CISA

CISA has added critical vulnerabilities in WSO2 products and Adobe Commerce to its Known Exploited Vulnerabilities catalog, mandating that federal…

CISA released a comprehensive security plan on September 24, 2026, to protect the November midterm elections from cyber and physical…

Kiteworks has urgently instructed users to shut down their systems immediately due to credible threat intelligence indicating hackers may target…

The EU Court of Auditors identifies insufficient information exchange and structural barriers as the primary weaknesses undermining the effectiveness of…

CISA has issued an urgent mandate requiring federal agencies to patch CVE-2026-7273, a critical vulnerability in Zyxel GS1900 switches that…

As of September 17, 2026, CISA officially transitioned from the legacy VINCE system to VINCE-NT, a modernized platform managed directly…

CISA confirmed that threat actors are actively exploiting CVE-2026-84869, a critical zero-day vulnerability in ConnectWise’s ScreenConnect software that allows unauthorized…

NIST and CISA have released finalized guidelines to help federal agencies and cloud providers defend against the forgery, theft, and…

Fraudulent hires often gain unmonitored access to corporate networks for an average of 5.73 days before detection, creating significant security…

Z.ai secured approximately $5 billion through a hybrid financing strategy combining a $2 billion equity placement and $3 billion in…

Kevin Mandia, founder of cybersecurity firm Mandiant, has officially joined Amazon’s board of directors to serve on the Audit and…

China’s foreign ministry dismissed a US intelligence advisory alleging that Chinese firms use distillation to extract capabilities from American AI…

N-able has released an emergency hotfix, N-central 2026.3 HF4, to address critical remote code execution vulnerability CVE-2026-86218 that allows unauthenticated…

Anthropic forced a logout for Claude users to secure accounts hijacked by infostealer malware, highlighting the growing threat of credential…

Threat actors are actively exploiting the critical CVE-2026-19490 vulnerability in Citrix NetScaler devices to bypass authentication, following the public release…

Security researchers report a surge in attacks on unpatched enterprise infrastructure, with active exploitation of critical vulnerabilities in Zimbra, Citrix…

CISA has added two actively exploited TrueConf Server vulnerabilities (CVE-2026-72529 and CVE-2026-72530) to its KEV catalog, mandating that U.S. federal…

Citrix disclosed two new NetScaler vulnerabilities: CVE-2026-19490, an unauthenticated authentication bypass (critical, when configured as AAA or Gateway with SAML…

U.S. federal agencies issued a joint advisory about an active hacking campaign targeting Siemens S7 Series PLCs, with the threat…

Medusa ransomware has compromised over 500 organizations since June 2021, targeting critical infrastructure sectors including healthcare, defense, manufacturing, and government…