CISA

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal ...
CISA

CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support

CISA urges organizations with affected self-hosted Remote Support appliances to immediately take the actions within this alert.
cisa

Critical Vulnerabilities in PHP Require Immediate Patching

CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as “php2shell,” allow ...
cisa

Moxa AIG-302 ThingsPro Edge

A missing authorization vulnerability exists in the internal API /api/v1/secrets/ for some of Moxa's industrial computing products. A privileged authenticated attacker with adjacent network access ...
cisa

Hitachi Energy MicroSCADA X SYS600 Product

Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the ...
cisa

Joint Statement from Elections Infrastructure Government Coordinating Council & the Election Infrastructure Sector Coordinating Executive Committees

The members of Election Infrastructure Government Coordinating Council (GCC) Executive Committee – Cybersecurity and Infrastructure Security Agency (CISA) Assistant Director Bob Kolasky, U.S. Election ...
cisa

Hitachi Energy RTU500 Product

The information in this document is subject to change without notice and should not be construed as a commitment by Hitachi Energy. Hitachi Energy provides no warranty, express or implied, including ...
cisa

Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation

The National Institute of Standards and Technology (NIST), National Security Agency’s Super Intelligence Security Center (NSA SISC) and Cybersecurity and Infrastructure Security Agency (CISA) ...
cisa

CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure

CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA ...
cisa

High-Risk Communities

Organizations should report anomalous cyber activity and/or cyber incidents 24/7 to CISA. This series of "how-to" labs provides simple, non-technical guidance for individuals within high-risk ...
cisa

Threat Hunting

GOING FORWARD: Expand detection capabilities to focus on native endpoint and cloud visibility, increase partnerships with industry to fill blind spots, and move to a persistent hunting model ...