Secret CISA credentials found in public GitHub repo
… Nightwing has so far not commented publicly, instead referring questions back to CISA. This isn’t the first time CISA has screwed up—in fact, it’s not even the first time this year . …
Tracked topic
… Nightwing has so far not commented publicly, instead referring questions back to CISA. This isn’t the first time CISA has screwed up—in fact, it’s not even the first time this year . …
… CISA has been without a permanent director since January 20, 2025, when then-CISA director Jen Easterly stepped down ahead of the start of the incoming Trump administration. CISA has also lost about a third of its workforce following cuts, furloughs, and layoffs since Trump took office. …
… Get the whitepaper Related Articles: Analysis of one billion CISA KEV remediation records exposes limits of human-scale security CISA flags Windows Task Host vulnerability as exploited in attacks CISA orders feds to patch exploited Fortinet EMS flaw by Friday CISA flags two-year-old Oracle flaw as … …
… Download Now Related Articles: Microsoft warns of new Defender zero-days exploited in attacks CISA orders feds to patch Gogs RCE flaw exploited in zero-day attacks CISA gives feds 4 days to patch actively exploited cPanel plugin flaw CISA orders feds to patch actively exploited Drupal vulnerability… …
CISA warns of cyberattacks targeting fuel tank monitoring systems
CISA says ‘Copy Fail’ flaw now exploited to root Linux systems
CISA KEV: Linux "Copy Fail" CVE-2026-31431 Turns Kernel Bug into Patch Deadline
I wrote a full technical breakdown of the CISA/Nightwing GitHub credential leak that dropped last week. Sharing here because the coverage mostly stopped at "government agency leaked secrets" without getting into what act…
As the title states, I pushed out UBO via GPO and it stopped some phishing attempts. I did this some time ago but I wanted to write about it now. About two years ago when I joined my company, I was tasked with enforcing …
CISA orders feds to patch actively exploited Drupal vulnerability By Sergiu Gatlan May 26, 2026 04:46 AM CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection vulnerability in the Drupal content management system CMS that it flagged as acti… …
… Get the whitepaper Related Articles: Microsoft warns of new Defender zero-days exploited in attacks Critical SolarWinds Serv-U flaws offer root access to servers CISA flags new SD-WAN flaw as actively exploited in attacks New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute CISA warns… …
… CISA mandated remediation under Binding Operational Directive 22-01 with a 14-day window. …
… That dynamic is reflected in CISA‘s unusually swift inclusion of the flaw in its exploited vulnerabilities list, signaling that the issue poses a significant and immediate risk. …
Security CISA tells feds to patch 13-year-old Apache ActiveMQ bug under active attack Bug hiding in plain sight for over a decade lands on KEV list CISA is sounding the alarm on a newly-exploited Apache ActiveMQ bug, ordering federal agencies to patch within two weeks as attackers circle a flaw tha… …
… CISA stuft Windows-Lücke als aktiv ausgenutzt ein Die US-Behörde CISA hat die Schwachstelle CVE-2026-32202 offiziell in ihren „Known Exploited Vulnerabilities“-Katalog aufgenommen. …