Government ❯ Cybersecurity ❯ CISA

Advisories

Known Exploited Vulnerabilities Incident Response Public Safety Security Alerts Threat Mitigation Best Practices Mitigations Vulnerabilities BOD 22-01

CISA Flags Active Exploitation of Critical Gitea RCE

The agency set an August 28 federal patch deadline after warnings that attackers can gain code execution from repository-controlled content.

CISA Orders Rapid Fixes for Actively Exploited TrueConf Server Flaws

CISA Puts Actively Exploited Gogs RCE on KEV, Orders Federal Fix by Feb. 2

CISA Warns Commercial Spyware Is Targeting Messaging Apps Used by High-Value Users

CISA Flags Actively Exploited Sudo Flaw, Sets Oct. 20 Patch Deadline

CISA Orders Federal Agencies to Patch Microsoft Exchange Hybrid Flaw by Monday