Government ❯ Cybersecurity

CISA

Vulnerability Management Vulnerabilities Known Exploited Vulnerabilities Advisories Guidelines Leadership Changes Emergency Directives Zero Day Exploits Vulnerabilities Management Emergency Response Alerts Phishing Attacks Quality Era Funding Mechanisms Threat Intelligence Election Safeguards Incident Response Federal Agencies VPN Warnings Warnings Threat Assessment Election Infrastructure

Apple, Google Rush Patches as CISA Flags WebKit Zero‑Day Exploits

CISA added Apple’s WebKit flaw to its Known Exploited list, setting a January 5 federal remediation deadline.

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

CISA Adds Actively Exploited GeoServer XXE to KEV, Orders Federal Patching

CISA Warns Commercial Spyware Is Targeting Messaging Apps Used by High-Value Users

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

CISA Adds WatchGuard Firewall Remote Code Execution Flaw to KEV, Sets Dec. 3 Patching Deadline

CISA Adds Gladinet and CWP Flaws to KEV, Setting Nov. 25 Federal Remediation Deadline

CISA Adds VMware Aria Operations/Tools Flaw to KEV, Sets Nov. 20 Patch Deadline for Feds

CISA Adds Motex Lanscope RCE Flaw to KEV, Citing Active Exploitation

CISA Flags Active Exploits of Windows SMB Privilege Bug, Sets Nov. 10 Patch Deadline

CISA Adds Actively Exploited Adobe AEM Forms Flaw to KEV Catalog

CISA Flags Actively Exploited Sudo Flaw, Sets Oct. 20 Patch Deadline

CISA Discloses Malware Behind Ivanti EPMM Zero-Day Intrusions, Publishes IOCs and Detection Rules

CISA Claims Stewardship of CVE, Unveils 'Quality Era' Roadmap

CISA Adds Actively Exploited DELMIA Apriso Flaw to KEV With Oct. 2 Fix Deadline

CISA Adds Actively Exploited TP-Link and WhatsApp Flaws to KEV, Sets September Deadlines

CISA Lists Two N-able N-central Flaws as Actively Exploited

CISA Orders Federal Agencies to Patch Microsoft Exchange Hybrid Flaw by Monday

CISA Adds Three D-Link Router Flaws to Known Exploited Vulnerabilities Catalog