Tens of thousands of IPs vulnerable to Fortinet flaw dubbed ‘must patch’ by feds

The Shadowserver Foundation put the figure at around 87,000 for a vulnerability rated as critical and first discovered in February.

The post Tens of thousands of IPs vulnerable to Fortinet flaw dubbed ‘must patch’ by feds appeared first on CyberScoop.

Continue reading Tens of thousands of IPs vulnerable to Fortinet flaw dubbed ‘must patch’ by feds

What’s new from this year’s Counter Ransomware Initiative summit, and what’s next

Action plans, different kinds of meetings and more have all been in the mix, top administration officials told CyberScoop.

The post What’s new from this year’s Counter Ransomware Initiative summit, and what’s next appeared first on CyberScoop.

Continue reading What’s new from this year’s Counter Ransomware Initiative summit, and what’s next

Critical Ivanti Endpoint Manager flaw exploited (CVE-2024-29824)

CVE-2024-29824, an unauthenticated SQL Injection vulnerability in Ivanti Endpoint Manager (EPM) appliances, is being exploited by attackers, the Cybersecurity and Infrastructure Security Agency has confirmed by adding the bug to its Known Exploited Vul… Continue reading Critical Ivanti Endpoint Manager flaw exploited (CVE-2024-29824)

CISA warns hackers targeting industrial systems with “unsophisticated methods” as claims made of Lebanon water hack

The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that hackers continue to be capable of compromising industrial control systems (ICS) and other operational technology (OT) using “unsophisticated methods” – suggesting that much … Continue reading CISA warns hackers targeting industrial systems with “unsophisticated methods” as claims made of Lebanon water hack

Exclusive: House Homeland Security chair releases, pushes forth cyber workforce bill

CyberScoop has the full details of the legislation, under which Rep. Mark Green wants to establish an ROTC-like program and more.

The post Exclusive: House Homeland Security chair releases, pushes forth cyber workforce bill appeared first on CyberScoop.

Continue reading Exclusive: House Homeland Security chair releases, pushes forth cyber workforce bill

OIG audit calls for more clarity from CISA, DHS on disinformation mission 

The report gave CISA high marks for its election security work but raised questions about a lack of strategic guidance from DHS.

The post OIG audit calls for more clarity from CISA, DHS on disinformation mission  appeared first on CyberScoop.

Continue reading OIG audit calls for more clarity from CISA, DHS on disinformation mission 

New cybersecurity advisory highlights defense-in-depth strategies

In 2023, the Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team operation against an FCEB (Federal Civilian Executive Branch) organization. In July 2024, CISA released a new CSA that detailed the findings of this assessment along with key findings relevant to the security of the organization’s network. One of the interesting findings of […]

The post New cybersecurity advisory highlights defense-in-depth strategies appeared first on Security Intelligence.

Continue reading New cybersecurity advisory highlights defense-in-depth strategies

CISA chief AI officer follow-up: Current state of the role (and where it’s heading)

At the beginning of August, CISA announced that it had appointed Lisa Einstein, Senior Advisor of its artificial intelligence division, as its new chief AI officer. This announcement came following several new initiatives in the last couple of years focused on gaining a clearer understanding of the potential security impacts of AI. With the National […]

The post CISA chief AI officer follow-up: Current state of the role (and where it’s heading) appeared first on Security Intelligence.

Continue reading CISA chief AI officer follow-up: Current state of the role (and where it’s heading)