CISA Archives - Page 2 of 6

Cyber actors continue to exploit Log4Shell vulnerability (CVE-2021-44228) in VMware Horizon Systems (updated)

Cybersecurity Attacks, Malware, Vulnerabilities & Exploits / Frank Crast / July 20, 2022 / APT, Aquatic Panda, CGCYBER, CISA, CVE-2021-44228, Cybersecurity Threat Center, Deep Panda, Log4j, log4Shell, UAG

The Cybersecurity and Infrastructure Security Agency (CISA) warns cyber actors continue to exploit Log4Shell vulnerability (CVE-2021-44228) in VMware Horizon Systems.

Cyber actors continue to exploit Log4Shell vulnerability (CVE-2021-44228) in VMware Horizon Systems (updated) Read More »

Maui ransomware targets entities in the Healthcare and Public Health sector

Cybersecurity Attacks, Malware / Frank Crast / July 6, 2022 / CISA, Cybersecurity Threat Center, FBI, Health, healthcare, HPH, Maui, Public Health, Treasury

Cybersecurity experts warn North Korean State-Sponsored threat actors are using Maui ransomware to target entities in the Healthcare and Public Health (HPH) sector.

Maui ransomware targets entities in the Healthcare and Public Health sector Read More »

CISA adds Windows LSA Spoofing Vulnerability (CVE-2022-26925) to Known Exploited Vulnerabilities Catalog

Vulnerabilities & Exploits / Frank Crast / July 4, 2022 / CISA, CVE-2022-26925, Known Exploited Vulnerabilities Catalog, LSARPC, Microsoft

The Cybersecurity and Infrastructure Security Agency (CISA) has added a former zero-day Windows LSA Spoofing Vulnerability (CVE-2022-26925) to its Known Exploited Vulnerabilities Catalog.

CISA adds Windows LSA Spoofing Vulnerability (CVE-2022-26925) to Known Exploited Vulnerabilities Catalog Read More »

CISA adds 8 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include PwnKit)

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / June 30, 2022 / Chromium, CISA, CVE-2018-4344, CVE-2019-8605, CVE-2020-3837, CVE-2020-9907, CVE-2021-30983, Linux, pkexec, polkit, PwnKit

The Cybersecurity and Infrastructure Security Agency (CISA) has added eight vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include two Apple, Mitel, Google Chromium, and the RedHat “PwnKit” vulnerability (CVE-2021-4034) in Polkit’s pkexec tool.

CISA adds 8 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include PwnKit) Read More »

PRC state-sponsored cyber actors routinely exploit these 16 network device vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / June 8, 2022 / CISA, Cisco, Citrix, CVE-2017-6862, CVE-2018-0171, CVE-2018-13382, CVE-2018-14847, CVE-2019-11510, CVE-2019-15271, CVE-2019-1652, CVE-2019-16920, CVE-2019-19781, CVE-2019-7192, CVE-2019-7193, CVE-2019-7194, CVE-2019-7195, CVE-2020-29583, CVE-2020-8515, CVE-2021-22893, FBI, MicroTik, NETGEAR, NSA, Pulse, QNAP, SOHO, ZyXEL

The FBI, NSA and CISA coauthored a joint Cybersecurity Advisory detailing how People’s Republic of China (PRC) state-sponsored cyber actors continue to exploit publicly known vulnerabilities to gain access to a broad network of compromised infrastructure.

PRC state-sponsored cyber actors routinely exploit these 16 network device vulnerabilities Read More »

CISA issues advisory on vulnerabilities affecting versions of the Dominion Voting Systems Democracy Suite ImageCast X

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / June 4, 2022 / CISA, Dominion, ImageCast, ImageCast X

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a security advisory on vulnerabilities affecting versions of the Dominion Voting Systems Democracy Suite ImageCast X.

CISA issues advisory on vulnerabilities affecting versions of the Dominion Voting Systems Democracy Suite ImageCast X Read More »

CISA adds 75 vulnerabilities to Known Exploited Vulnerabilities Catalog

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 28, 2022 / CISA, CVE-2022-20821, Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has added more than 75 vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Cisco, Microsoft, Adobe, Oracle, Linux vulnerabilities and more.

CISA adds 75 vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »

CISA adds 5 vulnerabilities to Known Exploited Vulnerabilities Catalog

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / May 10, 2022 / CISA, CVE-2019-8506, CVE-2021-1789

The Cybersecurity and Infrastructure Security Agency (CISA) has added five vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include two Apple, two Microsoft and one OpenSSL vulnerability.

CISA adds 5 vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »

CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include Dirty Pipe Linux kernel vulnerability)

Vulnerabilities & Exploits, Zero-days / Frank Crast / April 26, 2022 / CISA, CVE-2022-0847, CVE-2022-21919, CVE-2022-26904, CVE-2022-29464, Dirty Pipe

The Cybersecurity and Infrastructure Security Agency (CISA) has added seven vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Dirty Pipe vulnerability and a Windows zero-day patched earlier this month.

CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include Dirty Pipe Linux kernel vulnerability) Read More »

APT actors targeting ICS/SCADA Devices with custom tools

Cybersecurity Attacks / Frank Crast / April 18, 2022 / APT, CISA, DOE, ICS, OMRON, OPC UA, SCADA, Schneider

US Government cybersecurity experts are warning of advanced persistent threat (APT) actors using custom tools to target and compromise multiple industrial control system (ICS) and supervisory control and data acquisition (SCADA) devices.

APT actors targeting ICS/SCADA Devices with custom tools Read More »