CISA: Communicating under Pressure: Best Practices for Service Providers

Developed by CISA, the Federal Bureau of Investigation, and international partners, this guidance describes how organizations can plan and execute clear, timely, accurate, and audience-appropriate communications during IT and operational technology OT outages. Whether caused by cyber threat actor...

GPU components DoS

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their acceptable limits. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response. Braham, Plymouth, South St. Paul and Maple Plain have publicly described a plant outage, communications failures or affecte...

ROS-20260728-73-0009

The vulnerability of the HTTP/2 header processing module in the Apache HTTP Server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260722-73-0030

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2026-63144

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch que...

Microsoft .NET DoS

The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260713-73-0030

The vulnerability in Python-Relenv is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Siemens Network Software Pointer Swapping DoS

The vulnerability of Siemens network software is related to the swapping of pointers. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...

ROS-20260708-73-0026

The vulnerability of the Grafana Live messaging system in real-time mode, a platform for monitoring and surveillance, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted...

Picomatch Path Traversal DoS

The vulnerability of the library for filtering file paths in Picomatch is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker operating remotely to cause service interruptions...

Suricata Uncontrolled Reachable Assertion DoS

The vulnerability of the Suricata intrusion detection and prevention system is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Cisco ASA FTD Service Outage

The vulnerability of the Remote Access SSL VPN microprogramming network interface layer software developed by Cisco Adaptive Security Appliance ASA and Cisco Secure Firewall Threat Defense FTD is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious...

Oracle Identity Manager Connector DoS

The vulnerability of the Core component of the Oracle Identity Manager Connector, a software solution for managing user accounts and access rights, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ROS-20260622-73-0032

The vulnerability of the LookupCNAME function in the Go programming language is related to a memory reclamation error when processing CNAME records. Exploiting this vulnerability can allow an attacker to cause service interruptions...

HashiCorp Vault DoS

The vulnerability of the HashiCorp Vault Community Edition and Vault Enterprise storage platforms relates to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GHSA-CQGJ-H8VF-4W59 Acknowledgement extension out of memory

Impact Bad clients that always send a fixed batch value while the server is using the acknowledgement extension can cause the unacknowledged message queue to grow indefinitely, eventually resulting in an OutOfMemoryError. Such bad clients would always send: json "channel": "/meta/connect",...

ROS-20260605-73-0045

The vulnerability in Tomcat11 is related to unlimited resource allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Blink Rendering DoS

The vulnerability of the Blink module in Google Chrome and Microsoft Edge browsers is related to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Cisco IoT Field Network Director DoS

The vulnerability of the Cisco IoT Field Network Director software interface is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...