Government ❯ Cybersecurity ❯ Regulations

CISA

Known Exploited Vulnerabilities Vulnerabilities Vulnerability Management Federal Agencies Vulnerability Alerts Binding Operational Directive Emergency Directives BOD 22-01

Critical Joomla Extension Flaws Exploited for Remote Code Execution

They let unauthenticated attackers upload PHP web shells that give remote control of vulnerable sites and expose data to theft.

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

Google Releases June Android Patches Fixing Actively Exploited Zero‑Day

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

Microsoft Issues Emergency Patches for Two Actively Exploited Defender Zero‑Days

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

Fortinet Begins Patching Actively Exploited FortiCloud SSO Bypass as CISA Sets Jan. 30 Deadline

Cisco Releases Fix for AsyncOS Zero-Day Exploited on Secure Email Appliances

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

CISA Adds Actively Exploited WinRAR and Windows Flaws to KEV, Sets Dec. 30 Deadline

CISA Adds WatchGuard Firewall Remote Code Execution Flaw to KEV, Sets Dec. 3 Patching Deadline

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

SolarWinds Ships Third Hotfix for Critical Web Help Desk RCE Bypass

CISA Lists Two N-able N-central Flaws as Actively Exploited