CISA

CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support

CISA urges organizations with affected self-hosted Remote Support appliances to immediately take the actions within this alert.
CISA

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal ...
cisa

Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials

CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections.
cisa

Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation

The National Institute of Standards and Technology (NIST), National Security Agency’s Super Intelligence Security Center (NSA SISC) and Cybersecurity and Infrastructure Security Agency (CISA) ...
cisa

Guangzhou Juan IoT Technology EseeCloud

An attacker can use a hard-coded credential to log in to EseeCloud devices. Guangzhou Juan IoT Technology Co., Ltd. did not respond to CISA's coordination attempts. EseeCloud users are advised to ...
cisa

CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure

CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA ...
cisa

Inductive Automation Ignition Software

The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid ...
cisa

Joint Statement from Elections Infrastructure Government Coordinating Council & the Election Infrastructure Sector Coordinating Executive Committees

“When states have close elections, many will recount ballots. All of the states with close results in the 2020 presidential race have paper records of each vote, allowing the ability to go back and ...
cisa

Multifactor Authentication

MFA prevents unauthorized access to your data and applications by requiring a second method of verifying your identity, making you much more secure.
cisa

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

CISA added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog on Sept. 27, 2026. Both are critical, zero-day vulnerabilities that can independently enable remote ...
cisa

K-12 Resources

In response to the rise in malicious activity with ransomware attacks against K-12 educational institutions and the increase in remote learning, CISA, in collaboration with the FBI, has produced a ...