Skip to content
GeekWire
  • HOME
  • NEWS
    • CERT
    • EXPLOITS
    • NCSC
    • NVD
    • SECURELIST
    • US-CERT
  • BLOG
    • Books
    • OSINT
    • Pentest
    • Privacy
  • GHDB
  • CHDB
  • OSINT
  • ARCHIVE
  • ABOUT
    • Privacy Policy
    • Terms of Use
    • External Links
    • Sitemap
GeekWire
GeekWire
  • HOME
  • NEWS
    • CERT
    • EXPLOITS
    • NCSC
    • NVD
    • SECURELIST
    • US-CERT
  • BLOG
    • Books
    • OSINT
    • Pentest
    • Privacy
  • GHDB
  • CHDB
  • OSINT
  • ARCHIVE
  • ABOUT
    • Privacy Policy
    • Terms of Use
    • External Links
    • Sitemap

Cybersecurity and Infrastructure Security Agency

Dial 311 for… cybersecurity emergencies?

23 June 2022

Members of the Cybersecurity Advisory Committee of CISA (Cybersecurity and Infrastructure Security Agency) have proposed an emergency …

Tags Awareness, Cybersecurity and Infrastructure Security Agency, IT, News

Karakurt extortion group: Threat profile

14 June 2022

The FBI (Federal Bureau of Investigation), together with CISA (Cybersecurity and Infrastructure Security Agency) and other federal …

Tags Accenture Security, AnyDesk, Chainalysis, Cybercrime, Cybersecurity and Infrastructure Security Agency

CISA issues warning about vulnerabilities in VMware and F5 products

19 May 2022

Four of the vulnerabilities were found in VMware Inc. …

Tags CISA, Cybersecurity and Infrastructure Security Agency, F5, Virtualization, VMware

“Killware”: Is it just as bad as it sounds?

18 October 2021

On October 12, after interviewing US Secretary of Homeland Security Alejandro Mayorkas, USA TODAY’s editorial board warned its readers …

Tags Chris Krebs, Cybercrime, Cybersecurity and Infrastructure Security Agency, Department of Homeland Security, Is

Cloud giants join new government initiative to combat cyberattacks

5 August 2021

The agency, which is part of the U.S. Department of Homeland Security, announced the initiative …

Tags Cloud, Cybersecurity and Infrastructure Security Agency, FireEye, IT, Microsoft

Colonial Pipeline attack expected to trigger imminent hardening of cybersecurity rules for federal agencies

11 May 2021

The ransomware attack on Colonial Pipeline last week caused the White House to hold emergency meetings to possibly strengthen a planned …

Tags Colonial Pipeline, Cybersecurity and Infrastructure Security Agency, Executive Order, Governments, Joe Biden

Feds: K-12 Cyberattacks Dramatically on the Rise

11 December 2020

The feds have warned that cyberattacks on the K-12 education sector are ramping up alarmingly. In an alert from the FBI and the …

Tags CISA, Cybersecurity and Infrastructure Security Agency, DDoS, FBI, Governments

Top White House cybersecurity official expects he’ll be forced to hand in his resignation

13 November 2020

As Donald Trump purges those he deems disloyal to him, a top cybersecurity official has said that he’s next in line to go, it was …

Tags CISA, Cybersecurity and Infrastructure Security Agency, Department of Homeland Security, DHS, Donald Trump

DHS Issues Dire Patch Warning for ‘Zerologon’

21 September 2020

The deadline looms for U.S. Cybersecurity and Infrastructure Security Agency’s emergency directive for federal agencies to patch against …

Tags Active Directory, CISA, Critical Infrastructure, Cybersecurity and Infrastructure Security Agency, DHS

Now you need a notarized document to get a .gov domain

9 March 2020

The US government is tightening its rules around the registration of government web domains to stop fraudsters impersonating government …

Tags Cybersecurity and Infrastructure Security Agency, Department of Homeland Security, Government Security, Now, Security Threats

U.S. Govt. Makes it Harder to Get .Gov Domains

7 March 2020

The federal agency in charge of issuing .gov domain names is enacting new requirements for validating the identity of people requesting …

Tags Cybersecurity and Infrastructure Security Agency, Domains, Get, S

Ransomware attack forces 2-day shutdown of natural gas pipeline

20 February 2020

The US Department of Homeland Security (DHS) on Tuesday said that an infection by an unidentified ransomware strain forced the shutdown of …

Tags CISA, Cybersecurity and Infrastructure Security Agency, Department of Homeland Security, DHS, Government Security

It’s Way Too Easy to Get a .gov Domain Name

27 November 2019

Many readers probably believe they can trust links and emails coming from U.S. federal government domain names, or else assume there are at …

Tags CISA, Cybersecurity and Infrastructure Security Agency, Domain Names, Easy, Get
Cookie-Free

NVD

  • CVE-2022-33128 – RG-EG series gateway EG350 EG_RGOS 11.1(6) was discovered to contain a SQL injection vulne …25 June 2022
  • CVE-2019-25071 – ** DISPUTED ** A vulnerability was found in Apple iPhone up to 12.4.1. It has been declare …25 June 2022
  • CVE-2022-24893 – ESP-IDF is the official development framework for Espressif SoCs. In Espressifâ&euro …25 June 2022
  • CVE-2022-29168 – Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascrip …25 June 2022
  • CVE-2022-31016 – Argo CD is a declarative continuous deployment for Kubernetes. Argo CD versions v0.7.0 and …25 June 2022
  • CVE-2022-31017 – Zulip is an open-source team collaboration tool. Versions 2.1.0 through and including 5.2 …25 June 2022

EXPLOITS

  • phpIPAM 1.4.5 – Remote Code Execution (RCE) (Authenticated)14 June 2022
  • TP-Link Router AX50 firmware 210730 – Remote Code Execution (RCE) (Authenticated)14 June 2022
  • Pandora FMS v7.0NG.742 – Remote Code Execution (RCE) (Authenticated)14 June 2022
  • Algo 8028 Control Panel – Remote Code Execution (RCE) (Authenticated)14 June 2022
  • HP LaserJet Professional M1210 MFP Series Receive Fax Service – Unquoted Service Path14 June 2022
  • Virtua Software Cobranca 12S – SQLi14 June 2022

SECURELIST

  • The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs23 June 2022
  • APT ToddyCat21 June 2022
  • ‘Unpacking’ technical attribution and challenges for ensuring stability in cyb20 June 2022
  • How much does access to corporate infrastructure cost?15 June 2022
  • Router security in 20218 June 2022
  • CVE-2022-30190 (Follina) vulnerability in MSDT: description and counteraction6 June 2022

Information Cyber Network Enterprise Security News

Copyright © 2022 GeekWire | Cookie-Free | Privacy Policy | We are not responsible for the content of external sites.

GeekWire Information Cyber Network Enterprise Security News