CIS Security Advisories
CIS Security News
CISA News
ISACA SmartBrief
Cyber Security Advisories – MS-ISAC
- A Vulnerability in Atlassian Data Center Products Could Allow for Arbitrary File Access 2026-10-12A vulnerability in Atlassian Data Center products could allow for arbitrary file access. Atlassian Data Center products are self-managed, enterprise-grade editions of Atlassian tools such as Jira, Confluence, Bitbucket, and Jira Service Management, which organizations host on their own infrastructure or private cloud and which offer clustering, high availability, and greater control over data, security, […]
- Multiple Vulnerabilities in SonicWall SMA1000 Series Appliances Could Allow for Remote Code Execution. 2026-10-12Multiple vulnerabilities have been discovered in SonicWall SMA1000 Series Appliances, the most severe of which could allow for remote code execution. SonicWall Secure Mobile Access (SMA) 1000 Series appliances are enterprise-grade secure access and SSL VPN gateways. Successful exploitation of the most severe vulnerability could allow an unauthenticated, remote attacker to reach internal functionality and […]
- Multiple Vulnerabilities in Dell System Update Could Allow for Remote Code Execution 2026-10-12Multiple vulnerabilities have been discovered in Dell System Update (DSU), the most severe of which could allow for remote code execution. Dell System Update (DSU) is a free Dell utility for Windows that scans your Dell computer and automatically finds, downloads, and installs the latest BIOS, driver, firmware, and application updates for it. Successful exploitation […]
- A Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway Could Allow for Remote Code Execution 2026-10-09A vulnerability has been discovered in Citrix NetScaler Application Delivery Controller (ADC) and Citrix NetScaler Gateway that could allow for remote code execution. Citrix NetScaler ADC (Application Delivery Controller) is an enterprise networking platform and traffic management device designed to optimize, secure, and accelerate the delivery of web and cloud applications. Successful exploitation of the […]
- Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution 2026-10-07Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install […]
- A Vulnerability in Fortinet FortiMail Could Allow for Arbitrary Code Execution 2026-10-02A vulnerability has been discovered in Fortinet FortiMail that could allow for arbitrary code execution. Fortinet FortiMail is a secure email gateway that protects organizations from inbound threats including spam, phishing, malware, and business email compromise, while also preventing outbound data loss across physical, virtual, and cloud deployments. Successful exploitation of this vulnerability could allow […]
- A Vulnerability in Kiteworks EPG (Email Security Gateway) Could Allow for Arbitrary Code Execution 2026-10-01A vulnerability has been discovered in Kiteworks EPG (Email Security Gateway) that could allow for arbitrary code execution. Kiteworks Email Protection Gateway (EPG) is a cloud-based security solution that automates end-to-end encryption, decryption, and policy enforcement for inbound and outbound enterprise emails. A combination of input-handling flaws in publicly reachable endpoints of the Kiteworks Email […]
- A Vulnerability in WordPress Could Allow for Remote Code Execution 2026-10-01A vulnerability has been discovered in WordPress that could allow arbitrary code on the web server. WordPress is a free, open-source content management system (CMS) that allows you to build and manage websites without needing to write code. Successful exploitation allows an unauthenticated attacker to manipulate the page-template resolution logic to execute local PHP files […]
- A Vulnerability in Cisco Catalyst SD-WAN Manager Could Allow for Authentication Bypass 2026-09-30A vulnerability has been discovered in Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) that could allow for authentication bypass. Cisco Catalyst SD-WAN Manager is the centralized dashboard used to monitor and manage SD-WAN fabric devices, in some deployments up to several thousand devices from a single console. An attacker could exploit this vulnerability by sending […]
- A Vulnerability in Apple Products Could Allow for Arbitrary Code Execution 2026-09-30A vulnerability has been discovered in Apple products that could allow for arbitrary code execution. macOS Sequoia (macOS 15) is an operating system version for Mac computers released by Apple in late 2024.macOS Tahoe (macOS 26) is an operating system version for Mac computers released by Apple in late 2025.iOS is Apple's mobile operating system.IPadOS […]
Blog Feed – Center for Internet Security
- 4 Ways AI Is Changing the Public Safety Threat Landscape 2026-10-09Learn how AI is reshaping the public safety threat landscape and reducing the time, effort, and expertise threat actors need to conduct harmful activities.
- Election Threat 2026: 10 Key Takeaways from the EI-ISAC Election Security Forum 2026-10-07More than 700 election security stakeholders joined the EI-ISAC Election Threat 2026 forum to strengthen coordination, preparedness, and resilience ahead of future elections.
- CIS Benchmarks October 2026 Update 2026-10-06The following CIS Benchmarks were updated during the past month. We've highlighted the major updates below. Each Benchmark includes a full changelog.
- SLTT C2 Traffic Tied to Remus Malware Distribution Operation 2026-10-01The CIS CTI team identified Remus infostealer distribution activity spanning March through September 2026. Read its analysis.
