CISA Confirms PHP2Shell Vulnerabilities Are Being Actively Exploited
CISA has added PHP2Shell flaws to its Known Exploited Vulnerabilities catalogue and directed federal agencies…
Category: Policy & Advisories
Overdue FISA Court Opinion Puts Section 702 Reauthorisation in Doubt
The Trump administration has missed statutory deadlines to declassify a Foreign Intelligence Surveillance Court ruling…
CJIS Security Policy v6.1: Five Compliance Priorities for Law Enforcement Agencies
The updated Criminal Justice Information Services policy raises the bar on authentication, account hygiene, and…
CISA Flags Sixth Ivanti Vulnerability of the Year as Microsoft’s Patch Tuesday Tops 1,400 CVEs
Active exploitation of a new Ivanti flaw and a record-breaking Microsoft patch release are demanding…
Docker Hub Flaw Allowed Cross-Account Image Manipulation for Two Years
A privilege confusion bug in Docker Hub's account conversion feature let authenticated users push, pull,…
Citrix NetScaler Zero-Day Exploit Targets Memory Buffer, Raises Federal Risk Concerns
A newly identified vulnerability in Citrix NetScaler can cause denial of service conditions, prompting a…
CISA Mandates Federal Agencies Patch Critical Citrix NetScaler Flaws Within Days
Two critical Citrix NetScaler vulnerabilities under active exploitation have triggered a CISA emergency directive requiring…
Unpatched Tool Exploits Disk-Fill Technique to Block Microsoft Defender Updates
A proof-of-concept published on GitHub can halt Defender platform and signature updates by exhausting available…
CISA Directs Federal Agencies to Patch Actively Exploited Zyxel Switch Vulnerability
A high-severity flaw in Zyxel GS1900 series switches is being exploited in the wild for…
ConnectWise ScreenConnect Vulnerability Under Active Exploitation, CISA Confirms
A critical-severity flaw in ConnectWise ScreenConnect is being actively exploited in the wild, with CISA…