Browsing: CISA

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a WordPress flaw, tracked as CVE-2026-119977 (CVSS score of 8.1), to its Known Exploited Vulnerabilities (KEV) catalog.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog:

The security community has come under increased scrutiny as earlier threat warnings were slow to materialize.

The beleaguered agency, still recovering from major workforce cuts, promised to deepen partnerships and stay ahead of evolving threats.

CISA, the FBI, the US Secret Service, Germany’s Landeskriminalamt Rheinland-Pfalz, and two UK law enforcement agencies jointly published an advisory this week on SafePay, a ransomware group they describe as one of the most active operations currently running. The group has breached at least 600 organizations across critical infrastructure sectors since August 2024, spanning North…

This story was originally published on Cybersecurity Dive. To receive daily news and insights, subscribe to our free dailyCybersecurity Dive newsletter.

Federal agencies warn that convincing phishing messages, impersonation schemes and synthetic audio and video could help attackers steal sensitive information ahead of the 2026 U.S. midterm elections.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published a framework aimed at strengthening the reliability of the Common Vulnerabilities and Exposures programme, placing renewed emphasis on the systems, organisations and information that support vulnerability identification worldwide.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Fortinet FortiMail flaw, tracked as CVE-2026-104286 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog.

The US Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to urgently investigate and secure systems affected by three Linux kernel vulnerabilities after receiving evidence that attackers are exploiting the flaws in real-world operations.