CISA adds Chromium XML use-after-free CVE-2026-125350 to KEV
A crafted webpage can run code inside the Chromium sandbox; federal mitigation deadline is November 24.
Stories per day · 30 days
30 RSS
Relatedkev76critical-infrastructure17ivanti16connect-secure15ics14rce12refrigeration12authentication-bypass10php10remote-code-execution9cisco8cold-chain8php2shell8wordpress8dhs7pan-os7sonicwall7zero-day7
481 stories, newest first · one card per story
Stories tagged #cisa
CISA KEV lists Outlook spoofing flaw CVE-2026-124194
An unauthorized attacker can spoof over the network without the expected user interaction; deadline is November 24.
1
Trump nominates Palantir CIO Michael LoSapio to lead CISA
A lame-duck Senate may not vote; failure would force renomination before a Democratic majority.
CISA adds GPUStack, FreeSWITCH, OpenSSH, and Faspex flaws to KEV
Three flaws have confirmed exploitation; GPUStack and FreeSWITCH score 9.8 and allow admin or code execution.
CISA expands incident reporting form while CIRCIA rule waits
Only federal civilian agencies must report now; a final rule would add 72-hour incident and 24-hour ransom deadlines.
IBM Aspera Faspex flaw listed as exploited, grants full admin rights
CVE-2026-123218 affects Faspex 5.0.0 through 5.0.19; IBM’s fix is 5.0.19 PL1, with a claimed November 12 deadline.
CISA launches an enhanced cyber incident reporting form
The questionnaire asks about malware, social engineering, hacking, and insider threats, and maps activity to MITRE ATT&CK.
CISA BOD 26-04 tells agencies to prioritize patches by risk
Timelines depend on internet access, known exploitation, whether exploitation can be automated, and attacker control.
CISA adds six exploited vulnerabilities to its KEV catalog
Entries cover Cisco BroadWorks, Barracuda products, Outlook, and Chromium; FCEB agencies must prioritize them under BOD 26-04.
U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses
Attackers exploit unpatched controllers in European supermarkets, raising temperatures to 50°C and spoiling inventory.
1
CISA adds four exploited vulnerabilities to the KEV catalog
The additions cover GPUStack, FreeSWITCH, OpenSSH, and Aspera Faspex; federal agencies must prioritize exposed assets that yield full control.
CISA Warns of Attacks on Industrial Refrigeration Controllers
Attackers may exploit unpatched controllers to alter settings and cause inventory loss in refrigeration systems.
SonicWall SonicOS prior to 7.3.4-7013 and 8.2.2-8015 affected by exploited CVE-2026-19868
CISA added CVE-2026-19868 to KEV Catalog on November 6, 2026; SonicWall SonicOS versions prior to 7.3.4-7013 and 8.2.2-8015 are being exploited.
CISA warns of attacks on supermarket refrigeration systems
France’s blood service had its cold-storage systems compromised but staff prevented any product loss.
1
CISA adds CVE-2026-19868 to Known Exploited Vulnerabilities Catalog
CISA has added CVE-2026-19868, affecting SonicWall SonicOS, to its KEV Catalog due to active exploitation.
CISA adds exploited Apple PAC bypass CVE-2024-27834 to KEV
Federal agencies must fix the flaw by November 18, 2026; Sekoia ties its use to APT29 with moderate to high confidence.
CISA Releases Post-Quantum Cryptography Vendor Guidance
Joint CISA guidance helps organizations assess vendor readiness for transitioning to post-quantum cryptography.
Democrats control Congress to prioritize CISA re-staffing
New leadership plans to expand CISA and counter AI cyber threats in lame-duck session.
CISA issues BOD 26-04 on security update prioritization
CISA BOD 26-04 requires federal agencies to remediate actively exploited vulnerabilities granting full control in three days with mandatory forensic triage.
CISA flags WordPress RCE flaw as actively exploited in attacks
CISA added CVE-2026-119977 to its KEV catalog after attackers exploited the high-severity TOCTOU race condition in WordPress core upgrades.
CISA adds WordPress code execution vulnerability to KEV catalog
CVE-2026-119977 allows unauthenticated code execution during WordPress upgrades and is actively exploited.
CISA Adds WordPress Upgrade Flaw to KEV Catalog
CVE-2026-119977 allows remote code execution via race condition during WordPress upgrades.
CISA adds WordPress flaw to KEV catalog
CISA added CVE-2026-119977 to its Known Exploited Vulnerabilities catalog; Wordfence recorded over 18,500 exploitation attempts in 21 hours.
CISA adds WordPress Core TOCTOU flaw to KEV
CISA confirms active exploitation of CVE-2026-119977 allowing unauthenticated code execution during upgrades.