CISA has added CVE-2024-29059, a flaw affecting Microsoft .NET, to its Known Exploited Vulnerabilities catalog.

CISA warns of active attacks exploiting Trimble Cityworks CVE-2025-0994 (CVSS 8.6). Hackers deploy Rust-based malware, Cobalt ...

A hidden backdoor function embedded in the firmware of the Contec CMS8000 patient monitor has been identified by the US Cybersecurity and Infrastructure Security Agency (CISA). The vulnerability, ...

CISA has “strongly urged” all organizations to “reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management ...

24% of companies ran 4+ vulnerability scans in 2024, up from 15% in 2023, showing a shift to continuous monitoring.

The US Cybersecurity & Infrastructure Security Agency (CISA) has added four vulnerabilities to its Known Exploited ...

CISA’s FOCAL Plan, which aims to standardize the cybersecurity ... particularly as the attack surface has expanded and grown more complicated.” This has made vulnerability management more challenging.

CISA adds four new vulnerabilities to its catalog, urging agencies to remediate risks. Learn about the latest exploits and ...

Employees at the Department of Homeland Security's Cybersecurity and Infrastructure Security Agency, or CISA, were initially excluded from broader government offers to take deferred resignation ...

Another trend is of targeting perimeter-based products with vulnerability exploitation. The National Cyber Security Centre (NCSC) has warned of an uptick in such attacks, often involving zero-day ...