Government ❯ Cybersecurity

CISA

Vulnerability Management Vulnerabilities Known Exploited Vulnerabilities Advisories Federal Agencies Vulnerabilities Catalog Alerts Vulnerabilities Management Emergency Directives Leadership Changes

CISA Orders Rapid Patching of Actively Exploited TrueConf Server Flaws

The agency says the bugs let unauthenticated attackers run code on on‑premises TrueConf servers reachable on TCP port 4307.

CISA Orders Rapid Fixes After Active Exploitation of Critical MLflow SSRF

Stories older than 24h

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

US and Allied Agencies Publish 2026 SBOM Minimum Elements

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

CISA Orders Federal Patch for Actively Exploited Fortinet FortiSandbox Flaws

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

Zimbra Patches Critical Classic Web Client XSS

CISA Is Using Anthropic’s Mythos to Scan Federal Code

CISA Adds Microsoft SharePoint RCE to Known Exploited List and Orders Rapid Federal Patching

CISA Adds Ubiquiti and Lantronix Flaws to Known Exploited Vulnerabilities Catalog

Critical Splunk Enterprise Flaw Is Being Exploited; CISA Orders Federal Fix by Sunday

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

CISA Orders Federal Agencies to Patch Highest‑Risk Bugs Within Three Days

CISA Says SolarWinds Serv-U Flaw Is Being Exploited to Crash Servers

CISA Adds Exploited Mirasvit Magento Flaw to KEV After Active RCE Attacks

CISA Flags Two-Year-Old Oracle WebLogic Flaw as Actively Exploited

Active Exploits Hit Drupal SQL Injection Flaw CVE-2026-9082