Cybersecurity and Infrastructure Security Agency

• ISC Releases Security Advisories for Multiple Versions of BIND 9 January 27, 2023
  Original release date: January 27, 2023The Internet Systems Consortium (ISC) has released security advisories that address vulnerabilities affecting multiple versions of the ISC’s Berkeley Internet Name Domain (BIND) 9. A remote attacker could exploit these vulnerabilities to potentially cause denial-of-service conditions and system failures. CISA encourages users and administrators to review the following ISC advisories […]
  CISA
• JCDC Announces 2023 Planning Agenda January 26, 2023
  Original release date: January 26, 2023Today, the Joint Cyber Defense Collaborative (JCDC) announced its 2023 Planning Agenda. This release marks a major milestone in the continued evolution and maturation of the collaborative’s planning efforts. JCDC’s Planning Agenda brings together government and private sector partners to develop and execute cyber defense plans that achieve specific risk […]
  CISA
• CISA Releases Eight Industrial Control Systems Advisories January 26, 2023
  Original release date: January 26, 2023CISA released eight Industrial Control Systems (ICS) advisories on January 26, 2023.These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations: ICSA-23-026-01 Delta Electronics CNCSoft ScreenEditor ICSA-23-026-02 Econolite EOS […]
  CISA
• CISA Has Added One Known Exploited Vulnerability to Catalog January 26, 2023
  Original release date: January 26, 2023CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and poses a significant risk to the federal enterprise. Note: To view the newly added vulnerabilities in the catalog, click […]
  CISA
• CISA, NSA, and MS-ISAC Release Advisory on the Malicious Use of RMM Software January 25, 2023
  Original release date: January 25, 2023Today, the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) released joint Cybersecurity Advisory (CSA) Protecting Against Malicious Use of Remote Monitoring and Management Software. The advisory describes a phishing scam in which cyber threat actors maliciously use […]
  CISA
• VMware Releases Security Updates for VMware vRealize Log Insight January 25, 2023
  Original release date: January 25, 2023VMware released security updates to address multiple vulnerabilities in VMware vRealize Log Insight. A remote attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2023-0001 and apply the necessary updates. This product is provided subject to this Notification […]
  CISA
• Apple Releases Security Updates for Multiple Products  January 24, 2023
  Original release date: January 24, 2023Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security updates page for the following products and apply the necessary updates as soon as possible: […]
  CISA
• CISA Releases Two Industrial Control Systems Advisories January 24, 2023
  Original release date: January 24, 2023CISA released two Industrial Control Systems (ICS) advisories on January 24, 2023.These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations: ICSA-23-024-01 XINJE XD ICSA-23-024-02 SOCOMEC MODULYS GP This […]
  CISA
• CISA Releases Protecting Our Future: Partnering to Safeguard K–12 organizations from Cybersecurity Threats January 24, 2023
  Original release date: January 24, 2023Today, CISA released Protecting Our Future: Partnering to Safeguard K–12 organizations from Cybersecurity Threats. The report provides recommendations and resources to help K-12 schools and school districts address systemic cybersecurity risk. It also provides insight into the current threat landscape specific to the K-12 community and offers simple steps school […]
  CISA
• CISA Adds One Known Exploited Vulnerability to Catalog January 23, 2023
  Original release date: January 23, 2023CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and poses a significant risk to the federal enterprise. Note: To view the newly added vulnerabilities in the catalog, click […]
  CISA