NIST, CISA, NSA Guide Treats Runaway AI Agents as Security Incidents
A joint guide from NIST, CISA, and NSA defines runaway AI agents as security incidents that require predefined response protocols focusing on identity and authority management.
Tag
#CISA
27 results in the archive.
Flax Typhoon Exploits Five Flaws Ahead of CISA October 11 Deadline
CISA has listed five vulnerabilities exploited by the China-linked Flax Typhoon group, including a critical ProFTPD flaw, with a compliance deadline of October 11 for federal agencies.
Critical FortiMail Zero-Day Allows Unauthenticated Arbitrary File Writes
A critical zero-day vulnerability in Fortinet FortiMail enables unauthenticated attackers to write arbitrary files, leading to active exploitation.
CISA Warns of Global Exploitation of Two Critical Citrix NetScaler Flaws
CISA has added two critical Citrix NetScaler ADC and Gateway vulnerabilities to its Known Exploited Vulnerabilities catalog following reports of active global exploitation impacting enterprise systems.
FBI & CISA Warn on Risks of Third-Party ICS Integrators in Critical Infrastructure
The FBI and CISA issued guidance for critical infrastructure operators on managing cybersecurity risks posed by third-party industrial control system integrators, emphasizing access control and risk assessments.
CISA Adds Zyxel Switch Buffer Overflow to Known Exploited Vulnerabilities Catalog
CISA added CVE-2026-7273, a stack-based buffer overflow in Zyxel GS1900 switches, to its Known Exploited Vulnerabilities Catalog after evidence of active exploitation.
CISA Warns of Active Exploitation of Three Linux Kernel Flaws
CISA has issued an alert about active exploitation of three Linux kernel vulnerabilities, including one critical severity flaw affecting Linux systems.
CISA Flags Three Actively Exploited Linux Kernel Vulnerabilities
CISA has added three critical Linux kernel vulnerabilities with active exploit evidence to its Known Exploited Vulnerabilities catalog, including a severe TLS receive path flaw scored 9.8.
CISA Adds Two Actively Exploited Linux Kernel Vulnerabilities to KEV Catalog
CISA has identified two Linux Kernel vulnerabilities, CVE-2025-39964 and CVE-2026-53266, as actively exploited and added them to its Known Exploited Vulnerabilities Catalog, urging high-priority remediation.
Critical ScreenConnect Flaw Now Actively Exploited in Real Attacks
CISA reports active exploitation of a critical vulnerability in ConnectWise ScreenConnect that risks unauthorized remote access.
CISA Alerts on Ransomware Exploiting Critical VMware vCenter Flaw
CISA warns that ransomware gangs have begun exploiting a critical remote code execution vulnerability in VMware vCenter that was patched in July.
CISA Adds Two Actively Exploited MikroTik Vulnerabilities to KEV Catalog
CISA has listed two critical actively exploited MikroTik RouterOS vulnerabilities in its Known Exploited Vulnerabilities Catalog, highlighting the need for prioritized remediation.
China-Based AI Firms Conduct Industrial-Scale Distillation of US AI Models
NSA, CISA, and FBI warn that China-based AI companies are systematically extracting proprietary functionalities from US AI models at scale using industrial distillation techniques.
CISA Adds Critical Chromium V8 Vulnerability to Exploited Catalog
CISA has added CVE-2026-85046, a type confusion vulnerability in Google Chromium V8, to its Known Exploited Vulnerabilities Catalog due to active exploitation, requiring urgent attention for remediation.
Critical Gitea Vulnerability Exploited in Active Code Injection Attacks
Attackers are actively exploiting a critical code injection vulnerability in Gitea, a widely used self-hosted Git service, prompting warnings from U.S. CISA.
CISA Red Team Tests Expose Critical SOC and Cloud Security Gaps
CISA's red team assessments identified significant detection and response weaknesses in IT, cloud, and OT environments, revealing misconfigured Active Directory and excessive cloud permissions.
CISA Adds Oracle HTTP Server Vulnerability to Known Exploited Catalog
CISA has added CVE-2026-21962, an Oracle HTTP Server and WebLogic Server Proxy Plug-in vulnerability, to its Known Exploited Vulnerabilities Catalog due to active exploitation.
CISA Adds Two Critical TrueConf Vulnerabilities to KEV Catalog
CISA has included two actively exploited TrueConf Server vulnerabilities in its Known Exploited Vulnerabilities Catalog, emphasizing critical risks to federal agencies and beyond.
CISA Warns of Active Exploitation of Critical MLflow Vulnerability
CISA warns that threat actors are actively exploiting a critical vulnerability in the MLflow AI engineering platform, posing risks to federal agencies and beyond.
Critical RCE Flaw in Windows IKE Extension Actively Exploited
CISA warns of active exploitation of a critical remote code execution vulnerability in the Windows Internet Key Exchange Service Extensions, enabling attacker code execution without user interaction.
CISA Adds CVE-2025-62593 Ray Code Injection to KEV Catalog
CISA added the actively exploited Ray-Project code injection vulnerability CVE-2025-62593 to its Known Exploited Vulnerabilities catalog, highlighting urgent remediation needs.
CISA Adds Two Actively Exploited Vulnerabilities to KEV Catalog
CISA has added CVE-2026-16232 and CVE-2026-50522 to its Known Exploited Vulnerabilities Catalog following evidence of active exploitation targeting Check Point SmartConsole and Microsoft SharePoint.
CISA urgent patch order for exploited Langflow RCE vulnerability
CISA has mandated U.S. federal agencies to urgently address a remote code execution vulnerability actively exploited in Langflow, posing critical risks to infrastructure security.
CISA Urges Immediate Patching of Exploited Fortinet FortiSandbox Flaws
CISA has directed federal agencies to urgently patch two actively exploited vulnerabilities in Fortinet FortiSandbox, highlighting critical risks to government and enterprise environments.
CISA Warns to Patch Actively Exploited SharePoint Vulnerabilities
CISA issued a warning about three actively exploited vulnerabilities in Internet-exposed on-premises SharePoint Server instances that allow remote compromise.
CISA Issues Urgent Patch Deadline for Exploited Cisco Flaw
CISA has set a Sunday deadline for federal agencies to patch a critical vulnerability in Cisco Unified Communications Manager Server actively exploited in attacks. Immediate action is urged to prevent further compromise.
CISA Warns of Actively Exploited Lantronix EDS5000 Critical Flaw
CISA has issued a warning about an actively exploited critical code injection vulnerability, CVE-2025-67038, affecting Lantronix EDS5000 Series devices. Federal agencies are urged to apply patches by June 26, 2026, to prevent potential remote code execution.