cisa directive

CISA has mandated that federal agencies patch three actively exploited vulnerabilities in IBM Langflow, N-central, and Apache Tomcat within 72…

CISA has ordered all federal agencies to patch a critical Langflow vulnerability (CVE-2025-XXXX) by Friday, as it is being actively…

CISA's new binding operational directive requires federal agencies to patch the most critical security vulnerabilities within three days and conduct…

CISA has issued an urgent directive requiring federal agencies to patch a high-severity Ivanti zero-day vulnerability (CVE-2026-6973) within four days,…

Over 1,300 internet-exposed Microsoft SharePoint servers remain vulnerable to an actively exploited spoofing flaw (CVE-2026-32201), despite a patch being released…

A critical privilege escalation vulnerability (CVE-2025-60710) in the Windows Task Host process is under active attack, allowing attackers to gain…

Federal agencies must patch a critical vulnerability (CVE-2026-20131) in Cisco's firewall management software by March 22, as it allows unauthenticated…

A critical, actively exploited security flaw (CVE-2025-66376) in Zimbra's Classic UI allows attackers to hijack sessions and steal data via…

CISA has mandated federal agencies to patch a critical remote code execution vulnerability (CVE-2025-68613) in the n8n automation platform by…

A critical vulnerability (CVE-2026-1603) in Ivanti Endpoint Manager is under active attack, allowing unauthenticated attackers to bypass security and steal…

A critical SQL injection vulnerability (CVE-2024-43468) in Microsoft Configuration Manager is now being actively exploited, allowing unauthenticated attackers to execute…

The U.S. CISA has issued a binding directive (BOD 26-02) requiring federal agencies to identify and replace outdated, unsupported networking…

Microsoft has urgently patched a critical, actively exploited Office vulnerability (CVE-2026-21509) that bypasses security features, requiring immediate updates to prevent…

CISA has mandated federal agencies to patch a critical, actively exploited vulnerability (CVE-2025-58360) in GeoServer that allows attackers to steal…

CISA has mandated a 7-day deadline for U.S. government agencies to patch CVE-2025-58034, a critical Fortinet FortiWeb vulnerability being actively…

A critical security flaw (CVE-2025-9242) in WatchGuard Firebox firewalls is being actively exploited, prompting CISA to issue an urgent patch…

CISA has issued an urgent directive for U.S. government agencies to patch a critical VMware vulnerability (CVE-2025-41244) that allows privilege…

CISA has issued an emergency directive requiring U.S. federal agencies to immediately address two actively exploited critical vulnerabilities (CVE-2025-20333 and…