Government ❯ Cybersecurity Policy

CISA

Vulnerability Management Emergency Directives Federal Directives FBI Vulnerability Disclosure Federal Agencies Defense Department Binding Operational Directive Risk Management AI and Cybersecurity Known Exploited Vulnerabilities Known Exploited Vulnerabilities Catalog

Cisco Issues Emergency Patch for Maximum‑Severity ISE Zero‑Day

The U.S. added the flaw to its Known Exploited Vulnerabilities list with a three‑day federal patch deadline to force rapid remedial action.

Critical GitLab Path Traversal Now Being Actively Exploited

Cisco Says Zero‑Day Static‑Credential Flaw in Firewall Manager Is Being Exploited

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

CISA Orders Federal Agencies to Patch Highest‑Risk Bugs Within Three Days

CISA Adds LiteLLM Command‑Injection Flaw to Known Exploited Vulnerabilities List

Critical Check Point VPN Flaw Exploited by Ransomware-Linked Attackers

US Agencies Release Zero-Trust Guidance for Operational Technology

CISA Flags Actively Exploited Windows Shell Bug, Sets May 12 Patch Deadline

CISA Adds ActiveMQ RCE to KEV With April 30 Patch Deadline

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

CISA Puts Actively Exploited n8n RCE on KEV, Orders Federal Patching by March 25

Ivanti EPMM Zero-Day RCE Flaws Exploited as CISA Orders Rapid Mitigation

CISA Puts Actively Exploited Gogs RCE on KEV, Orders Federal Fix by Feb. 2

CISA Adds Oracle Identity Manager RCE to KEV, Citing Active Exploitation and Setting Dec. 12 Deadline

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

CISA Adds WatchGuard Firewall Remote Code Execution Flaw to KEV, Sets Dec. 3 Patching Deadline

CISA Adds VMware Aria Operations/Tools Flaw to KEV, Sets Nov. 20 Patch Deadline for Feds

CISA Adds Two Actively Exploited DELMIA Apriso Flaws to KEV