CISA has updated this Alert to: (1) include CVE-2026-111357 and CVE-2026-118527 and reflect their addition to the Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026; and (2) update the ...

The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Health and Human Services (HHS), U.S. Department of Agriculture (USDA), and the Department of ...

Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources. For users who are currently using PowerSYSTEM ...

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of ...

Since initial release of ScubaGear in 2022 and ScubaGoggles in 2023, CISA has diligently collaborated and worked with government and industry partners to update these tools so they remain current and ...

As the summer season approaches, people across the country are preparing to attend a wide array of special events, from global showcases like the FIFA World Cup 2026™ to celebrations marking America’s ...

DOJ's Security Operations Center as a Service (SOCaaS) delivers 24x7x365 threat monitoring, detection and incident response, threat intelligence, and cybersecurity investigations to customers via the ...

A report providing organizations recommended guidance and considerations as part of their network architecture, security baseline, continuous monitoring, and Incident Response practices in order to ...

Organizations should report anomalous cyber activity and/or cyber incidents 24/7 to CISA. CISA is working with the K-12 education sector to help raise awareness and understanding of the risks as well ...

A new Colorado law has created an Auxiliary Emergency Communications (AuxComm) Unit within the state’s Division of Homeland Security and Emergency Management (DHSEM).

Building on lessons learned from previous incidents and incorporating industry best practices, CISA intends for these two playbooks to strengthen cybersecurity response practices and operational ...

Aircrack-ng a suite of tools to assess WiFi network security including: monitoring, attacking, testing, and cracking. The suite tests the strength of passwords used for wireless networks. All tools ...