- AI Raised the Cyber Stakes, But Best Practices Still Win 2026-10-01AI is accelerating threats, not reinventing them. Learn why proven security fundamentals remain your strongest defense and how CIS SecureSuite Membership helps you apply them at operational speed.
- CIS Community Defense Model v3.0: Turning Threat Intelligence Into Action 2026-09-21Learn how CDM v3.0 helps organizations identify high-value CIS Controls Safeguards, strengthen cyber resilience, and reduce risk with confidence.
- CIS Benchmarks September 2026 Update 2026-09-11The following CIS Benchmarks were updated during the past month. Each Benchmark includes a full changelog detailing all modifications and enhancements.
- Dual-RMM Phishing and PowerShell RAT Campaign Hits SLTTs 2026-09-01An active phishing campaign is targeting U.S. SLTTs with a custom PowerShell WebSocket RAT and dual RMM tools. Read the CIS CTI team's analysis.
- CIS and SANS: A Longstanding Partnership Built to Advance Cybersecurity 2026-08-26CIS and SANS extend decades of partnership with a new AWS Marketplace offering that combines secure cloud infrastructure and expert training.
- SLTT Traffic Directing to S3 Buckets Hosting KrustyLoader 2026-08-24The CIS CTI team identified several MS-ISAC members directing DNS traffic to AWS S3 buckets hosting Krustyloader malware. Read its analysis.
All CISA Advisories
- Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data 2026-10-08Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the Integrity Technology Group, are combining automated scanning tools, large-scale botnets, and hands-on exploitation techniques to target and steal sensitive data […]CISA
- Red Lion Controls N-Tron 700 Series 2026-10-08View CSAF Summary Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to reboot by navigating to a specific URL on the device. This action […]CISA
- Grid Protection Alliance openPDC and openHistorian 2026-10-08View CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDCCISA
- Satel Netco Design 2026-10-08View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. The following versions of Satel Netco Design are affected: Satel Netco Design CVSS Vendor Equipment v3 8.8 Satel Satel Netco […]CISA
- Hitachi Energy RTU500 2026-10-06View CSAF Summary Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed according to the cybersecurity requirements, threat landscape, and industry practices that existed at the time of […]CISA
- Hitachi Energy SOI 2026-10-06View CSAF Summary Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of SOI product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks affecting confidentiality, integrity, and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. […]CISA
- Hitachi Energy Asset Suite 2026-10-06View CSAF Summary Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite product versions listed in this document. These vulnerabilities can be exploited to potentially cause confidentiality, integrity and availability impact on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following versions of Hitachi […]CISA
- Hitachi Energy REB500 2026-10-06View CSAF Summary Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service (DoS) attack on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following versions of Hitachi Energy REB500 […]CISA
- Johnson Controls EasyIO FG 2026-10-06View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device. The following versions of Johnson Controls EasyIO FG are affected: EasyIO FG firmwareCISA
- Savannah lwIP SMTP client 2026-10-06View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Savannah lwIP SMTP client are affected: lwIP SMTP client 2.2.1 (CVE-2026-15340) CVSS Vendor Equipment v3 9.8 Savannah lwIP SMTP client 1 Vulnerability Buffer Copy without Checking Size of […]CISA
ISACA SmartBrief on Cybersecurity
- SmartBrief will not publish Monday, Oct. 12 2026-10-09In observance of the federal holiday, SmartBrief will not publish Monday, Oct. 12.
- Who Said It? Be curious of the things that are different. 2026-10-09Maria Hinojosa or Eva Marie Saint Check your answer here.
- Nov. 16-19, Las Vegas: ISACA Training Week 2026-10-09Sharpen your skills to use for your next project, promotion and overall career development. -More-
- Last chance. Deadline extended!SmartBrief Innovation Awards in AI 2026 2026-10-09Don't miss out on your chance to enter SmartBrief's 2026 Innovation Awards in AI, which recognize AI solutions that impact bu -More-
- EY breach exposed Goldman Sachs, Man Group client data 2026-10-09Ernst & Young has disclosed a cybersecurity breach that exposed personal and financial data of clients linked to Goldman Sach -More-
- Oct. 20: State of Cyber 2026 2026-10-09Join featured speaker Sandy Buchanan, CISSP, CISM, CISA, and Lead Product Manager at TeamMate by Wolters Kluwer, who leads th -More-
- Rethinking security training against AI-driven threats 2026-10-09Security awareness training is under scrutiny as successful cyberattacks rise despite widespread training efforts. -More-
- Cisco alerts to critical NX-OS vulnerabilities 2026-10-09Cisco has issued security advisories for critical vulnerabilities in its NX-OS, which could allow remote code execution or de -More-
- Financial firms targeted by AI-driven attacks 2026-10-09South Korean financial companies have been targeted in a data theft campaign using ARTEX, an AI penetration testing tool deve -More-
- YouTube creators targeted in fake sponsorship phishing 2026-10-09Threat actors are targeting YouTube creators by posing as brands seeking sponsorships, using fake collaboration platforms to -More-
