The Cybersecurity and Infrastructure Security Agency (CISA) has added nine more security flaws to its list of actively exploited bugs, including a VMware privilege escalation flaw...
A new guide provides clues into how the agency might be thinking of crucial details, such as what should count as an “incident” under a new...
A major trade association for relevant financial-sector entities is asking the regulatory agency to hold off in favor of incident reporting rules being implemented at the...
Just a few days after news of attempted use of a new variant of the Industroyer malware comes a warning from the US Cybersecurity and Infrastructure Security Agency (CISA): Certain...
The US government has warned that advanced persistent threat (APT) actors have fashioned tools capable of hijacking industrial devices deployed in critical infrastructure sectors. The bespoke hacking...
The design of the tool, which allows full system access to certain operational technology in environments such as power plants and water treatment facilities, can also...
The Cybersecurity and Infrastructure Security Agency (CISA) has added ten new security bugs to its list of actively exploited vulnerabilities, including a high severity local privilege...
The commission is joining the fray in a budding turf fight at the Cybersecurity and Infrastructure Security Agency that also involves sector risk management agencies like...
A Government Accountability Office official says the watchdog agency consulted with private sector entities in producing a report of 12 areas it’s planning to focus on...
A slew of federal officials from the U.S. and U.K. removed malware from among thousands of infected devices, disrupting a global botnet. The U.S. Department of...