The Cybersecurity and Infrastructure Security Agency has identified four Microsoft vulnerabilities, including one dating back 14 years, that are being exploited by cybercriminals, particularly in ransomware attacks.
President Trump's budget proposal for fiscal year 2027 seeks to cut $707 million from the Cybersecurity and Infrastructure Security Agency, raising alarms about potential impacts on national cybersecurity.
The U.S. Cybersecurity and Infrastructure Security Agency has added a critical vulnerability affecting F5 BIG-IP APM to its Known Exploited Vulnerabilities catalog, following evidence of active exploitation.
The U.S. Cybersecurity and Infrastructure Security Agency has flagged a medium-severity vulnerability in Wing FTP Server that is currently being exploited.
The U.S. Cybersecurity and Infrastructure Security Agency has added two significant vulnerabilities in Roundcube webmail software to its Known Exploited Vulnerabilities catalog, highlighting the urgency for remediation.
A critical SQL injection vulnerability in Microsoft Configuration Manager, patched in October 2024, is now being actively exploited, according to CISA.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated that federal agencies eliminate unsupported edge devices to mitigate security risks posed by cyber threats.
A critical vulnerability in SolarWinds Web Help Desk is being actively exploited, prompting urgent patching requirements for U.S. federal agencies.
The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed it will skip the upcoming RSA Conference, a decision linked to recent leadership changes and internal reviews.
