Dark Reading
1 year, 11 months ago
CISA Publishes Resiliency Playbook for Critical Infrastructure
The manual provides guidance on how to improve the resiliency of critical infrastructure.
Security news aggregator
Latest coverage for CISA
Stay informed on the latest CISA updates, guidelines, and alerts critical for robust information security and cyber threat prevention.
4
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Cybersecurity and Infrastructure Security Agency (CISA) is the U.S. Department of Homeland Security agency for reducing cyber and physical risks to critical infrastructure and federal civilian networks. Created by the 2018 CISA Act, it works with government and industry, publishes alerts and guidance, and coordinates assistance during significant incidents. Its direct federal-network role chiefly covers the Federal Civilian Executive Branch, including .gov; private-sector engagement is often voluntary or sector-specific.
Practitioners use CISA advisories and the Known Exploited Vulnerabilities catalog to prioritize patching where exploitation has been observed, and consult applicable directives and incident-response guidance. CISA supports vulnerability reporting and promotes controls such as multifactor authentication, logging, and tested recovery. A CISA alert is an actionable risk signal, not proof every organization is affected; teams should verify product, version, exposure, and obligations.
Showing 4 most recent headlines
Filtered view
Info Security Magazine
2 years ago
CISA: Patch Critical GeoServer GeoTools Bug Now
CISA has told federal agencies to patch a critical GeoServer GeoTools vulnerability under active exploitation
The Hacker News
2 years ago
Threat Prevention & Detection in SaaS Environments - 101
Identity-based threats on SaaS applications are a growing concern among security professionals, although few have the capabilities to detect and respond to them. According to the US Cybersecurity and Infrastructure Security Agency (CISA), 90% of all cyberattacks begin with phishing, an identity-based threat. Throw in attacks that use stolen credentials, over-provisioned accounts, and
The Hacker News
2 years ago
CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting OSGeo GeoServer GeoTools to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation