cisa Archives

event logging, CISA, living off the land

Event Logging Key to Detecting LOTL Attacks, Security Agencies Say

Jeffrey Burt | August 25, 2024 | cisa, event logging, living off the land

A report by CISA, the FBI, the NSA, and international agencies lay out the argument that event logging tools help enterprises better detect attacks that rely on LOTL techniques used by threat ...

Security Boulevard

CISA Issues Warning: CrowdStrike Outage May Lead to Phishing and Malware Attacks

Stephen Kowski | July 23, 2024 | breaches, cisa, CrowdStrike, CTO Corner, General, Malware, malware attacks, Phishing, Phishing Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the recent CrowdStrike outage, warning that malicious actors are actively exploiting the situation to conduct phishing and other cyber ...

SlashNext

CISA, Seal of the Cybersecurity & Infrastructure Security Agency

CISA Alert Calls Out Operating System Vulnerabilities

Michael Vizard | July 22, 2024 | Attack Surface, cisa, Cybersecurity, FBI, OT teams, threat actors, threats

The Cybersecurity and Infrastructure Security Agency (CISA) in partnership with the Federal Bureau of Investigations (FBI) has jointly issued a Secure by Design Alert in response to threat actor campaigns that exploit ...

Security Boulevard

CISA Report: Memory Safety Risks in Critical Open Source Projects

Rohan Timalsina | July 10, 2024 | Buffer Overflow, cisa, CISA Report, CISA Research, cybersecurity defense strategies, enterprise security, Linux & Open Source News, memory corruption, Memory Safety, Memory Security, memory-safe languages, memory-unsafe languages, Open Source Projects, Open Source Threats

Open-source projects are the cornerstone of modern software infrastructure, powering everything from web browsers to mobile apps and cloud services. These projects, contributed to and maintained by communities worldwide, enable innovation and ...

TuxCare

CISA Alert: Urgent Patching Required for Linux Kernel Vulnerability

Rohan Timalsina | June 21, 2024 | cisa, KernelCare live patches, linux kernel vulnerabilities, live patching, Malware & Exploits, vulnerability (CVE-2024-1086)

Given the active exploitation of this Linux kernel vulnerability, federal agencies are strongly urged to apply patches by June 20, 2024. This vulnerability, tracked as CVE-2024-1086, carries a high-severity rating with a ...

TuxCare

CISA D-Link Router Vulnerabilities Being Actively Exploited

Wajahat Raja | May 29, 2024 | cisa, Cybersecurity, Cybersecurity News, D-Link, Exploits, Information Security, IoT Security, Ivanti EPMM, network defense, Network Security, patch management, router vulnerabilities, Vulnerability Management

On Thursday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two security vulnerabilities affecting D-Link routers to its CISA Known Exploited Vulnerabilities (KEV) catalog due to confirmed active exploitation. Federal agencies ...

TuxCare

Cybersecurity Insights with Contrast CISO David Lindner | 5/17/24

David Lindner, Director, Application Security | May 17, 2024 | backlog, cisa, CVE, MTTR

Insight #1 Would you rather a. keep finding more vulnerabilities and building that security backlog until it leads your organization to a crisis like that at the National Vulnerability Database (NVD), or ...

AppSec Observer

Cybersecurity Insights with Contrast CISO David Lindner | 5/17/24

David Lindner, Director, Application Security | May 17, 2024 | backlog, cisa, CVE, MTTR

AppSec Observer

CISA Alert: GitLab Password Exploit – Act Now For Protection

Wajahat Raja | May 15, 2024 | account takeover, cisa, CVE-2023-7028, Cybersecurity, Cybersecurity News, GitLab, Incident Response, Linux Infrastructure, Multi-Factor Authentication (MFA), Password Exploit, patch management, security best practices, Supply Chain Attacks, two-factor-authentication.2fa, Vulnerabilities

In the realm of cybersecurity, vigilance is paramount. Recently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) flagged a critical vulnerability in GitLab, a popular platform for collaborative software development. This GitLab ...

TuxCare