Security News

CISA urges switch to Signal-like encrypted messaging apps after telecom hacks
2024-12-18 18:19

Today, CISA urged senior government and political officials to switch to end-to-end encrypted messaging apps like Signal following a wave of telecom breaches across dozens of countries, including...

CISA orders federal agencies to secure Microsoft 365 tenants
2024-12-17 20:01

​CISA has issued this year's first binding operational directive (BOD 25-01), ordering federal civilian agencies to secure their Microsoft 365 cloud environments by implementing a list of required...

CISA and FBI Raise Alerts on Exploited Flaws and Expanding HiatusRAT Campaign
2024-12-17 05:47

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in...

CISA confirms critical Cleo bug exploitation in ransomware attacks
2024-12-13 21:24

CISA confirmed today that a critical remote code execution bug in Cleo Harmony, VLTrader, and LexiCom file transfer software is being exploited in ransomware attacks. [...]

CISA warns water facilities to secure HMI systems exposed online
2024-12-13 19:34

CISA and the Environmental Protection Agency (EPA) warned water facilities today to secure Internet-exposed Human Machine Interfaces (HMIs) from cyberattacks. [...]

CISA Warns of Active Exploitation of Flaws in Zyxel, ProjectSend, and CyberPanel
2024-12-05 05:09

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added multiple security flaws affecting products from Zyxel, North Grid Proself, ProjectSend, and CyberPanel to its Known Exploited...

CISA, FBI Issue Guidance for Securing Communications Infrastructure
2024-12-04 14:17

The caution comes after Chinese-state-affiliated breaches of American telecommunication networks. Organizations with Cisco infrastructure should take particular note.

CISA Urges Agencies to Patch Critical "Array Networks" Flaw Amid Active Attacks
2024-11-26 05:03

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched critical security flaw impacting Array Networks AG and vxAG secure access gateways to its Known...

CISA says BianLian ransomware now focuses only on data theft
2024-11-21 18:38

The BianLian ransomware operation has shifted its tactics, becoming primarily a data theft extortion group, according to an updated advisory from the U.S. Cybersecurity & Infrastructure Security...

CISA tags Progress Kemp LoadMaster flaw as exploited in attacks
2024-11-19 21:18

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added three new flaws in its Known Exploited Vulnerabilities (KEV) catalog, including a critical OS command injection impacting...