CIS Security Advisories
CIS Security News
CISA News
ISACA SmartBrief
Cyber Security Advisories – MS-ISAC
- A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service 2026-10-30A vulnerability has been discovered in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that could allow for denial of service (DoS). Cisco Secure Firewall ASA and FTD provide firewall, VPN, and threat defense capabilities for enterprise environments. An attacker could exploit this vulnerability by sending a […]
- A Vulnerability in GitLab Could Allow for Remote Code Execution 2026-10-30A vulnerability has been discovered in GitLab that could allow for remote code execution. GitLab is a DevOps platform that provides source code management, CI/CD pipelines, issue tracking, and collaboration tools in a single application for software development teams. Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary code on the […]
- Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution 2026-10-28Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install […]
- A Vulnerability in Brotli Library Could Allow for Remote Code Execution 2026-10-28A vulnerability has been discovered in the Brotli library that could allow for remote code execution. Brotli is a compression algorithm developed by Google and commonly used to compress web content before it is sent over HTTP. Successful exploitation could allow an unauthenticated remote attacker to trigger memory corruption, disclose sensitive information, crash affected processes, […]
- Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution 2026-10-27Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution.iOS is a mobile operating system for mobile devices, including the iPhone and iPod touch.iPadOS is the operating system for iPad devices.macOS is the operating system for Mac computers.tvOS is the operating system for Apple TV devices.watchOS […]
- Multiple Vulnerabilities in PHP Could Allow for Remote Code Execution 2026-10-21Multiple vulnerabilities have been discovered in PHP, the most severe of which could allow for remote code execution. PHP is a widely-used, open-source server-side scripting language designed primarily for web development. All PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed are considered at risk. Successful exploitation of the most […]
- A Vulnerability in BeyondTrust Remote Support Could Allow for Arbitrary Upload of Files 2026-10-20A vulnerability has been discovered in BeyondTrust Remote Support that could allow for arbitrary upload of files. BeyondTrust Remote Support is an enterprise secure remote access solution that enables IT teams to securely access and troubleshoot remote endpoints. Successful exploitation of this vulnerability could allow a remote attacker to perform file operations on an affected […]
- Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution 2026-10-14Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install […]
- A Vulnerability in Ivanti Connect Secure Could Allow for Arbitrary Code Execution 2026-10-13A vulnerability has been discovered in Ivanti Connect Secure (ICS) that could allow for arbitrary code execution. Ivanti Connect Secure is an enterprise-grade SSL VPN and zero-trust remote access gateway. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to execute arbitrary commands.
- Critical Patches Issued for Microsoft Products, October 13, 2026 2026-10-13Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; […]
Blog Feed – Center for Internet Security
- Healthcare Cybersecurity: What Regulators Are Looking For Right Now 2026-10-27Healthcare regulators want proof that your systems are hardened and your controls are documented. See how CIS SecureSuite helps close that gap.
- From NIS2 to DORA: A Security Program That Satisfies Regulators 2026-10-13NIS2 and DORA reach different organizations, but both ask you to prove cyber risk is managed. See how CIS SecureSuite helps close that gap.
- 4 Ways AI Is Changing the Public Safety Threat Landscape 2026-10-09Learn how AI is reshaping the public safety threat landscape and reducing the time, effort, and expertise threat actors need to conduct harmful activities.
- Election Threat 2026: 10 Key Takeaways from the EI-ISAC Election Security Forum 2026-10-07More than 700 election security stakeholders joined the EI-ISAC Election Threat 2026 forum to strengthen coordination, preparedness, and resilience ahead of future elections.
- CIS Benchmarks October 2026 Update 2026-10-06The following CIS Benchmarks were updated during the past month. We've highlighted the major updates below. Each Benchmark includes a full changelog.
- SLTT C2 Traffic Tied to Remus Malware Distribution Operation 2026-10-01The CIS CTI team identified Remus infostealer distribution activity spanning March through September 2026. Read its analysis.
- AI Raised the Cyber Stakes, But Best Practices Still Win 2026-10-01AI is accelerating threats, not reinventing them. Learn why proven security fundamentals remain your strongest defense and how CIS SecureSuite Membership helps you apply them at operational speed.
