Government ❯ Cybersecurity ❯ Federal Agencies

CISA

Vulnerability Management Operational Directives Known Exploited Vulnerabilities Emergency Directives Mitigation Strategies BOD 26-04 Workforce Management Incident Response Security Recommendations Encryption Guidelines

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

CISA's listings create legal near‑term patch deadlines for federal agencies.

Check Point Patches Exploited SmartConsole Authentication Bypass

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

US, UK Warn of ‘Firestarter’ Backdoor on Cisco Firewalls That Survives Patches

DarkSword iPhone Exploit Leaks on GitHub, Threatens Unpatched Devices

CISA Flags SharePoint, Zimbra Flaws as Actively Exploited, Sets Rapid Federal Patching Deadlines

CISA Adds Three Actively Exploited Flaws to KEV, Sets Fast Federal Patching Deadlines

CISA Orders Federal Agencies to Replace Unsupported Edge Devices

CISA Forces Three-Day Patch for Actively Exploited SolarWinds Web Help Desk Flaw

Apple Prepares RCS End-to-End Encryption in iOS 26.3 Beta

CISA Puts Actively Exploited Gogs RCE on KEV, Orders Federal Fix by Feb. 2

CISA Confirms Active CitrixBleed 2 Exploitation and Mandates One-Day Patch