U.S. CISA Warning on Sisense breach
The U.S. CISA had urged the customers to reset the login credentials in response to a recent data breach at Sisense, a provider of data analytics services. Sisense’s AI and…
CISA KEV UPDATE March 2024 – Part 2
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability with a CVSS score 9.3 is a critical…
CISA adds Fortinet bug to its KEV Catalog
The U.S. CISA adds Fortinet FortiOS Out-of-Bound write vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. Fortinet has warned that the recently discovered critical remote code execution vulnerability in FortiOS…
CISA adds CVE-2023-35082 to its KEV catalog
A critical vulnerability affecting Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE-2023-35082, has been added to CISA's Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability has a CVSS score of 9.8…
CISA adds Joomla vulnerability to KEV – CVE-2023-23752
The CISA has added a vulnerability for the Joomla CMS to its KEV Catalog, based on evidence of active exploitation. Joomla! is an open-source CMS that’s been around since 2005…
CISA Releases Healthcare Toolkit
The US CISA has published a new set of online resources designed to help IT security leaders in the healthcare sector improve their organization’s security posture. The Cybersecurity Toolkit for…
CISA Releases Secure By Design Principles
The US CISA has launched a new phase of its Secure by Design effort in a bid to get manufacturers to incorporate greater security into their software and other products.…
CISA KEV Update Part I – October 2023
The U.S. CISA added the JetBrains TeamCity flaw CVE-2023-42793 and Windows bug CVE-2023-28229 to its Known Exploited Vulnerabilities Catalog. Below are the descriptions of the two vulnerabilities: CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability. The vulnerability…