CISA Binding Operational Directive 26-02 mandates federal agencies to identify and decommission end-of-support edge devices within 18 months to mitigate cyber risks.
CISA acting director Madhu Gottumukkala uploaded sensitive contracting documents into a public version of ChatGPT, prompting internal cybersecurity warnings and a DHS-level review of potential risks.
Fortinet has issued security updates for a critical FortiOS authentication bypass flaw under active exploitation, affecting FortiOS, FortiManager, and FortiAnalyzer, prompting urgent mitigation guidance and CISA action.
CISA adds four vulnerabilities to its KEV catalog citing active exploitation while security firms detail ongoing abuse of critical Citrix NetScaler flaws leaking sensitive data.
CISA issues Shields Up cybersecurity alert, advising home users to update devices, strengthen passwords, remain vigilant against phishing, and maintain offline backups.
CISA has added security flaws in Microsoft Office PowerPoint and HPE OneView to its KEV catalog, warning of active exploitation and urging agencies to apply fixes by January 28, 2026.
CISA adds React2Shell to its KEV catalog following active exploitation of CVE-2025-55182, impacting React Server Components and frameworks including Next.js and RedwoodSDK.
U.S. CISA issues alert on BRICKSTORM, a Golang-based backdoor targeting VMware vSphere and Windows systems, used by China-linked groups for persistent network access and data exfiltration.
Risk Associates advances cybersecurity education by awarding ISACA certification reimbursements to NED University students, reinforcing its commitment to developing future cybersecurity professionals.
InnoVista introduces a fully funded 4-month cybersecurity bootcamp in collaboration with PKCERT, ISACA Karachi, NUST, and PAFLA. The program includes hands-on labs, expert-led sessions, and job placement support.
