Elektrine
Log in Register

#cisa

30 posts · Last used 8h

Back to Timeline
thecybermind
Michael I Ransier @thecybermind@infosec.exchange · 8h ago
Critical threats target the management plane. This week's Cyber Mind Brief breaks down the Check Point SmartConsole exploit, SharePoint RCE chains, CISA's ICS logic warnings, plus 5 key operational wins and our weekly cipher puzzle. Read now: https://thecybermind.co/qzgr #Cybersecurity #SOC #CISA
0
0
0
thenewoil
The New Oil @thenewoil@mastodon.thenewoil.org · 1d ago
#CISA orders urgent action on actively exploited #Langflow RCE flaw https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-langflow-rce-flaw/ #cybersecurity
0
0
0
Cloud 🤖 @cloud@infosec.exchange · 2d ago
🤖 Russian state-sponsored group Laundry Bear exploits Zimbra zero-click 0-day to steal emails, contacts, and 2FA recovery codes from US/Ukraine targets. Opening or previewing the message is enough to trigger the exploit. CISA, NSA & FBI issued a joint advisory. 🔗 https://www.bleepingcomputer.com/news/security/russian-hackers-exploit-zimbra-zero-click-flaw-for-email-theft/ #0day #CyberSec #Zimbra #CISA #Russia
0
0
0
AAKL
AA @AAKL@infosec.exchange · 2d ago
New advisory. CISA: Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-204a #CISA #infosec #Zimbra #phishing
0
0
0
securityaffairs
securityaffairs @securityaffairs@infosec.exchange · 4d ago
U.S. #CISA adds DD-WRT, #Langflow and #WordPress flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/195782/security/u-s-cisa-adds-dd-wrt-langflow-and-wordpress-flaws-to-its-known-exploited-vulnerabilities-catalog.html #securityaffairs #hacking
0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · 4d ago
CISA added four flaws to its KEV catalog, including WordPress RCE (CVE-2026-63030) and Langflow RCE (CVE-2026-0770). All are exploited in the wild. #CISA #KEV #WordPress #Langflow #DDWRT #RCE #SQLInjection https://securityonline.info/cisa-kev-four-exploited-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
AAKL
AA @AAKL@infosec.exchange · 4d ago

Broadcom has new advisories for two medium-severity vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

CISA KEV updates:

0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · 5d ago
The White House launched the GOLD EAGLE initiative for faster vulnerability coordination across U.S. critical infrastructure, using AI to patch flaws. #GOLDEAGLE #Cybersecurity #VulnerabilityCoordination #CriticalInfrastructure #AI #CISA https://securityonline.info/gold-eagle-vulnerability-coordination/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
Nonilex
Nonilex @Nonilex@masto.ai · Jul 17, 2026
Replying to @Nonilex@masto.ai
#Trump called for bolstering protections he himself dismantled. Trump has spent the first part of his 2nd term dismantling #election protections built up over previous years. The #FBI task force on foreign influence was shut down, the #ODNI sharply cut back a task force that warned against foreign meddling & #CISA has been gutted. And Trump has appointed an heir to a housing fortune with no relevant experience as interim DNI. #FactCheck #TrumpLies #law #midterms #ElectionInterference #BigLie
4
1
12
firstdotorg
FIRST.org @firstdotorg@infosec.exchange · Jul 17, 2026
🎙️ New FIRST Impressions Podcast Episode: Chris Butera (CISA) Recorded live at #FIRSTCON26 in Denver, this episode features Chris Butera, acting Executive Assistant Director for Cybersecurity at CISA, the local host of the conference. Chris joins the podcast to discuss the future of the #CVEprogram, software supply chain security, AI-specific SBOMs, end-of-support risk management, and the importance of strong collaboration between government and industry. If you’re interested in vulnerability management, AI security, supply chain resilience, or the evolving cybersecurity ecosystem, this is an episode you won’t want to miss! 🎧 Tune in to hear how CISA is helping shape the future of cyber defense and vulnerability coordination across the global community. #FIRSTCON26 #FIRSTImpressions #CISA #Cybersecurity #CVE #SBOM #AISecurity #SupplyChainSecurity #VulnerabilityManagement https://media.first.org/podcasts/FIRST_Impressions-butera26.mp3
0
0
0
securityaffairs
securityaffairs @securityaffairs@infosec.exchange · Jul 17, 2026
U.S. #CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/195516/security/u-s-cisa-adds-knx-association-knx-protocol-connection-authorization-option-1-and-oracle-flaws-to-its-known-exploited-vulnerabilities-catalog.html #securityaffairs #hacking
0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 17, 2026
CISA KEV catalog adds three actively exploited flaws: FortiSandbox CVE-2026-25089, CVE-2026-39808, and SharePoint CVE-2026-58644. Patch by July 19. #CISA #KEV #Fortinet #FortiSandbox #SharePoint #CVE202658644 #ActivelyExploited #CyberSecurity https://securityonline.info/cisa-kev-fortisandbox-sharepoint/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
AAKL
AA @AAKL@infosec.exchange · Jul 15, 2026

CISA has updated the KEV catalogue:

Press release:

CISA and Partners Publish Guidance to Help Software Manufacturers and Online Service Providers Work With Security Researchers https://www.cisa.gov/news-events/news/cisa-and-partners-publish-guidance-help-software-manufacturers-and-online-service-providers-work

Here's the guidance: https://www.cisa.gov/sites/default/files/2026-07/joint-guide-establishing-a-cvd-program-to-work-with-security-researchers_508c.pdf #CISA #infosec #vulnerability

0
0
0
securityaffairs
securityaffairs @securityaffairs@infosec.exchange · Jul 15, 2026
U.S. #CISA adds #SonicWall and #Microsoft flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/195383/security/u-s-cisa-adds-sonicwall-and-microsoft-flaws-to-its-known-exploited-vulnerabilities-catalog.html #securityaffairs #hacking
0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 15, 2026
CISA warns SharePoint vulnerabilities CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164 are exploited in the wild. Patch and harden servers now. #CISA #SharePoint #Microsoft #CVE #CyberSecurity https://securityonline.info/cisa-sharepoint-hardening/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
thenewoil
The New Oil @thenewoil@mastodon.thenewoil.org · Jul 14, 2026
Lessons Learned from #CISA’s Recent #GitHub Leak https://krebsonsecurity.com/2026/07/lessons-learned-from-cisas-recent-github-leak/ #cybersecurity
0
0
0
AAKL
AA @AAKL@infosec.exchange · Jul 14, 2026
New press release. CISA Joins NSA, FBI, DC3 and International Partners Warning of Russian Cyber Threat Activity Targeting Communications, Energy, Government and Other Critical Infrastructure Sectors https://www.cisa.gov/news-events/news/cisa-joins-nsa-fbi-dc3-and-international-partners-warning-russian-cyber-threat-activity-targeting #infosec #CISA
0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 14, 2026
Hackers actively exploit critical Joomla extension vulnerabilities in iCagenda and Balbooa Forms. Patch immediately to prevent severe remote code execution. #Joomla #Vulnerability #CyberSecurity #iCagenda #BalbooaForms #CISA https://meterpreter.org/joomla-extension-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0