- CIS Community Defense Model v3.0: Turning Threat Intelligence Into Action 2026-09-21Learn how CDM v3.0 helps organizations identify high-value CIS Controls Safeguards, strengthen cyber resilience, and reduce risk with confidence.
- CIS Benchmarks September 2026 Update 2026-09-11The following CIS Benchmarks were updated during the past month. Each Benchmark includes a full changelog detailing all modifications and enhancements.
- Dual-RMM Phishing and PowerShell RAT Campaign Hits SLTTs 2026-09-01An active phishing campaign is targeting U.S. SLTTs with a custom PowerShell WebSocket RAT and dual RMM tools. Read the CIS CTI team's analysis.
All CISA Advisories
- CISA Adds Two Known Exploited Vulnerabilities to Catalog 2026-10-30CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-118527 Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose […]CISA
- CISA Adds Two Known Exploited Vulnerabilities to Catalog 2026-10-29CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability These types of vulnerabilities are […]CISA
- Siemens Mendix SAML Module 2026-10-29View CSAF Summary Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Mendix […]CISA
- Hitachi Energy TRO600 series products 2026-10-29View CSAF Summary Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to carry out further attacks and disclosure of sensitive information. Please refer to the Recommended Immediate Actions section for information about the mitigation/remediation. The […]CISA
- Hitachi Energy CoreTec Product 2026-10-29View CSAF Summary Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following […]CISA
- CISA Adds Two Known Exploited Vulnerabilities to Catalog 2026-10-28CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux Kernel Missing Initialization of a Variable Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal […]CISA
- Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz 2026-10-27View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations (CVE-2026-16438), resulting in information disclosure, tampering with, destruction, or deletion of information, and a denial-of-service (DoS) condition of the system. The following versions of Mitsubishi Electric GENESIS, GENESIS64, ICONICS […]CISA
- EPICS Base 2026-10-27View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code. The following versions of EPICS Base are affected: EPICS Base releaseCISA
- CISA Adds Two Known Exploited Vulnerabilities to Catalog 2026-10-27CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-111497 Google Brotli Unchecked Return Value Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant […]CISA
- CISA Adds Two Known Exploited Vulnerabilities to Catalog 2026-10-26CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog and updated the PHP Alert, Critical Vulnerabilities in PHP Require Immediate Patching: CVE-2026-109618 – PHP Memory Corruption Vulnerability CVE-2026-109619 – PHP Stale Internal Request-State Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant […]CISA
ISACA SmartBrief on Cybersecurity
- Countdown to ISACA 2026 Virtual Conference 2026-10-30
- Who Said It? You just jump in there, and whatever life you've experienced is what the audience is going to get. 2026-10-30Walter Koenig or Tom Skerritt Check your answer here.
- PwC confirms vendor breach hit employee learning data 2026-10-30PwC says hackers breached a third-party site that houses its employee learning records, and the Everest ransomware group clai -More-
- Nov. 16-19, Las Vegas: ISACA Training Week 2026-10-30Sharpen your skills to use for your next project, promotion and overall career development. -More-
- NIST issues guidance for federal post-quantum transition 2026-10-30The National Institute of Standards and Technology has released guidance to help federal agencies meet the 2031 deadline for -More-
- Volt Typhoon exploits Cisco SD-WAN flaw via Silent Train 2026-10-30A threat actor linked to China's Volt Typhoon has exploited a critical Cisco SD-WAN vulnerability to deploy the KeyDrift malw -More-
- Telegram patches Android flaw that allows RCE 2026-10-30Security startup NebuSec has discovered a flaw in Telegram for Android that can be exploited to take control of a victim's ph -More-
- Malware campaign poses as ChatGPT, Claude apps on GitHub 2026-10-30A malware campaign called Yoba has been distributing a cryptocurrency miner through fraudulent GitHub projects disguised as d -More-
- Search hijacking campaign exploits Chrome extensions 2026-10-30Cybersecurity firm Socket reports on a search hijacking campaign involving more than 300 Chrome extensions with 13.4 million -More-
