CISA

CISA reveals new malware variant used on compromised Ivanti Connect Secure devices

China, CISA, cyber espionage, Don't miss, Hot stuff, Ivanti, Malware, Mandiant, Microsoft, News /

CISA reveals new malware variant used on compromised Ivanti Connect Secure devices 2025-03-31 at 16:12 By Zeljka Zorz CISA has released indicators of compromise, detection signatures, and updated mitigation advice for rooting out a newly identified malware variant used by the attackers who breached Ivanti Connect Secure VPN appliances in December 2024 by exploiting the […]

CISA reveals new malware variant used on compromised Ivanti Connect Secure devices Read More »

CISA Analyzes Malware Used in Ivanti Zero-Day Attacks

CISA, exploit, Ivanti, Malware, Malware & Threats, Resurge /

CISA Analyzes Malware Used in Ivanti Zero-Day Attacks 2025-03-31 at 13:37 By Ionut Arghire CISA has published its analysis of Resurge, a SpawnChimera malware variant used in attacks targeting a recent Ivanti Connect Secure zero-day. The post CISA Analyzes Malware Used in Ivanti Zero-Day Attacks appeared first on SecurityWeek. This article is an excerpt from

CISA Analyzes Malware Used in Ivanti Zero-Day Attacks Read More »

NIST Still Struggling to Clear Vulnerability Submissions Backlog in NVD

CISA, CVE, Government, NIST, NVD, Vulnerabilities /

NIST Still Struggling to Clear Vulnerability Submissions Backlog in NVD 2025-03-24 at 18:21 By Ryan Naraine The effects of the backlog is already being felt in vulnerability management circles where NVD data promises an enriched source of truth. The post NIST Still Struggling to Clear Vulnerability Submissions Backlog in NVD appeared first on SecurityWeek. This

NIST Still Struggling to Clear Vulnerability Submissions Backlog in NVD Read More »

Trump Administration Halts Funding for Two Cybersecurity Efforts, Including One for Elections

CISA, Election, Government, Trump /

Trump Administration Halts Funding for Two Cybersecurity Efforts, Including One for Elections 2025-03-12 at 14:30 By Associated Press The Trump administration has cut millions of dollars in federal funding from two cybersecurity initiatives, including one dedicated to helping state and local election officials. The post Trump Administration Halts Funding for Two Cybersecurity Efforts, Including One

Trump Administration Halts Funding for Two Cybersecurity Efforts, Including One for Elections Read More »

ICS Patch Tuesday: Advisories Published by CISA, Schneider Electric, Siemens 

CISA, ICS, ICS Patch Tuesday, ICS/OT, Schneider Electric, Siemens /

ICS Patch Tuesday: Advisories Published by CISA, Schneider Electric, Siemens  2025-03-12 at 12:05 By Eduard Kovacs Industrial giants Siemens and Schneider Electric have released March 2025 Patch Tuesday ICS security advisories. The post ICS Patch Tuesday: Advisories Published by CISA, Schneider Electric, Siemens  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

ICS Patch Tuesday: Advisories Published by CISA, Schneider Electric, Siemens  Read More »

Financial Organizations Urge CISA to Revise Proposed CIRCIA Implementation

CIRCIA, CISA, Government, Government Policy /

Financial Organizations Urge CISA to Revise Proposed CIRCIA Implementation 2025-03-06 at 14:52 By Ionut Arghire A group of financial organizations is asking CISA to rescind and reissue its proposed implementation of CIRCIA. The post Financial Organizations Urge CISA to Revise Proposed CIRCIA Implementation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Financial Organizations Urge CISA to Revise Proposed CIRCIA Implementation Read More »

CISA: No Change on Defending Against Russian Cyber Threats

CISA, Cyberwarfare, FSB, Government, Russia, SVR /

CISA: No Change on Defending Against Russian Cyber Threats 2025-03-03 at 19:37 By Ryan Naraine The CISA public clarification follows news the Trump administration is temporarily pausing offensive cyber operations against Moscow. The post CISA: No Change on Defending Against Russian Cyber Threats appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

