9 stories tagged #CISA

  1. Critical Vulnerabilities Expose 7,000 Langflow Servers to Active Cyberattacks
    tech

    Critical Vulnerabilities Expose 7,000 Langflow Servers to Active Cyberattacks

    CISA warns that 7,000 exposed Langflow instances face active exploitation via critical RCE flaws. Attackers are weaponizing vulnerabilities in the AI framework within hours of disclosure.

    4d ago 1 min read
  2. Microsoft Threatens Security Researcher Over Windows Zero-Day Exploits
    tech

    Microsoft Threatens Security Researcher Over Windows Zero-Day Exploits

    Microsoft’s Digital Crimes Unit weighs legal action against researcher Nightmare Eclipse for releasing six Windows zero-day exploits.

    3w ago 1 min read
  3. CISA Leaked Admin Cloud Keys and Plaintext Passwords on GitHub for Six Months
    tech

    CISA Leaked Admin Cloud Keys and Plaintext Passwords on GitHub for Six Months

    A contractor's public repo exposed 844MB of sensitive data including AWS GovCloud credentials, Kubernetes configs, and CI/CD logs for half a year.

    last mo. 1 min read
  4. Copy Fail Vulnerability Puts Crypto Infrastructure at Risk
    tech

    Copy Fail Vulnerability Puts Crypto Infrastructure at Risk

    A Linux kernel bug discovered since 2017, Copy Fail, threatens crypto exchanges and validators by enabling root access.

    last mo. 1 min read
  5. US Officials Consider 3-Day Deadline to Fix Critical Flaws Amid AI Hacking Fears
    tech

    US Officials Consider 3-Day Deadline to Fix Critical Flaws Amid AI Hacking Fears

    Cybersecurity officials propose slashing fix deadlines from two weeks to three days as AI-powered hacking accelerates threats.

    last mo. 2 min read
  6. White House Proposes Major Budget Cut for Cybersecurity Agency
    tech

    White House Proposes Major Budget Cut for Cybersecurity Agency

    The White House seeks to slash CISA's budget by $707 million, refocusing its mission on core federal cybersecurity operations.

    2mo ago 1 min read
  7. Iranian Hackers Exploit Stryker's Own Tools Against It
    tech

    Iranian Hackers Exploit Stryker's Own Tools Against It

    Iran-backed hackers targeted critical U.S. infrastructure using compromised security tools, including Stryker's CrowdStrike EDR platform.

    2mo ago 1 min read
  8. FBI Warns Russian Hackers Target Messaging App Users Through Sophisticated Phishing
    tech

    FBI Warns Russian Hackers Target Messaging App Users Through Sophisticated Phishing

    U.S. agencies alert that Russia-linked actors compromised thousands of Signal accounts. High-profile targets face social engineering attacks, though app encryption remains intact.

    3mo ago 1 min read