The threat landscape is evolving at an unprecedented pace. Nation-state actors and other malicious adversaries are becoming increasingly sophisticated in their attempts to compromise U.S. networks.

Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated ...

Join members of CISA’s senior leadership team as they dig deeper into the reality confronting U.S. critical infrastructure as adversaries leverage tech-enabled tools to accelerate the number, and ...

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code.

WASHINGTON - Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly issued the following statement today on the security of the 2024 elections: Over the past several weeks, ...

The NICE Cybersecurity Workforce Framework is the foundation for increasing the size and capability of the U.S. cybersecurity workforce. It provides a common definition of cybersecurity, a ...

CISA has updated this Alert to: (1) include CVE-2026-111357 and CVE-2026-118527 and reflect their addition to the Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026; and (2) update the ...

Organizations should report anomalous cyber activity and/or cyber incidents 24/7 to CISA.

A new Colorado law has created an Auxiliary Emergency Communications (AuxComm) Unit within the state’s Division of Homeland Security and Emergency Management (DHSEM).