7 VERIFIED REPORTS ANCHORED IN TIER 1 RECORDS · SUBSIDIARY OF CISA
All brand marks and logos are the property of their respective owners and used solely to identify the subject of verified news reporting under nominative fair use.
What happened.CISA added an actively exploited remote code execution vulnerability in the Palo Alto Networks PAN-OS management interface to its Known Exploited Vulnerabilities catalog.
What happened.CISA and Amazon Web Services published urgent security advisories warning organizations to patch two critical memory corruption vulnerabilities in core PHP that enable unauthenticated remote code execution.
What happened.CISA added four chained vulnerabilities impacting Plex Media Server to its Known Exploited Vulnerabilities catalog after confirming active exploitation by threat actors in the wild.
What happened.CISA, the FBI, and allied cyber agencies published joint advisory AA26-293A detailing active intrusion campaigns conducted by the SafePay ransomware group against critical infrastructure organizations.
What happened.CISA added an improper origin validation flaw in BeyondTrust Remote Support to its Known Exploited Vulnerabilities catalog following active zero-day attacks.
What happened.CISA issued an urgent directive ordering federal agencies to patch an authentication spoofing zero-day in Ivanti Connect Secure VPN appliances.
What happened.CISA, the FBI, and partner cyber defense agencies from six allied nations issued joint advisory AA26-281A. The notice details how state-linked threat actors use commercial tooling firm Integrity Technology Group to breach critical infrastructure.
