For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative ...

Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to ...

Since initial release of ScubaGear in 2022 and ScubaGoggles in 2023, CISA has diligently collaborated and worked with government and industry partners to update these tools so they remain current and ...

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing ...

The threat landscape is evolving at an unprecedented pace. Nation-state actors and other malicious adversaries are becoming increasingly sophisticated in their attempts to compromise U.S. networks.

Join members of CISA’s senior leadership team as they dig deeper into the reality confronting U.S. critical infrastructure as adversaries leverage tech-enabled tools to accelerate the number, and ...

This V1 supersedes the required actions in Emergency Directive (ED) 26-03: Mitigate Vulnerabilities in Cisco SD-WAN Systems and applies to any federal agency running affected products. This V1 ...

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-114625 Arista VeloCloud Orchestrator SQL Injection ...

Building on insights from past iterations, Cyber Storm X will take place in Fall 2026 and will explore the full spectrum of cyber incident response by simulating an adversary-driven cyberattack on ...

This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since August 2024, targeting businesses and critical infrastructure across North America, ...

PEAK-System Device Driver Setup <=5.1.2.1151 (CVE-2026-109576, CVE-2026-101103, CVE-2026-94188, CVE-2026-103672, CVE-2026-110322, CVE-2026-105960) PCAN Windows CAN device drivers <=5.1.2 ...

CISA urges organizations with affected self-hosted Remote Support appliances to immediately take the actions within this alert.