Government ❯ Cybersecurity

CISA

Vulnerability Management Known Exploited Vulnerabilities Vulnerabilities Advisories Vulnerabilities Management Leadership Changes Emergency Directives Zero Day Exploits Emergency Response Alerts Quality Era Funding Mechanisms Phishing Attacks Incident Response Federal Agencies VPN Warnings Warnings Incident Management Leadership Data Security Threat Intelligence Election Infrastructure Election Safeguards Threat Assessment Guidelines

CISA Puts Exploited FileZen Bug on KEV With March 17 Fix Deadline

The KEV listing sets a March 17 federal deadline, increasing pressure to deploy Soliton's v5.0.11 fix.

BeyondTrust Pre-Auth RCE Is Now Being Exploited in the Wild

CISA Flags SmarterMail RCE as Ransomware Target, Sets Feb. 26 Patch Deadline

CISA Forces Three-Day Patch for Actively Exploited SolarWinds Web Help Desk Flaw

MAGA Figures Launch Racist Attacks on CISA Acting Chief as DHS Probes Polygraph Flap

Ivanti EPMM Zero-Day RCE Flaws Exploited as CISA Orders Rapid Mitigation

Microsoft’s January Patch Tuesday Fixes 112 Flaws, Confirms DWM Zero-Day Exploited

CISA Puts Actively Exploited Gogs RCE on KEV, Orders Federal Fix by Feb. 2

CISA Adds HPE OneView, Microsoft Office Flaws to Exploited Vulnerabilities List

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

Apple, Google Rush Patches as CISA Flags WebKit Zero‑Day Exploits

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

CISA Adds Actively Exploited GeoServer XXE to KEV, Orders Federal Patching

CISA Warns Commercial Spyware Is Targeting Messaging Apps Used by High-Value Users

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

CISA Adds WatchGuard Firewall Remote Code Execution Flaw to KEV, Sets Dec. 3 Patching Deadline

CISA Adds Gladinet and CWP Flaws to KEV, Setting Nov. 25 Federal Remediation Deadline

CISA Adds VMware Aria Operations/Tools Flaw to KEV, Sets Nov. 20 Patch Deadline for Feds

CISA Adds Motex Lanscope RCE Flaw to KEV, Citing Active Exploitation

CISA Flags Active Exploits of Windows SMB Privilege Bug, Sets Nov. 10 Patch Deadline