Government ❯ Cybersecurity

CISA

Vulnerability Management Known Exploited Vulnerabilities Vulnerabilities Advisories Federal Agencies Vulnerabilities Catalog Vulnerabilities Management Alerts Emergency Directives Leadership Changes

CISA Adds Zyxel Switch Bug to KEV as Veeam Agent Privilege Flaw Is Publicly Exploited

Federal agencies must install Zyxel’s patched firmware by Sept. 24 to close a bug CISA says is being actively abused.

CISA Orders Rapid Patch of Three Actively Exploited Linux Kernel Flaws

CISA Urges Firms to Plant Internal Cyber Decoys to Catch Post‑Breach Attackers

Critical Cisco Email‑Gateway Zero‑Day Lets Attackers Gain Root

Critical GitLab Path Traversal Now Being Actively Exploited

N‑able Issues Emergency Hotfix for Critical N‑central Zero‑Day

Google Patches Actively Exploited V8 Zero-Day in Chrome Update

PaperCut Zero-Days Escalate to Active Intrusions

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

CISA Red Team Finds Identical Attacks Produced Divergent SOC Outcomes

CISA Flags Active Exploitation of Critical Gitea RCE

CISA Orders Rapid Fixes for Actively Exploited TrueConf Server Flaws

CISA Orders Rapid Fixes After Active Exploitation of Critical MLflow SSRF

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

US and Allied Agencies Publish 2026 SBOM Minimum Elements

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

CISA Orders Federal Patch for Actively Exploited Fortinet FortiSandbox Flaws

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes