The US Cybersecurity and Infrastructure Security Agency (CISA) on Monday said it is officially changing the way it disseminates online security updates and guidance. CISA says the enhanced information dissemination system will from now on use social media and email only to disperse cybersecurity alerts and advisories, saving its landing page for more critical warnings. Critical warnings are…
In an eleventh-hour move, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) ensured that the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) programs did not lapse. The move will ensure that the MITRE Corporation will continue operating the CVE program for at least another 11 months after federal cybersecurity officials confirmed that they temporarily…
The appointment will likely reassure key stakeholders in the cybersecurity community, as the role of CISA has been the subject of wide speculation since the presidential election. Evans is “well positioned to help guide CISA’s core cybersecurity efforts, particularly in defending federal civilian networks and protecting critical infrastructure from attacks by adversaries,” said Ari Schwartz, coordinator…
CISA recently warned that attackers are exploiting a critical missing authentication vulnerability in Palo Alto Networks Expedition, a migration tool that can help convert firewall configuration from Checkpoint, Cisco, and other vendors to PAN-OS. This security flaw, tracked as CVE-2024-5910, was patched in July, and threat actors can remotely exploit it to reset application admin credentials on Internet-exposed Expedition…
Ivanti Cloud Addresses Critical Vulnerabilities in Endpoint Manager According to the September 2024 security update published by Ivanti Cloud has enhanced its internal scanning, manual exploitation, and testing capabilities in recent months while also refining its responsible disclosure process to ensure the timely identification and resolution of potential issues. This has led to an increase…
Google Chrome users should check if their browser is updated, as versions prior to 124.0.6367.207 allow malicious actors to exploit critical flaws. Following an emergency security patch, Google has released Chrome version 125, which fixes two additional high-risk flaws. The Chrome team released stable version 125, which brings nine security fixes and other improvements. Users…
CISA Releases Guidance For Critical Infrastructure To Defend Against Chinese Hacking Group CISA, along with several other U.S. authorities including the NSA, FBI and global partner Five Eyes cyber security agencies have warned critical infrastructure leaders to protect their systems against the Chinese Volt Typhoon hacking group. Volt Typhoon (also known as Vanguard Panda, Brronze…
The cost of responding to cyber-attacks keeps mounting, federal and state regulators have responded with increased regulations and disclosure requirements enhancing the complexities associated with responding to ransomware attacks and data breaches. Wiley has looked back at the top cyber issues for 2023 and what they mean for 2024. The National Cyber security Strategy—which outlined a…
