are a frequent attack vector for malicious cyber actors and pose s…
CISA Warns of OpenPLC v3 Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory warning of a vulnerability in OpenPLC v3, a widely used industrial control system. The vulnerability, identified as CVE-2026-14480, allows an authenticated attacker to write arbitrary files…
CISA urges federal agencies to address security vulnerability in Langflow tool within a week.
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA updates its KEV Catalog with three new vulnerabilities.