CISA KEV Update Part III – September 2023
The US CISA has added the critical flaw CVE-2018-14667 with a CVSS score of 9.8 affecting Red Hat JBoss RichFaces Framework to its Known Exploited Vulnerabilities Catalog. The issue is…
CISA KEV Update September 2023 – Part II
US CISA added the high-severity flaw CVE-2023-41179, affecting Trend Micro Apex One and Worry-Free Business Security to its Known Exploited Vulnerabilities Catalog. Trend Micro this week has released security updates…
Snatch ransomware Dissection
The U.S. FBI and the CISA released a joint cybersecurity advisory warning of the Snatch ransomware operation. Snatch first appeared in 2018 and operates on a ransomware-as-a-service model. The first…
CISA KEV Update – September 2023
CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. With this addition, the catalog numbers surpasses 1000 vulnerabilities CVE-2022-22265 Samsung Mobile Devices Use-After-Free…
CISA KEV Update August 2023 – Part III
The US CISA added a critical flaw CVE-2023-26359 with a CVSS score 9.8 affecting Adobe ColdFusion to its Known Exploited Vulnerabilities Catalog. Adobe fixed the vulnerability in March 2023. It…
CISA Releases Cyber Defense Plan for RMM
The U.S. CISA has released a plan to address systemic cybersecurity risks in remote monitoring and management software. The Remote Monitoring and Management Cyber Defense Plan was created to address…
CISA KEV Update August 2023 – Part II
US CISA has added critical flaw CVE-2023-24489 with a CVSS score 9.8 affecting Citrix ShareFile to its Known Exploited Vulnerabilities Catalog. Citrix ShareFile is a secure file sharing and storage…
US CISA Cybersecurity Strategic Plan
The US CISA has unveiled its Cybersecurity Strategic Plan for the next fiscal years 2024-2026, focusing on three main goals and several objectives. The first goals is ‘addressing immediate cyber…