DoS and DDoS Attacks against Multiple Sectors
CISA is aware of open-source reporting of targeted denial-of-service (DoS) and distributed denial-of-service (DDoS)
CISA and NSA Release Joint Guidance on Defending Continuous Integration/Continuous Delivery (CI/CD) Environments
Today, CISA, together with the National Security Agency (NSA), released a Cybersecurity Information Sheet
CISA, FBI, and MS-ISAC Update Joint CSA on Progress Telerik Vulnerabilities
Today, CISA, the Federal Bureau of Investigation (FBI), and Multi-State Information Sharing and Analysis
Barracuda Networks Releases Update to Address ESG Vulnerability
Barracuda Networks has released an update to their advisory addressing a vulnerability—CVE-2023-2868—in their Email
CISA Releases Fourteen Industrial Control Systems Advisories
CISA released fourteen Industrial Control Systems (ICS) advisories on June 15, 2023. These advisories
MAR-10443863-1.v1 CVE-2017-9248 Exploitation in U.S. Government IIS Server
Summary Description CISA received three files for analysis. The files included three webshells
CISA and Partners Release Joint Advisory on Understanding Ransomware Threat Actors: LockBit
Today, CISA, the Federal Bureau of Investigation (FBI), the Multi-State Information Sharing and Analysis
CISA Issues BOD 23-02: Mitigating the Risk from Internet-Exposed Management Interfaces
Today, CISA issued Binding Operational Directive (BOD) 23-02: Mitigating the Risk from Internet-Exposed Management
Understanding Ransomware Threat Actors: LockBit
SUMMARY In 2022, LockBit was the most deployed ransomware variant across the world and
Fortinet Releases Security Updates for FortiOS and FortiProxy
Fortinet has released security updates to address a heap-based buffer overflow vulnerability CVE-2023-27997 in