Tracked topic
…Analysis of one billion CISA KEV remediation records exposes limits of human-scale security CISA flags Windows Task Host vulnerability as exploited in attacks CISA orders feds to patch exploited Fortinet EMS…
…CISA has been without a permanent director since January 20, 2025, when then-CISA director Jen Easterly stepped down ahead of the start of the incoming Trump administration. CISA has also lost…
…Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch an actively exploited Ivanti Sentry flaw within three days, as mandated by the newly issued Binding Operational Directive (BOD) 26-04…
…Windows BlueHammer flaw now exploited by ransomware gangs By Sergiu Gatlan June 30, 2026 04:53 AM CISA confirmed on Monday that ransomware gangs have begun exploiting a high-severity Microsoft Defender…
CISA is using Mythos to audit government code
CISA warns of cyberattacks targeting fuel tank monitoring systems
"OSS Security Principles and Practices" is Cybersecurity and Infrastructure Security Agency's (CISA) strategic framework for federal agencies to manage open source software throughout its entire lifecycle. This on IProgr…
CISA says ‘Copy Fail’ flaw now exploited to root Linux systems
CISA KEV: Linux "Copy Fail" CVE-2026-31431 Turns Kernel Bug into Patch Deadline
…Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. The agency's urgent…
…Microsoft warns of new Defender zero-days exploited in attacks CISA orders feds to patch Gogs RCE flaw exploited in zero-day attacks CISA gives feds 4 days to patch actively exploited…
…CISA orders feds to patch exploited Ivanti EPMM flaw by Saturday CISA gives feds three days to patch Ivanti flaw exploited as zero-day CISA: Splunk Enterprise flaw actively exploited, patch by…
CISA orders feds to patch actively exploited Drupal vulnerability By Sergiu Gatlan May 26, 2026 04:46 AM CISA has given U.S. government agencies until Wednesday evening to secure their servers…
…Cybersecurity and Infrastructure Security Agency (CISA) warned today that hackers are now actively exploiting a recently patched high-severity SolarWinds Serv-U flaw to crash servers. Serv-U is the company's…
…The saga began in early April when Nightmare Eclipse dropped BlueHammer (CVE-2026-33825), patched in the April 14 Patch Tuesday with its CISA deadline passing in early May. The current countdown…
