Government ❯ Cybersecurity

CISA

Vulnerability Management Known Exploited Vulnerabilities Vulnerabilities Advisories Federal Agencies Vulnerabilities Management Alerts Leadership Changes Election Safeguards Zero Day Exploits

US and Allied Agencies Publish 2026 SBOM Minimum Elements

The update raises expectations for transitive component coverage, cryptographic proof, stronger procurement leverage for buyers.

Stories older than 24h

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

CISA Orders Federal Patch for Actively Exploited Fortinet FortiSandbox Flaws

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

Zimbra Patches Critical Classic Web Client XSS

CISA Is Using Anthropic’s Mythos to Scan Federal Code

CISA Adds Microsoft SharePoint RCE to Known Exploited List and Orders Rapid Federal Patching

CISA Adds Ubiquiti and Lantronix Flaws to Known Exploited Vulnerabilities Catalog

Critical Splunk Enterprise Flaw Is Being Exploited; CISA Orders Federal Fix by Sunday

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

CISA Orders Federal Agencies to Patch Highest‑Risk Bugs Within Three Days

CISA Says SolarWinds Serv-U Flaw Is Being Exploited to Crash Servers

CISA Adds Exploited Mirasvit Magento Flaw to KEV After Active RCE Attacks

CISA Flags Two-Year-Old Oracle WebLogic Flaw as Actively Exploited

Active Exploits Hit Drupal SQL Injection Flaw CVE-2026-9082

CISA Contractor Left AWS GovCloud Keys and Internal Passwords in Public GitHub Repo

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

cPanel Zero-Day Drives Ongoing Exploits as CISA Demands Fast Patching