CISA: No Change on Defending Against Russian Cyber Threats Read More »

CISA, FBI Warn of China-Linked Ghost Ransomware Attacks

CISA, Cring, FBI, Ghost, Ransomware /

CISA, FBI Warn of China-Linked Ghost Ransomware Attacks 2025-02-20 at 15:40 By Ionut Arghire CISA and the FBI warn organizations of attacks employing the Ghost (Cring) ransomware, operated by Chinese hackers. The post CISA, FBI Warn of China-Linked Ghost Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA, FBI Warn of China-Linked Ghost Ransomware Attacks Read More »

Sean Cairncross is Trump Nominee for National Cyber Director

CISA, Government, Management & Strategy, National Cyber Director, Sean Cairncross, Sean Plankey /

Sean Cairncross is Trump Nominee for National Cyber Director 2025-02-14 at 17:03 By Ryan Naraine Former RNC official Sean Cairncross has been nominated for the post of National Cyber Director to streamline the US cybersecurity strategy. The post Sean Cairncross is Trump Nominee for National Cyber Director appeared first on SecurityWeek. This article is an

Sean Cairncross is Trump Nominee for National Cyber Director Read More »

CISA Updates Known Exploited Vulnerabilities Catalog with Four Critical Issues

CISA, Exploited Vulnerabilities, vulnerability /

CISA Updates Known Exploited Vulnerabilities Catalog with Four Critical Issues 2025-02-13 at 13:49 By daksh sharma In a recent update to its Known Exploited Vulnerabilities Catalog, the Cybersecurity and Infrastructure Security Agency (CISA) has added four security vulnerabilities that are currently under active exploitation. These vulnerabilities span across multiple platforms and pose substantial security risks

CISA Updates Known Exploited Vulnerabilities Catalog with Four Critical Issues Read More »

US Cyber Agency Puts Election Security Staffers Who Worked With the States on Leave

CISA, Election, Government /

US Cyber Agency Puts Election Security Staffers Who Worked With the States on Leave 2025-02-11 at 13:48 By Associated Press Staffers at the nation’s cybersecurity agency whose job is to ensure the security of US elections have been placed on administrative leave. The post US Cyber Agency Puts Election Security Staffers Who Worked With the

US Cyber Agency Puts Election Security Staffers Who Worked With the States on Leave Read More »

Patient monitors with backdoor are sending info to China, CISA warns

backdoor, CISA, Don't miss, healthcare, Hot stuff, medical data, medical devices, News, Privacy, vulnerability /

Patient monitors with backdoor are sending info to China, CISA warns 2025-01-31 at 14:03 By Zeljka Zorz Contec CMS8000, a patient monitor manufactured by a Chinese company, and Epsimed MN-120, which is the same monitor but relabeled, exfiltrate patients’ data to a hard-coded IP address and have a backdoor that can be used to download

Patient monitors with backdoor are sending info to China, CISA warns Read More »

CISA, FDA Warn of Dangerous Backdoor in Contec Patient Monitors

backdoor, CISA, FDA, healthcare, IoT Security /

CISA, FDA Warn of Dangerous Backdoor in Contec Patient Monitors 2025-01-31 at 13:48 By Ionut Arghire CISA and FDA say Contec patient monitors used in the US contain a backdoor function that could allow remote attackers to tamper with the device. The post CISA, FDA Warn of Dangerous Backdoor in Contec Patient Monitors appeared first

CISA, FDA Warn of Dangerous Backdoor in Contec Patient Monitors Read More »

US Cyber Agency’s Future Role in Elections Remains Murky Under the Trump Administration

CISA, Featured, Government /

US Cyber Agency’s Future Role in Elections Remains Murky Under the Trump Administration 2025-01-30 at 16:03 By Associated Press President Donald Trump has yet to name anyone to lead the U.S. Cybersecurity and Infrastructure Security. The post US Cyber Agency’s Future Role in Elections Remains Murky Under the Trump Administration appeared first on SecurityWeek. This

