CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2020-11023link is external JQuery Cross-Site Scripting XSS Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pos...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on January 23, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-023-01 mySCADA myPRO Manager ICSA-25-023-02 Hitachi Energy RTU500 Series Product...

Under Trump, US Cyberdefense Loses Its Head

Chinese hacks, rampant ransomware, and Donald Trump’s budget cuts all threaten US security. In an exit interview with WIRED, former CISA head Jen Easterly argues for her agency’s survival...

CVE-2024-2617

creationtimestamp| type| source ---|---|--- 2025-01-23 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-02 2026-02-14 11:56:07+00:00| seen| https://bsky.app/profile/ravirockks.bsky.social/post/3mesxnxujp72v 2026-02-14 11:56:08+00:00| seen|...

Trend Micro and CISA Secure-By-Design Pledge

Trend’s support reaffirms dedication to safeguarding products and customers...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on January 21, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-021-01 Traffic Alert and Collision Avoidance System TCAS II ICSA-25-021-02 Siemens...

CVE-2024-12054

creationtimestamp| type| source ---|---|--- 2025-01-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03 2025-02-13 23:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sydrc6b2g 2025-02-14 00:35:09+00:00| seen|...

CVE-2024-11166

creationtimestamp| type| source ---|---|--- 2025-01-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-01 2025-01-22 19:02:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2613 2025-01-22 19:15:25+00:00| seen|...

CISA and FBI Release Updated Guidance on Product Security Bad Practices

In partnership with the Federal Bureau of Investigation FBI, CISA released an update to joint guidance Product Security Bad Practices in furtherance of CISA’s Secure by Design initiative. This updated guidance incorporates public comments CISA received in response to a Request for Information,...

CVE-2024-12703

creationtimestamp| type| source ---|---|--- 2025-01-17 10:33:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113843241325152499 2025-01-17 10:57:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2118 2025-01-17 11:15:28+00:00| seen|...

CVE-2024-10497

creationtimestamp| type| source ---|---|--- 2025-01-17 10:33:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113843241275511437 2025-01-17 10:57:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2117 2025-01-17 11:15:21+00:00| seen|...

CVE-2024-10498

creationtimestamp| type| source ---|---|--- 2025-01-17 10:33:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113843241291825195 2025-01-17 10:57:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2116 2025-01-17 11:15:23+00:00| seen|...

CVE-2024-12142

creationtimestamp| type| source ---|---|--- 2025-01-17 10:22:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113843197471243477 2025-01-17 10:57:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2119 2025-01-17 11:15:26+00:00| seen|...

CVE-2024-11425

creationtimestamp| type| source ---|---|--- 2025-01-17 09:04:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113842892528607736 2025-01-17 09:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwhh2h46c2r 2025-01-17 09:44:00+00:00| seen|...

CISA Releases Twelve Industrial Control Systems Advisories

CISA released twelve Industrial Control Systems ICS advisories on January 16, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-016-01 Siemens Mendix LDAP ICSA-25-016-02 Siemens Industrial Edge Management...

CISA and Partners Release Call to Action to Close the National Software Understanding Gap

Today, CISA—in partnership with the Defense Advanced Research Projects Agency DARPA, the Office of the Under Secretary of Defense for Research and Engineering OUSD R&E, and the National Security Agency NSA—published Closing the Software Understanding Gap. This report urgently implores the U.S...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-50603link is external Aviatrix Controllers OS Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber acto...

CVE-2024-2461

creationtimestamp| type| source ---|---|--- 2025-01-16 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-016-07 2025-03-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-04...

CVE-2024-2462

creationtimestamp| type| source ---|---|--- 2025-01-16 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-016-06 2025-03-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-05...

Fuji Electric Alpha5 SMART

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control...