#cisa
-
Check Point Patches SmartConsole Flaw That Granted Administrator Rights
The company has released updates for its Security Management and Multi-Domain Management products, fixing among other things a critical flaw that is already being used in real-world attacks.
-
CISA Orders Urgent Patching of Langflow RCE Flaw
The U.S. cyber agency has directed government bodies to urgently remediate an actively exploited vulnerability in Langflow — a visual framework for building AI agents — that grants remote code execution with root privileges.
-
CISA orders urgent patching of vulnerabilities in Fortinet FortiSandbox
The CISA agency has ordered U.S. federal agencies to prioritize fixing two actively exploited vulnerabilities in the Fortinet FortiSandbox platform.
-
CISA Orders US Federal Agencies to Fix Oracle Flaw by Saturday
CISA has directed federal agencies to remediate a critical vulnerability in Oracle E-Business Suite that attackers are already exploiting in real-world attacks.
-
CISA Warns of Active Exploitation of SharePoint Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has reported that attackers are actively exploiting three vulnerabilities to breach internet-facing on-premises SharePoint servers. Administrators are advised to install updates without delay.
-
CISA Adds Vulnerabilities in the Joomla iCagenda and Balbooa Extensions to Its Exploited Catalog
The U.S. cybersecurity agency CISA has added two critical vulnerabilities in Joomla extensions to its catalog of known exploited vulnerabilities following reports of zero-day attacks.
-
CISA admits: the incident response plan was drafted while the investigation was already underway
The US cybersecurity agency CISA suffered a password leak caused by a contractor and developed its response protocol during the incident itself.
-
CISA Orders U.S. Federal Agencies to Urgently Patch a Vulnerability in Langflow
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed federal agencies to remediate an actively exploited authentication bypass vulnerability in the Langflow platform by Friday.
-
CISA Orders U.S. Federal Agencies to Fix Critical Adobe ColdFusion Flaw by Friday
The CISA agency has directed federal agencies to remediate a maximum-severity vulnerability in the Adobe ColdFusion platform, which is already being actively exploited by attackers.