
CISA Adds Exploited GitLab RCE and Cisco Flaws to KEV Catalog
The US CISA added actively exploited security flaws impacting GitLab and Cisco software to its Known Exploited Vulnerabilities catalog.
Tag
The latest news, analysis and stories about CISA — TECC.UZ.
14 articles

The US CISA added actively exploited security flaws impacting GitLab and Cisco software to its Known Exploited Vulnerabilities catalog.

The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that hackers have started exploiting a critical Brotli vulnerability known as Node2Shell.

The U.S. cybersecurity agency is warning that attackers are actively exploiting vulnerabilities in Plex Media Server.

The Cybersecurity and Infrastructure Security Agency (CISA) reports that the SafePay ransomware gang has breached over 600 critical infrastructure organizations globally since 2024.

The U.S. Cybersecurity and Infrastructure Security Agency has issued a warning regarding a critical remote code execution vulnerability in MikroTik RouterOS.

The US Cybersecurity Agency has warned federal agencies that ransomware groups are now exploiting a critical JetBrains TeamCity vulnerability.

The U.S. Cybersecurity and Infrastructure Security Agency is warning that hackers are actively exploiting three Linux kernel vulnerabilities, including one critical flaw.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reports that a critical ConnectWise ScreenConnect vulnerability is actively being exploited in the wild.

The U.S. CISA has warned that ransomware gangs have joined ongoing attacks exploiting a critical VMware vCenter vulnerability.

The US cybersecurity agency has instructed federal civilian agencies to fix an actively exploited remote code execution vulnerability in Citrix devices by Saturday.

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vulnerability in Zimbra Collaboration Suite within three days.

CISA has warned that hackers are actively exploiting a critical remote code execution flaw in the Windows Internet Key Exchange service.

The FBI and CISA report that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the US since June 2021.

The U.S. CISA confirms that ransomware gangs are actively exploiting a high-severity Windows Task Host vulnerability.