CISA has updated this Alert to: (1) include CVE-2026-111357 and CVE-2026-118527 and reflect their addition to the Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026; and (2) update the ...
The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Health and Human Services (HHS), U.S. Department of Agriculture (USDA), and the Department of ...
Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources. For users who are currently using PowerSYSTEM ...
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of ...
As the summer season approaches, people across the country are preparing to attend a wide array of special events, from global showcases like the FIFA World Cup 2026™ to celebrations marking America’s ...
Since initial release of ScubaGear in 2022 and ScubaGoggles in 2023, CISA has diligently collaborated and worked with government and industry partners to update these tools so they remain current and ...
A report providing organizations recommended guidance and considerations as part of their network architecture, security baseline, continuous monitoring, and Incident Response practices in order to ...
to address CVE-2023-4966 in NetScaler ADC and NetScaler Gateway. On Oct. 17, Citrix updated its Alert to include “exploits of CVE-2023-4966 on unmitigated appliances have been observed.” On Oct. 18, ...
A new Colorado law has created an Auxiliary Emergency Communications (AuxComm) Unit within the state’s Division of Homeland Security and Emergency Management (DHSEM).
Organizations should report anomalous cyber activity and/or cyber incidents 24/7 to CISA. CISA is working with the K-12 education sector to help raise awareness and understanding of the risks as well ...
Simple passwords, such as 12345, or common identifying information, like birthdays and pet names, are not safe for protecting important accounts holding personal information. Using an easy-to-guess ...