CISA

CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure

CISA has updated this Alert to: (1) include CVE-2026-111357 and CVE-2026-118527 and reflect their addition to the Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026; and (2) update the ...
cisa

CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security

The threat landscape is evolving at an unprecedented pace. Nation-state actors and other malicious adversaries are becoming increasingly sophisticated in their attempts to compromise U.S. networks.
cisa

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of ...
cisa

CISA Publishes Significant Updates to ScubaGear and ScubaGoggles

Since initial release of ScubaGear in 2022 and ScubaGoggles in 2023, CISA has diligently collaborated and worked with government and industry partners to update these tools so they remain current and ...
cisa

Guidance for Addressing Citrix NetScaler ADC and Gateway Vulnerability CVE-2023-4966, Citrix Bleed

to address CVE-2023-4966 in NetScaler ADC and NetScaler Gateway. On Oct. 17, Citrix updated its Alert to include “exploits of CVE-2023-4966 on unmitigated appliances have been observed.” On Oct. 18, ...
cisa

Use Strong Passwords

Simple passwords, such as 12345, or common identifying information, like birthdays and pet names, are not safe for protecting important accounts holding personal information. Using an easy-to-guess ...
cisa

Office for Bombing Prevention

Overview The Office for Bombing Prevention (OBP) leads the Department of Homeland Security’s (DHS) efforts to implement the National Policy for Countering Improvised Explosive Devices (National C-IED ...
cisa

Aircrack-ng

Aircrack-ng a suite of tools to assess WiFi network security including: monitoring, attacking, testing, and cracking. The suite tests the strength of passwords used for wireless networks. All tools ...
cisa

Communications Sector

The private sector is primarily responsible for protecting sector infrastructure and assets. CISA helps the private sector predict, anticipate, and respond to sector outages.
cisa

Unmanned Aircraft System Detection Technology Guidance

The Unmanned Aircraft System Detection Technology Guidance provides key considerations for how to select and leverage unmanned aircraft system (UAS) detection technology to enhance situational ...
cisa

Information Technology Sector

The nation’s growing dependency on IT makes the Information Technology Sector mission – to identify and protect against cyber threats and vulnerabilities - more complex and important every day.