CISA

CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support

CISA urges organizations with affected self-hosted Remote Support appliances to immediately take the actions within this alert.
CISA

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal ...
cisa

CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure

CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA ...
cisa

CISA Releases the Marine Transportation System Resilience Assessment Guide

WASHINGTON – Today, the Cybersecurity and Infrastructure Security Agency (CISA) is releasing an update to the agency’s Marine Transportation System Resilience Assessment Guide (MTS Guide) with a new, ...
cisa

Hitachi Energy Asset Suite

Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite product versions listed in this document. These vulnerabilities can be exploited to potentially cause ...
cisa

Cybersecurity Awareness Month

Critical infrastructure relies on small and medium business to supply, support, or even operate services we all rely on. Make sure your business is cyber secure so you don’t experience an incident ...
cisa

K-12 Resources

In response to the rise in malicious activity with ransomware attacks against K-12 educational institutions and the increase in remote learning, CISA, in collaboration with the FBI, has produced a ...
cisa

Pipeline Cybersecurity

- made up of pipeline owners, operators, and other key stakeholders - to ensure that its activities are informed not only through internal analysis and priority setting, but also through stakeholders' ...
cisa

CLOP Analyst Note

CLOP is a ransomware variant associated with the FIN11 threat actor group and the double extortion tactic, it has previously been used to target several U.S. HPH organizations. Researchers have also ...
cisa

CISA, NSA and FBI Warn of China-Based AI Companies Targeting US AI Models with Industrial-Scale Knowledge Distillation Campaigns to Shortcut AI Development

“CISA is committed to promoting the secure use of AI while fostering the innovation crucial to America’s global competitiveness,” said CISA Acting Director Nick Andersen. “We strongly urge AI ...
cisa

FBI and CISA Release Joint PSA, Just So You Know: False Claims of Hacked Voter Information Likely Intended to Sow Distrust of U.S. Elections

WASHINGTON – Today, as part of their public service announcement (PSA) series to put potential election day cyber related disruptions during the 2024 election cycle into context for the American ...
cisa

CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats

New Resources Help Organizations Assess and Mitigate the Challenges and Growing Impact of Insider Threats ...