U.S. Cybersecurity and Infrastructure Security Agency

CISA has issued an urgent mandate requiring federal agencies to patch CVE-2026-7273, a critical vulnerability in Zyxel GS1900 switches that…

As of September 17, 2026, CISA officially transitioned from the legacy VINCE system to VINCE-NT, a modernized platform managed directly…

CISA confirmed that threat actors are actively exploiting CVE-2026-84869, a critical zero-day vulnerability in ConnectWise’s ScreenConnect software that allows unauthorized…

Security researchers report a surge in attacks on unpatched enterprise infrastructure, with active exploitation of critical vulnerabilities in Zimbra, Citrix…

CISA has added two actively exploited TrueConf Server vulnerabilities (CVE-2026-72529 and CVE-2026-72530) to its KEV catalog, mandating that U.S. federal…

CISA warns that threat actors are actively exploiting CVE-2024-38063, a critical 9.8-severity remote code execution vulnerability in Windows IKE Service…

CVE-2026-58231, a critical (CVSS 10.0) unauthenticated remote code execution vulnerability in SAP Commerce Cloud, is now being actively exploited just…

Cisco disclosed two high-severity DoS vulnerabilities (CVE-2026-20337, CVE-2026-20338) in ClamAV's ZIP parser within Secure Endpoint Connector, triggered by malicious ZIP…

CISA has mandated that federal agencies patch three actively exploited vulnerabilities in IBM Langflow, N-central, and Apache Tomcat within 72…

CISA released a new guide outlining how federal agencies should manage open source software (OSS) risks, including evaluating projects before…

CISA issued an urgent warning about a sharp rise in attacks on internet-exposed programmable logic controllers (PLCs) in the water…

CISA's 2026 Minimum Elements for SBOM supersedes the 2021 NTIA framework, expanding on core data fields (supplier, component names, versions)…

Attackers are actively exploiting a critical authentication bypass vulnerability (CVE-2026-16232) in Check Point Security Management and Multi-Domain Security Management servers,…

CISA and allied cyber authorities released new guidance for software vendors on establishing coordinated vulnerability disclosure (CVD) programs, emphasizing transparent…

Microsoft warns that AI-powered security analysis will significantly increase the volume of Windows security updates, as AI helps identify more…

CISA has ordered all federal agencies to patch a critical Langflow vulnerability (CVE-2025-XXXX) by Friday, as it is being actively…

Attackers are actively exploiting a critical Adobe ColdFusion vulnerability, CVE-2026-48282, which allows unauthenticated remote code execution on unpatched versions 2025.9,…

CISA has added three Ubiquiti UniFi OS vulnerabilities (CVE-2026-34908, CVE-2026-34909, CVE-2026-34910) to its Known Exploited Vulnerabilities catalog, which can be…

CISA has urgently called for Fortinet users to secure systems after 74,000 firewall and VPN credentials were leaked in the…

CISA has mandated all U.S. federal agencies patch a maximum-severity vulnerability (CVSS 10.0) in the Joomla Widget Factory JCE plugin…