cisa

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-88771 Citrix NetScaler Improper Input Validation ...
cisa

Anjvision YSSD-RTMP-H5

v3 9.8 Anjvision Anjvision YSSD-RTMP-H5 Initialization of a Resource with an Insecure Default, Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper ...
cisa

CISA Whitepaper Charts Path to Establishing and Maturing CVE Program Quality

New Framework Defines Quality, Explains Strategy Alignment, Establishes Roadmap, and Provides Measurements to Success ...
cisa

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-39682 Linux Kernel Improper Check for Unusual or ...
cisa

lwIP (Lightweight IP)

Successful exploitation of this vulnerability could result in a system crash, a DoS, or memory corruption, which could lead to code execution on the victim system.
cisa

Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators

The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA)—hereafter referred to as the “authoring agencies”—have published this fact sheet to highlight ...
cisa

Immediate Action Required: CISA Issues Emergency Directive to Secure Cisco SD-WAN Systems

WASHINGTON — The Cybersecurity and Infrastructure Security Agency (CISA) today issued Emergency Directive (ED) 26-03: Mitigate Vulnerabilities in Cisco SD-WAN Systems and Supplemental Direction ED ...
cisa

DHS Unveils New Shields Ready Campaign to Promote Critical Infrastructure Security and Resilience

WASHINGTON – Today, the Department of Homeland Security (DHS), the Cybersecurity and Infrastructure Security Agency (CISA), and the Federal Emergency Management Agency (FEMA) launched the new “ ...
cisa

CISA CPG Checklist

This document is to be used in tandem with the CPGs to help prioritize and track your organization’s implementation.
cisa

911 Cybersecurity Resource Hub

Organizations should report anomalous cyber activity and or cyber incidents 24/7 to report@cisa.gov or 1-844-Say-CISA. It is recommended that ECCs refer to their cyber incident response plan as soon ...
cisa

Organizations and Cyber Safety

CISA offers tools, resources, and services for organizations of all sizes to implement cyber best practices that ensure the continuity of critical services and secure data.
cisa

Bad Practices

Recent attacks on the water we drink, our food production, our healthcare availability, our schools, our municipalities, and other national critical functions have demonstrated cyberattacks against ...