Lessons Learned from CISA’s Recent GitHub Leak
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor...
CISA
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
Ravie LakshmananJul 13, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security...
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
Ravie LakshmananJul 02, 2026Vulnerability / Threat Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity...
SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux
A critical flaw in SimpleHelp, remote-access software used by IT teams and managed service providers, has been exploited to deliver...
FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys
Swati KhandelwalJun 26, 2026Secure Messaging / Social Engineering The FBI and CISA have updated their March warning about Russian intelligence phishing Signal...
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
Ravie LakshmananJun 26, 2026Vulnerability / Software Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical...
Five Eyes Warns AI Could Speed Cyberattacks Within Months
Cyber agencies from the Five Eyes intelligence-sharing alliance — Australia, Canada, New Zealand, the UK, and the US — warned...
CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited
Ravie LakshmananJun 24, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active...
U.S. CISA adds BerriAI LiteLLM and Check Point Security Gateway flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds BerriAI LiteLLM and Check Point Security Gateway flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June...
LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE
Ravie LakshmananJun 09, 2026Vulnerability / Artificial Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity...
U.S. CISA adds SolarWinds Serv-U flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds SolarWinds Serv-U flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 06, 2026 U.S. Cybersecurity and...
CISA Flags 2-Year-Old Oracle WebLogic Vulnerability as Actively Exploited
A patch that should have retired an Oracle WebLogic vulnerability two years ago is now the reason CISA is sounding...
U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 03, 2026 U.S. Cybersecurity...
U.S. CISA adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 02, 2026 U.S. Cybersecurity and...
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
Ravie LakshmananJun 02, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity...
