CISA orders feds to prioritize patching Langflow auth bypass flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Friday to patch an actively ...
Wired

CISA Tells US Agencies to Fix Security Bugs in as Little as 3 Days Thanks to AI Threats

“Defenders cannot afford to take weeks to patch,” one Cybersecurity and Infrastructure Security Agency official warned on Wednesday. Chris Butera, CISA's acting executive assistant director for ...
Nextgov

CISA directive revamps how agencies prioritize vulnerable systems

The move is part of CISA’s response “to the current threat landscape where AI software services can assist threat actors to find and exploit vulnerabilities,” the agency says. CISA Cyber Defense The ...
AFCEA

CISA Issues Binding Directive on Security Updates to Federal Agencies

On Wednesday, the Cybersecurity and Infrastructure Security Agency (CISA) issued binding operational directive (BOD) 26-04 to civilian agencies. The measure prioritizes security updates based on risk, ...
GovCon Wire

CISA Plans $100M Cyber Technology Services Contract for Threat Hunting Operations

CISA is planning a $100 million cyber operations contract supporting threat-hunting missions The requirement will provide technical and operational support for the agency’s Office of Threat Hunting ...
TechRepublic

CISA Flags 2-Year-Old Oracle WebLogic Vulnerability as Actively Exploited

CISA added Oracle WebLogic flaw CVE-2024-21182 to its KEV catalog, giving federal agencies until June 4 to patch exposed servers. A patch that should have retired an Oracle WebLogic vulnerability two ...
Krebs on Security

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor ...

CISA Contractor Exposed Sensitive Credentials in Public GitHub Repository

CISA is investigating after a contractor’s public GitHub repository exposed AWS GovCloud credentials, internal files, and passwords.
Ars Technica

In stunning display of stupid, secret CISA credentials found in public GitHub repo

Security researcher Brian Krebs brings us the news that America’s Cybersecurity & Infrastructure Agency (CISA) has had a large store of plaintext passwords, SSH private keys, tokens, and “other ...
Krebs on Security

CISA Admin Leaked AWS GovCloud Keys on Github

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS ...
Dark Reading

Has CISA Finally Found Its New Leader in Tom Parker?

It’s been a brutal 16 months since the Cybersecurity and Infrastructure Security Agency (CISA) has had a Senate-confirmed director. Now, a new name has bubbled up as a possible pick to take over the ...
Politico

CISA drops probe into failed polygraph test opened by former chief

The Department of Homeland Security has closed an investigation into seven career staffers at the Cybersecurity and Infrastructure Security Agency who arranged a counterintelligence polygraph exam ...