US Cyber Agency’s Future Role in Elections Remains Murky Under the Trump Administration Read More »

Eclypsium Eyes Global Expansion with $45 Million Series C Investment

CISA, Eclypsium, firmware, Funding/M&A, Malware & Threats, Qualcomm Ventures, Series B /

Eclypsium Eyes Global Expansion with $45 Million Series C Investment 2025-01-28 at 18:03 By SecurityWeek News The investment includes equity and debt from new investors Qualcomm Ventures, Pavilion Capital, Singtel Innov8, and Sixty Degree Capital.  The post Eclypsium Eyes Global Expansion with $45 Million Series C Investment appeared first on SecurityWeek. This article is an

Eclypsium Eyes Global Expansion with $45 Million Series C Investment Read More »

What 2024 taught us about security vulnerabilties

BitSight, Black Duck, Checkmarx, CISA, cybersecurity, FBI, Fortinet, NCSC, News, NSA, report, Skybox Security, survey, Tenable, Veracode, vulnerability /

What 2024 taught us about security vulnerabilties 2025-01-14 at 06:03 By Help Net Security From zero-day exploits to weaknesses in widely used software and hardware, the vulnerabilities uncovered last year underscore threat actors’ tactics and the critical gaps in organizational defenses. This roundup showcases the standout findings from 2024’s cybersecurity reports, highlighting critical risks and

What 2024 taught us about security vulnerabilties Read More »

UK domain registry Nominet breached via Ivanti zero-day

0-day, CISA, Don't miss, Hot stuff, Ivanti, Mandiant, News, Nominet, Shadowserver, WatchTowr /

UK domain registry Nominet breached via Ivanti zero-day 2025-01-13 at 22:17 By Zeljka Zorz The number of internet-facing Ivanti Connect Secure instances vulnerable to attack via CVE-2025-0282 has fallen from 2,048 to 800 in the last four days, the Shadowserver Foundation shared today. In the meantime, UK domain registry Nominet became the first publicly known

UK domain registry Nominet breached via Ivanti zero-day Read More »

Mitel MiCollab, Oracle WebLogic Server vulnerabilities exploited by attackers

CISA, Don't miss, enterprise, Hot stuff, Mitel, News, Oracle WebLogic, vulnerability /

Mitel MiCollab, Oracle WebLogic Server vulnerabilities exploited by attackers 2025-01-08 at 14:20 By Zeljka Zorz CISA has added Mitel MiCollab (CVE-2024-41713, CVE-2024-55550) and Oracle WebLogic Server (CVE-2020-2883) vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The Mitel MiCollab vulnerabilities exploited Mitel MiCollab is a popular enterprise collaboration suite. CVE-2024-41713 and CVE-2024-55550 are both path traversal

Mitel MiCollab, Oracle WebLogic Server vulnerabilities exploited by attackers Read More »

CISA says Treasury was the only US agency breached via BeyondTrust

BeyondTrust, CISA, Don't miss, government-backed attacks, Hot stuff, News, USA /

CISA says Treasury was the only US agency breached via BeyondTrust 2025-01-07 at 14:18 By Zeljka Zorz The US Cybersecurity and Infrastructure Security Agency (CISA) has shared on Monday that the Treasury Department was the only US federal agency affected by the recent cybersecurity incident involving compromised BeyondTrust Remote Support SaaS instances. On the same

CISA says Treasury was the only US agency breached via BeyondTrust Read More »

A Look at CISA Known Exploited Vulnerabilities in 2024 

CISA, CISA KEV, CVE-2002-0367, CVE-2012-4792, CVE-2024-3393, cyber news, cybersecurity, Exploited Vulnerabilities, vulnerability /

A Look at CISA Known Exploited Vulnerabilities in 2024  2024-12-30 at 10:19 By Ashish Khaitan Overview  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added 185 vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog in 2024, as the database grew to 1,238 software and hardware flaws at high risk of cyberattacks.  The agency removed at

A Look at CISA Known Exploited Vulnerabilities in 2024  Read More »

Scroll to Top