#cisa

12 articles tagged with #cisa

criticalOct 1, 2026

Critical Zero-Day Exploitation Campaign Targets Citrix NetScaler ADC and Gateway Appliances Globally

Threat actors are actively exploiting two critical remote code execution zero-day vulnerabilities in Citrix NetScaler ADC and Gateway. CISA has added these flaws to its Known Exploited Vulnerabilities catalog.

#Zero-Day#RCE#Citrix#CISA#Infrastructure Security

criticalSep 29, 2026

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC and Gateway

CISA has added eight new critical vulnerabilities in Citrix NetScaler ADC and Gateway to its Known Exploited Vulnerabilities catalog. Threat actors are actively using these flaws for remote code execution.

#Zero-Day#Citrix#RCE#CISA#Vulnerability Management

criticalSep 28, 2026

Critical Citrix NetScaler Zero-Day Exploits Confirmed Under Active Attack

CISA has added two critical zero-day vulnerabilities in Citrix NetScaler ADC and Gateway to its Known Exploited Vulnerabilities catalog. Threat actors are actively leveraging these flaws for remote code execution.

#Zero-Day#Citrix#RCE#CISA#Vulnerability Management

criticalSep 28, 2026

Critical Citrix NetScaler Zero-Day Exploits Confirmed in Active Global Campaigns

CISA has added two critical RCE vulnerabilities in Citrix NetScaler ADC and Gateway to its KEV catalog following reports of active exploitation. Organizations are urged to patch immediately.

#Zero-Day#RCE#Citrix#CISA#Infrastructure Security

highSep 27, 2026

CISA and FBI Issue Urgent Warning on Third-Party ICS Risks to Critical Infrastructure

Federal agencies have issued a joint advisory warning critical infrastructure operators of escalating risks from third-party vendors. The alert emphasizes the need for strict remote access controls.

#ICS#OT Security#Supply Chain#Zero Trust#CISA

criticalSep 26, 2026

CISA and FBI Issue Urgent Warning on Third-Party ICS Risks Following Surge in Critical Infrastructure Attacks

Federal agencies have issued a new advisory urging critical infrastructure operators to enforce strict least-privilege access and remote control protocols to mitigate rising third-party supply chain risks.

#ICS#Supply Chain#OT Security#Critical Infrastructure#CISA

criticalSep 25, 2026

CISA Issues Urgent Warning as Iranian-Linked Actors Target Industrial PLCs in Water Sector

CISA has issued an urgent alert regarding a surge in cyber attacks targeting Programmable Logic Controllers (PLCs) within water and wastewater systems. Threat actors are actively locking out operators and disrupting critical water services across multiple states.

#OT Security#ICS#Critical Infrastructure#PLC#CISA#Threat Intelligence

criticalSep 25, 2026

CISA Adds Three Linux Kernel Flaws to KEV Catalog Amid Active Exploitation Concerns

The Cybersecurity and Infrastructure Security Agency (CISA) has officially added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These flaws are currently being targeted in the wild, prompting urgent patching requirements for enterprise systems.

#Linux#Kernel#CISA#KEV#Vulnerability

highSep 25, 2026

CISA Adds Three Linux Kernel Vulnerabilities to KEV Catalog Amid Active Exploitation Reports

CISA has officially added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. Security teams are urged to prioritize patching to mitigate active in-the-wild threats.

#Linux#Kernel#CISA#KEV#Vulnerability

criticalSep 22, 2026

CISA Issues Emergency Directive Following Active Exploitation of Google Pixel Modem Zero-Day CVE-2026-58704

CISA has mandated federal agencies patch a critical Google Pixel modem vulnerability (CVE-2026-58704) within three days due to active, zero-click exploitation in the wild.

#Zero-Day#Mobile Security#CVE-2026-58704#CISA#Firmware Exploitation

criticalSep 18, 2026

Critical ScreenConnect Vulnerability Under Active Worm-Like Exploitation

CISA has added CVE-2026-84869 to its Known Exploited Vulnerabilities catalog following reports of worm-like attacks. The flaw allows unauthorized file execution in ConnectWise ScreenConnect sessions.

#CVE-2026-84869#ScreenConnect#Supply Chain#Remote Access#CISA

highSep 10, 2026

U.S. Agencies Accuse Chinese AI Firms of Industrial-Scale Distillation of Claude, GPT, Gemini and Grok

NSA, CISA and FBI describe what they characterize as industrial-scale malicious distillation attacks targeting U.S. frontier models including Claude, GPT, Gemini and Grok. The advisory treats the operation as a systematic campaign for extracting restricted AI capabilities with implications for AI espionage.

#china#ai-distillation#nsa#cisa#fbi#ai-espionage#frontier-models#model-extraction#geopolitical