CISA

02 Weak security controls around the use of public GitHub repos allowed a contractor to accidentally leak private cloud access keys and other credentials.

03 This guidance provides actionable, consensus-based recommendations to help software manufacturers and online service providers establish effective, transparent, and trustworthy relationships with security researchers.

04 Russian state hackers are targeting vulnerable and poorly configured routers to infiltrate critical infrastructure networks.

05 A couple-dozen changes to SBOM fields will make them more comprehensive

06 CISA added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild.

07 You don't necessarily need the newest, sexiest tool to address AI-related cyber risks.

08 CISA is implementing AI-driven vulnerability management.

09 Attackers are now exploiting a critical-severity vulnerability in the Gitea self-hosted Git service.

10 Both organizations were fully compromised at the domain level

11 CISA is securing the next 250 years of cybersecurity through its Cybersecurity Awareness Month campaign.

12 Attackers are actively exploiting vulnerabilities in the iCagenda and Balbooa Forms extensions for Joomla to achieve remote code execution through arbitrary file uploads.

13 The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major disruptions.

14 CISA ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in TrueConf Server.

15 Water groups are pushing Washington for binding cyber rules after a spate of successful attacks on U.S. water systems.

16 Healthcare cyberattacks have hit pacemakers and compromised millions of patient records.

17 You don't necessarily need the newest, sexiest tool to address the risks.

18 Hackers are actively exploiting a critical-severity remote code execution flaw in the Windows Internet Key Exchange (IKE) Service Extensions component.

19 The guide provides actionable pathways to accelerate Zero Trust adoption in Operational Technology environments.

20 CISA ditched its weekly vulnerability roundups for a risk-based focus.

21 CISA revised its town hall schedule to engage stakeholders on implementing the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA).

22 CISA, NSA, FBI, DC3 and international partners warn of Russian cyber threat activity targeting communications, energy, government and other critical infrastructure sectors.

23 CISA unveiled a new initiative to fortify America’s critical infrastructure using AI-powered threat detection and standardized response protocols.

24 The guidelines provide actionable steps to protect federal cloud identity systems from token theft, forgery, and misuse.

25 Lawmakers appear keen on agencies such as CISA and NIST taking more leading roles in evaluating AI security risks and setting safety standards.

26 Iran-linked hackers are exploiting systems used by water and energy providers.

27 CISA released foundational, flexible guidance to help federal agencies implement effective logging, visibility and operational standards

28 CISA and international partners published guidance to isolate operational technology and enabling systems in critical infrastructure.

29 The guide helps federal agencies securely and effectively use open source software.

30 CISA is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector.

31 CISA's new guide will help agencies meet a November deadline for submitting cyber logging plans that need to prioritize quality, instead of just quantity.

32 Insights from CISA, NSA, OMB, GSA, DLA and industry experts on securing government missions at machine speed are featured in a new e-book.

33 CISA had to build its incident playbook during the incident.

34 CISA has new guidance that includes open source AI considerations for water sector security.

35 Attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances.

36 CISA released an updated Insider Threat Guide with new insights to mitigate physical and cyber threats.

37 CISA confirms hackers targeted over 100 US water systems during July

38 The guide provides actionable steps for organizations to securely adopt agentic AI.

39 AI incidents are bolstering the push for federal cyber improvements

40 CISA released a guide to help organizations with limited resources set traps for hackers.

41 Cyberattacks on Minnesota water systems are being investigated with attribution to Iranian hackers.

42 AI chatbots pose risks to the upcoming election by providing misleading responses to voters.

43 A new joint government advisory signals a regulatory shift, pressing organizations to adopt more transparent breach notification and incident response protocols.

44 New CISA guidance helps critical infrastructure detect, observe and impede malicious cyber activity.

45 A coordinated cyberattack on over 30 municipal water facilities in Minnesota contains details of possible Iranian hackers.

46 CISA added the SharePoint RCE vulnerability to its Known Exploited Vulnerabilities (KEV) catalog.