Government ❯ Cybersecurity ❯ CISA

Advisories

Threat Mitigation Incident Response Public Safety Security Alerts BOD 22-01 Best Practices Mitigations Known Exploited Vulnerabilities

CISA Puts Actively Exploited Gogs RCE on KEV, Orders Federal Fix by Feb. 2

The flaw is a symlink-based path traversal in Gogs’ PutContents API that attackers have abused for months.

CISA Warns Commercial Spyware Is Targeting Messaging Apps Used by High-Value Users

CISA Flags Actively Exploited Sudo Flaw, Sets Oct. 20 Patch Deadline

CISA Orders Federal Agencies to Patch Microsoft Exchange Hybrid Flaw by Monday