2024-03-28 Post a Comment

CISA publishes 447-page draft of cyber incident reporting rule

By-Jonathan Greig: The nationâ€™s top cybersecurity agency has unveiled the initial draft of a new rule detailing how critical infrastructure organizations need to report cyberattacks to the federal government. The Cybersecurity and Infrastructure Security Agency (CISA)Â postedÂ the 447-page set of regulations under the Cyber Incident Reporting for Critical Infrastructure Act to the Federal Register, allowing the public to comment on it. The law mandating the rulesÂ was passed in 2022Â and is intended […]

alt=Ivanti's new cloud-based platform revolutionizes data management and security. Stay in control with ease.

Cyber security

2024-02-02 Post a Comment

CISA Sets 48-Hour Deadline for Removal of Insecure Ivanti Products

By Ryan Naraine In an unprecedented move, CISA is demanding that federal agencies disconnect all instances of Ivanti Connect Secure and Ivanti Policy Secure products within 48 hours. In an unprecedented move, the US governmentâ€™s cybersecurity agency CISA is demanding that federal agencies disconnect all instances of Ivanti Connect Secure and Ivanti Policy Secure products within 48 hours. â€œAs soon as possible and no later than 11:59PM on Friday February […]

Cyber security

2024-01-10 Post a Comment

CISA Flags 6 Vulnerabilities – Apple, Apache, Adobe , D-Link, Joomla Under Attack

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasÂ addedÂ six security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. This includesÂ CVE-2023-27524Â (CVSS score: 8.9), a high-severity vulnerability impacting the Apache Superset open-source data visualization software that could enable remote code execution. It was fixed in version 2.1. Details of the issueÂ first came to lightÂ in April 2023, with Horizon3.ai’s Naveen Sunkavally describing it as a “dangerous default configuration […]