Everything you need to know about CISA. Read our latest news and technical analysis to understand its market impact.
The US agency CISA has added critical, actively exploited vulnerabilities in Cisco, Microsoft, Palo Alto, and Ahsay systems to its catalog, setting immediate patching deadlines for federal agencies.
CISA has issued a critical alert to public utilities, urging the removal of Internet-exposed Programmable Logic Controllers (PLCs) and enhanced Operational Technology (OT) security following coordinated cyberattacks on over 30 Minnesota water systems in late July.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued urgent directives to U.S. federal agencies to patch two actively exploited vulnerabilities: one in the Langflow AI agent development framework and another of maximum severity in the Adobe ColdFusion platform. Both require immediate mitigation, with a deadline set for Friday, highlighting the exposure to significant risks in critical AI infrastructures and government web applications.
The Cybersecurity and Infrastructure Security Agency (CISA) has imposed a three-day deadline for U.S. federal agencies to mitigate a critical zero-day vulnerability in Check Point's remote access and mobile access VPN products. This vulnerability is actively being exploited by affiliates of the Qilin ransomware group, compromising the security of dozens of organizations and exposing critical systems to data exfiltration and operational disruption.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerability CVE-2026-28318, affecting SolarWinds Serv-U, to its Known Exploited Vulnerabilities (KEV) catalog. This high-severity vulnerability (CVSSv3.1 score of 7.5) is actively being exploited by malicious actors to cause server crashes, emphasizing the critical need for immediate mitigation in corporate and government environments.
