CISA urges organizations with affected self-hosted Remote Support appliances to immediately take the actions within this alert.

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal ...

A vulnerability exists in EasyIO FG relating to an attacker gaining unauthorized access to the system through hard-coded credentials and improper privilege management, potentially resulting in full ...

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed ...

Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite product versions listed in this document. These vulnerabilities can be exploited to potentially cause ...

CISA added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog on Sept. 27, 2026. Both are critical, zero-day vulnerabilities that can independently enable remote ...

Critical infrastructure relies on small and medium business to supply, support, or even operate services we all rely on. Make sure your business is cyber secure so you don’t experience an incident ...

DOJ provides comprehensive support to establish and operate an anti-phishing program. The support includes employee awareness and training, simulated attacks, and results analysis to inform training ...

(NPSTC) NPSTC is comprised of a federation of organizations whose mission is to improve public safety communications and interoperability through collaborative leadership. This webpage provides ...

In response to the rise in malicious activity with ransomware attacks against K-12 educational institutions and the increase in remote learning, CISA, in collaboration with the FBI, has produced a ...

- made up of pipeline owners, operators, and other key stakeholders - to ensure that its activities are informed not only through internal analysis and priority setting, but also through stakeholders' ...

The Recommendations to Space System Operators for Improving Cybersecurity paper, written by the public and private sector members of the Space Systems Critical Infrastructure Working Group, is ...