Cyber Threats and Advisories | Cybersecurity and Infrastructure
2023年1月17日 · Any cyber-attack, no matter how small, is a threat to our national security and must be identified, managed, and shut down. CISA’s Role CISA diligently tracks and shares …
Known Exploited Vulnerabilities Catalog - CISA
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains …
Top Routinely Exploited Vulnerabilities - CISA
2021年8月20日 · Cyber actors continued to exploit this four-year-old vulnerability in Microsoft Office that the U.S. Government publicly assessed last year was the most frequently targeted. …
Free Cybersecurity Services & Tools - CISA
CISA's no-cost, in-house cybersecurity services designed to help individuals and organizations build and maintain a robust and resilient cyber framework. An extensive selection of free …
2021 Top Routinely Exploited Vulnerabilities - CISA
2022年4月28日 · This vulnerability, known as Log4Shell, affects Apache’s Log4j library, an open-source logging framework. An actor can exploit this vulnerability by submitting a specially …
Cyber Hygiene Services - CISA
Video: Strengthening Cyber Defenses: CISA’s Free Vulnerability Scanning Explained: In this video, CISA highlights the benefits of enrolling in free its Vulnerability Scanning service to …
Federal Government Cybersecurity Incident and Vulnerability
2024年10月16日 · This document presents two playbooks: one for incident response and one for vulnerability response. These playbooks provide FCEB agencies with a standard set of …
Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect …
2024年2月29日 · Cyber threat actors are actively exploiting multiple previously identified vulnerabilities—CVE-2023-46805, CVE-2024-21887, and CVE-2024-21893—affecting Ivanti …
Risk and Vulnerability Assessments - CISA
2024年9月13日 · Reports by fiscal year (starting with FY20) that provide an analysis of a sample attack path a cyber threat actor could take to compromise an organization with weaknesses …
2022 Top Routinely Exploited Vulnerabilities - CISA
2023年8月3日 · This vulnerability impacts the Microsoft Support Diagnostic Tool (MSDT) in Windows. A remote, unauthenticated cyber actor could exploit this vulnerability to take control …