🧰 CISA

The items that name it 76

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas classification.key entities2026-10-29
• CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
  articleas classification.key entities2026-10-29
• Over 41,000 DHS Employee Records Leaked Online
  articleas classification.key entities2026-10-29
• New Cisco firewall zero-day exploited to crash SSL VPN devices
  articleas classification.key entities2026-10-29
• Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
  articleas classification.key entities2026-10-29
• What is an AIBOM? AI bill of materials explained for security teams | Endor Labs
  articleas classification.key entities2026-10-29
• Hitachi Energy CoreTec Product
  advisoryas classification.key entities2026-10-28
• Hitachi Energy TRO600 series products
  advisoryas classification.key entities2026-10-28
• Siemens Mendix SAML Module
  advisoryas classification.key entities2026-10-28
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas classification.key entities2026-10-28
• Long-Hidden Flaws Patched in EPICS Research Facility Control Software
  articleas classification.key entities2026-10-28
• CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
  articleas classification.key entities2026-10-28
• The ADLC maturity model: 5 stages of agentic development security | Endor Labs
  articleas classification.key entities2026-10-28
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas classification.key entities2026-10-27
• The Impact of AI on CVEs: Industry Challenges
  articleas classification.key entities2026-10-27
• This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
  articleas classification.key entities2026-10-27
• Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
  articleas classification.key entities2026-10-27
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas classification.key entities2026-10-26
• Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
  advisoryas classification.key entities2026-10-26
• EPICS Base
  advisoryas classification.key entities2026-10-26
• CISA Publishes Significant Updates to ScubaGear and ScubaGoggles
  articleas classification.key entities2026-10-26
• Stolen AI Reasoning Could Help China Build Cheaper Rivals
  articleas classification.key entities2026-10-26
• PHP2Shell Exploitation Moves From Probes to Working Shells
  articleas classification.key entities2026-10-26
• CVE-2026-109618 / CVE-2026-109619 | NodeZero Rapid Response Check Now Available
  advisoryas classification.key entities2026-10-23
• Tech and Security Companies Respond to PHP2Shell Vulnerabilities
  articleas classification.key entities2026-10-22
• PHP2Shell Exploitation Started Days Before Patches
  articleas classification.key entities2026-10-22
• lee1981 (@lee1981b) on X
  articleas classification.key entities2026-10-21
• US Agencies Detail Incident Response Practices for Rogue AI Agents
  articleas classification.key entities2026-10-20
• The US orders every civilian agency to rip out DeepSeek, even tools built on it
  articleas classification.key entities2026-10-19
• Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities
  articleas classification.key entities2026-10-19
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.key entities2026-10-18
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.key entities2026-10-18
• Supermarket refrigeration hack hit 700 French stores, with fridges reaching 50°C
  articleas classification.key entities2026-10-15
• Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
  articleas classification.key entities2026-10-15
• Cisco Warns of Exploited Secure Email Gateway Vulnerability
  articleas classification.key entities2026-10-15
• Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.
  articleas classification.key entities2026-10-14
• ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
  articleas classification.key entities2026-10-14
• Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
  advisoryas classification.key entities2026-10-13
• Frequently Asked Questions About the Ivanti Connect Secure Authentication Bypass by Spoofing (CVE-2026-104935)
  advisoryas classification.key entities2026-10-13
• Executive Order 14028 SBOM Requirements: What to Comply With and How | Endor Labs
  articleas classification.key entities2026-10-12
• Guide to Implementing Software Supply Chain Security | Endor Labs
  articleas classification.key entities2026-10-12
• The OWASP Top 10 Gets Modernized | Endor Labs
  articleas classification.key entities2026-10-12
• Atlassian Jira, Confluence (and more) Arbitrary File Read Vulnerability (CVE-2026-21589)
  advisoryas classification.key entities2026-10-06
• The First 24 Hours: What Happens When Ransomware Lands
  writeupas classification.key entities2026-10-02
• Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure
  articleas classification.key entities2026-09-24
• NIST IR 8587: Protecting Tokens and Assertions from Forgery, Theft, and Misuse
  paperas classification.key entities2026-09-14
• What is VEX and Why Should I Care? | Blog | Endor Labs
  articleas classification.key entities2026-09-11
• SSDF Compliance and Attestation: A Practical Guide | Blog | Endor Labs
  articleas classification.key entities2026-09-11
• Incident Automation: Benefits, Tools & Best Practices
  articleas classification.key entities2026-09-09
• Software supply chain security requires decisions rather than defaults
  articleas classification.key entities2026-08-26
• Shai-Hulud was the best thing to happen to supply chain security
  articleas classification.key entities2026-08-24
• BOD 26-04 Just Changed How Federal Agencies Prioritize Vulnerabilities.
  articleas classification.key entities2026-08-20
• NIST NVD: V-etalon AI Enrichment Tool Announced After Audit Finds Backlog, Wasted Spend
  articleas classification.key entities2026-08-19
• npm-scan
  repoas classification.key entities2026-08-05
• FOSSA: CISA Releases the 2026 SBOM Minimum Elements
  articleas classification.key entities2026-07-31
• User Accounts and Privilege Management
  articleas tools2026-07-27It is written here as CISA: Zero Trust Maturity Model - official Zero Trust reference framework.
• AI-Assisted Vulnerability Management
  articleas classification.key entities2026-07-18
• Socket: White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered Vulnerabilities
  articleas classification.key entities2026-07-18
• FOSSA: Allan Friedman
  articleas classification.key entities2026-06-27
• Socket: Federal Audit
  articleas classification.key entities2026-06-04
• Dev Machine Guard Now Scans Extensions Across Every Modern IDE
  articleas classification.key entities2026-06-02
• Careful Adoption of Agentic AI Services
  advisoryas classification.key entities2026-05-13
• CAREFUL ADOPTION OF AGENTIC AI SERVICES FINAL
  advisoryas classification.key entities2026-05-06
• Hiding in Plain Sight with App Domain Manager Injection
  writeupas classification.key entities2026-02-19
• CISA: Critical Vulnerabilities in PHP Require Immediate Patching
  advisoryas classification.key entities
• ENISA Technical Advisory for Software Bill of Materials
  advisoryas classification.key entities
• #StopRansomware: SafePay Ransomware (AA26-293A)
  advisoryas classification.key entities
• CISA AA26-281A: Chinese Government-linked Actors Combine Automated and Hands-on Hacking Tools to Steal Data
  advisoryas classification.key entities
• CISA KEV: Fortinet FortiMail CVE-2026-104286 path traversal, actively exploited, no patch yet
  advisoryas classification.key entities
• Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
  advisoryas classification.key entities
• CISA KEV Catalog Additions — Check Point, Arista VeloCloud, F5 BIG-IP (Sept 22, 2026)
  advisoryas classification.key entities
• Careful Adoption of Agentic SI Services | CISA
  advisoryas classification.key entities
• CISA Adds Seven Known Exploited Vulnerabilities to Catalog | CISA
  advisoryas classification.key entities
• Known Exploited Vulnerabilities Catalog | CISA
  otheras classification.key entities
• Dev Machine Guard Now Supports Windows - StepSecurity
  articleas classification.key entities
• Megalodon: Mass GitHub Actions Secret Exfiltration Across 5,500+ Public Repositories - StepSecurity
  writeupas classification.technologies