MITRE CVE Contract Extended Just Before Expiration

MITRE CVE contract extension
April 16, 2025
by Ady DeeJay
Comments (0)

The Common Vulnerabilities and Exposures (CVE) Program is one of the most central programs in cybersecurity, so news that MITRE’s contract to run the program was expiring sent shock waves through the cybersecurity community on April 15. But fears for the future of the globally recognized program underpinning vulnerability management

Read More

RadiAnt DICOM Viewer Flaw Exposes Users To MITM Attacks

RadiAnt DICOM Viewer
February 21, 2025
by Ady DeeJay
Comments (0)

A newly identified cybersecurity vulnerability in Medixant’s RadiAnt DICOM Viewer has raised concerns about potential security threats in the healthcare sector. The vulnerability tracked as CVE-2025-1001, is linked to improper certificate validation, which could allow attackers to deliver malicious updates to users. The Cybersecurity and Infrastructure Security Agency (CISA) has

Read More

CISA Adds Palo Alto Networks and SonicWall Flaws to Exploited Vulnerabilities List

CISA Adds Palo Alto Networks and SonicWall Flaws to Exploited Vulnerabilities List
February 19, 2025
by Ady DeeJay
Comments (0)

Feb 19, 2025Ravie LakshmananThreat Intelligence / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting Palo Alto Networks PAN-OS and SonicWall SonicOS SSLVPN to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The flaws are listed below – CVE-2025-0108

Read More

CISA Warn Of Critical Ivanti CSA Vulnerabilities: Patch Now

CISA Warn Of Critical Ivanti CSA Vulnerabilities: Patch Now
January 23, 2025
by Ady DeeJay
Comments (0)

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have jointly issued a Cybersecurity Advisory to address the active exploitation of critical vulnerabilities in Ivanti Cloud Service Appliances (CSA). These Ivanti CSA Vulnerabilities —CVE-2024-8963, CVE-2024-9379, CVE-2024-8190, and CVE-2024-9380—were exploited in September 2024 by threat actors

Read More

CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug

April 22, 2023
by Ady DeeJay
Comments (0)

Apr 22, 2023Ravie LakshmananPatch Management / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The three vulnerabilities are as follows – CVE-2023-28432 (CVSS score – 7.5) – MinIO Information Disclosure

Read More

CISA Warns of Critical ICS Flaws in Hitachi, mySCADA, ICL, and Nexx Products

April 7, 2023
by Ady DeeJay
Comments (0)

Apr 07, 2023Ravie LakshmananIndustrial Control System The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published eight Industrial Control Systems (ICS) advisories warning of critical flaws affecting products from Hitachi Energy, mySCADA Technologies, Industrial Control Links, and Nexx. Topping the list is CVE-2022-3682 (CVSS score: 9.9), impacting Hitachi Energy’s MicroSCADA

Read More

How CISA Helps Secure a Nation’s Crown Jewels

April 6, 2023
by Ady DeeJay
Comments (0)

Critical infrastructure attacks are a preferred target for cyber criminals. Here’s why and what’s being done to protect them. What is Critical Infrastructure and Why is It Attacked? Critical infrastructure is the physical and digital assets, systems and networks that are vital to national security, the economy, public health, or

Read More

CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems

March 22, 2023
by Ady DeeJay
Comments (0)

Mar 22, 2023Ravie LakshmananICS/SCADA Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS) advisories on Tuesday, warning of critical flaws affecting equipment from Delta Electronics and Rockwell Automation. This includes 13 security vulnerabilities in Delta Electronics’ InfraSuite Device Master, a real-time device monitoring

Read More