Government ❯ Cybersecurity ❯ CISA

Vulnerabilities

Known Exploited Vulnerabilities Federal Agencies Binding Operational Directive 22-01 Incident Response BOD 22-01 Federal Regulations Mitigation Strategies Mitigations Federal Agencies Response Remediation Regulations Copy Fail Response Measures KEV Federal Directives Federal Civilian Executive Branch Recommendations Federal Recommendations Advisories Mitigation Actions

12 ARTICLES

2w ago

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

The agency says months‑old vendor fixes were not widely deployed and that exposed proxy appliances have permitted web‑shell activity, requiring immediate patching, forensic checks.

4 ARTICLES

3w ago

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

4 ARTICLES

3mo ago

CISA Flags Two-Year-Old Oracle WebLogic Flaw as Actively Exploited

15 ARTICLES

4mo ago

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

7 ARTICLES

4mo ago

cPanel Zero-Day Drives Ongoing Exploits as CISA Demands Fast Patching

6 ARTICLES

4mo ago

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

7 ARTICLES

5mo ago

CISA Orders Federal Agencies to Patch Actively Exploited Citrix NetScaler Flaw

11 ARTICLES

8mo ago

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

6 ARTICLES

10mo ago

CISA Flags Active Exploits of Windows SMB Privilege Bug, Sets Nov. 10 Patch Deadline

3 ARTICLES

11mo ago

CISA Flags Actively Exploited Sudo Flaw, Sets Oct. 20 Patch Deadline

6 ARTICLES

last yr.

CISA Adds Actively Exploited TP-Link and WhatsApp Flaws to KEV, Sets September Deadlines

7 ARTICLES

last yr.

CISA Lists Two N-able N-central Flaws as Actively Exploited

Vulnerabilities

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

CISA Orders Rapid Fixes for Actively Exploited TrueConf Server Flaws

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

CISA Flags Two-Year-Old Oracle WebLogic Flaw as Actively Exploited

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

cPanel Zero-Day Drives Ongoing Exploits as CISA Demands Fast Patching

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

CISA Orders Federal Agencies to Patch Actively Exploited Citrix NetScaler Flaw

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

CISA Flags Active Exploits of Windows SMB Privilege Bug, Sets Nov. 10 Patch Deadline

CISA Flags Actively Exploited Sudo Flaw, Sets Oct. 20 Patch Deadline

CISA Adds Actively Exploited TP-Link and WhatsApp Flaws to KEV, Sets September Deadlines

CISA Lists Two N-able N-central Flaws as Actively Exploited

Never miss stories about

Vulnerabilities