Cybersecurity and Infrastructure Security Agency (CISA) (Page 2)

100 URLs and MITRE ATT&CK techniques that you should block in your firewalls to avoid Conti ransomware

On: March 10, 2022

Tagged: Conti ransomware, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Hacking, Information Security, malware, ransomware, Ransomware-as-a-Service (RaaS), security flaws, security risks

In a joint report, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) detailed the detection of an inordinate increase in Conti ransomware attacks,Read More →

NCSC, CISA, FBI & NSA have issued a critical warning about a new dangerous Sandworm malware. Check your networks using its signatures

On: February 24, 2022

In: Cyber Security

Tagged: cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Cyclops Blink, Federal Bureau of Investigation (FBI), Firewall, Hacking, Information Security, malware, National Cyber Security Centre (NCSC), National Security Agency (NSA), Russia, Sandworm, United Kingdom, United States, WatchGuard

In a joint statement from the National Security Agency (NSA), the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI) and the UK’s National Cybersecurity Centre (NCSC)Read More →

Top 100 free cyber security tools that US government and CISA recommends to companies to protect them from hackers

On: February 21, 2022

In: Cyber Security

Tagged: cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), cybersecurity tools, ethical hacking, Hacking, Hacking Tools, Information Security, research, security flaws, software, SOFTWARE DEVELOPMENT

In its latest security alert, the Cybersecurity and Infrastructure Security Agency (CISA) has compiled a list of the most popular free security tools and services, which can be used byRead More →

8 new vulnerabilities that CISA wants government agencies and private companies to be careful about and patch them immediately

On: January 31, 2022

In: Vulnerabilities

Tagged: Apple, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, IBM, Information Security, Known Exploited Vulnerability Catalog, privilege escalation, SonicWall, use-after-free, vulnerability

On Monday, the Cybersecurity and Infrastructure Security Agency (CISA) published a report detailing the detection of eight new security flaws in its Known Exploited Vulnerabilities Catalog, some of which couldRead More →

How Chinese cyber army is hacking into universities to steal research materials

On: December 30, 2021

In: Cyber Security

Tagged: Aquatic Panda, China, CrowdStrike, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), data theft, GitHub, Hacking, Information Security, Log4j, malware, security flaws, VMware

CrowdStrike researchers report the detection of a hacking group operating from China and that has managed to infiltrate an academic institution by exploiting one of the flaws found in theRead More →

12 critical vulnerabilities in mySCADA myPRO could shutdown lots of manufacturing plants

On: December 27, 2021

In: Vulnerabilities

Tagged: arbitrary code execution, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, Information Security, malware, myPRO, mySCADA, privilege escalation, remote code execution (RCE), security flaws, vulnerability

A cybersecurity specialist reports the detection of a dozen vulnerabilities in myPRO, a product developed by industrial automation firm mySCADA. Among the reported flaws, the expert highlighted an error consideredRead More →

How you can hack the US Department of Homeland Security and earn a great bounty?

On: December 15, 2021

In: Cyber Security

Tagged: Bug Bounty program, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security (DHS), ethical hacking, Hack DHS, Hack the Army, Hacking, incidents, Information Security, research, United States, vulnerability, vulnerability testing

In a statement, the U.S. Department of Homeland Security (DHS) announced the launching of “Hack DHS”, a new vulnerability bounty program that will allow the ethical hacking community to discoverRead More →

How Chinese APT groups are exploiting Zoho ManageEngine vulnerabilities to spy on enterprises

On: November 9, 2021

In: Cyber Security

Tagged: Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), hackers, Hacking, Hacking Tools, incidents, Information Security, malware, Palo Alto Networks, Unit 42, Zoho ManageEngine

In its latest investigation, Palo Alto Networks’ Unit 42 detailed how a group of unknown hackers has used a number of malicious tools to spy on enterprise networks in theRead More →

CVE-2021-1529: Critical vulnerability in Cisco SD-WAN. Update ASAP

On: October 25, 2021

In: Vulnerabilities

Tagged: Cisco SD-WAN, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, incidents, Information Security, network security, remote code execution (RCE), vulnerability

Cybersecurity specialists report the detection of a critical privilege escalation vulnerability in the IOS IE operating system that would allow threat actors to execute arbitrary code in Cisco SD-WAN deployments.Read More →