#cisa — Public Fediverse posts

Attackers are exploiting a critical MLflow bug to reach internal systems and cloud metadata, putting cloud secrets at risk. CISA has added CVE-2026-64849 to its KEV catalog.

Listen/Read: https://hackread.com/attackers-exploit-critical-mlflow-ai-platform-flaw/

#CyberSecurity #MLflow #AI #Vulnerability #CISA

#CISA warns of hackers exploiting critical #MLflow vulnerability

https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-critical-mlflow-vulnerability/

#cybersecurity

This was posted yesterday.

Press release: CISA Releases Foundational, Flexible Guidance to Help Federal Agencies Implement Effective Logging, Visibility and Operational Standards https://www.cisa.gov/news-events/news/cisa-releases-foundational-flexible-guidance-help-federal-agencies-implement-effective-logging

The document: https://www.cisa.gov/resources-tools/resources/logging-reference-architecture #CISA #infosec

CISA confirmed active exploitation of CVE-2026-33824, an unauthenticated Windows IKE double-free flaw patched in April, ordering federal agencies to remediate within three days.

#CVE202633824 #Windows #CISA #IKE #Vulnerability

https://meterpreter.org/cve-2026-33824-windows-ike-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CISA has added two known vulnerabilities to the KEV catalogue.

- CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529

- CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA

Yesterday:

Cisco:

CRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability

#CISA : #Medusa #Ransomware Hit Over 500 Critical #Infrastructure Orgs
#security

https://it.slashdot.org/story/26/08/19/1729241/cisa-medusa-ransomware-hit-over-500-critical-infrastructure-orgs?utm_source=rss1.0mainlinkanon&utm_medium=feed

CISA, the FBI, and HHS updated their joint advisory on Medusa ransomware, reporting over 500 critical infrastructure victims and detailing its RaaS and IAB-driven operations.

#MedusaRansomware #CISA #Ransomware #CriticalInfrastructure #RaaS

https://meterpreter.org/medusa-ransomware-500-victims-cisa-advisory/?utm_source=mastodon&utm_medium=jetpack_social

🚨 SIGINT // Cybersecurity Watch — 2026-08-19
CISA adds actively exploited Ray AI framework flaw to KEV catalog, enabling browser-based RCE. Patch now.
https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html
#CVE #InfoSec #CISA #AIsecurity

CISA Warns Medusa Ransomware Hackers Steal Data, Kill Security Tools, and Encrypt Entire Networks

Indicators extracted from public reporting. Source: https://cybersecuritynews.com/medusa-ransomware/

Pulse ID: 6a849ccd43fe79ee679c412a
Pulse Link: https://otx.alienvault.com/pulse/6a849ccd43fe79ee679c412a
Pulse Author: CyberHunter_NL
Created: 2026-08-18 17:56:29

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CISA #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #RansomWare #bot #CyberHunter_NL

Medusa Ransomware Advisory

CISA, FBI, and HHS urge organizations to

Mitigate known vulnerabilities by ensuring operating systems, software, and firmware are patched and up to date within a risk-informed timeframe.

Segment networks to restrict lateral movement from initially infected devices to other devices in the organization.

Filter network traffic by preventing unknown or untrusted origins from accessing remote services on internal systems.

https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-071a

#Cybersecurity #CISA

CISA has added one known vulnerability to the KEV catalogue.

- CVE-2025-62593: Ray-Project Ray Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-62593 #CISA #infosec #vulnerability

CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts

The resources include a Getting Started Guide and an Implementation Guide.

Press release announcing the launch:
https://www.cisa.gov/news-events/news/cisa-unveils-new-cybersecurity-resources-k-12-schools-and-districts

Cybersecurity Foundations link:
https://www.cisa.gov/topics/cybersecurity-best-practices/K12cybersecurity/foundations

#EdSec #CISA #resource #cybersecurity

@douglevin @funnymonkey

#Opensource Security im Fokus der US-Regierung: Die #US-Cybersicherheitsbehörde #CISA hat einen #Leitfaden vorgelegt, der Bundesbehörden beim sicheren Umgang mit #OSS unterstützen soll.

Die "Open Source Software: Security Principles and Practices" gehen auf eine unter Präsident Biden initiierte und von Trump angepasste Anordnung zurück und zeigt, wie Behörden die #Vertrauenswürdigkeit von Projekten prüfen, Komponenten erfassen und mit #Sicherheitslücken umgehen sollen:

https://www.cisa.gov/sites/default/files/2026-07/open-source-software-security-principles.pdf

Gunra R-ware

Prioritize patching known exploited vulnerabilities in internet-facing systems, including virtual private network (VPN) gateways and remote desktop protocol (RDP)-exposed infrastructure.

Implement and test offline, immutable backups stored in a physically separate, segmented location to ensure recoverability without ransom payment.

Segment networks to restrict lateral movement from an initially compromised device to other systems in the organization.

#CISA #Gunra #Cybersecurity

Mit dem #CRA rückt die Transparenz in der #Software-#Lieferkette verbindlich in den Fokus (außer)europäischer Unternehmen, denn #SBOM werden künftig verpflichtend.

Passend dazu hat die US-Behörde #CISA gemeinsam mit dem #BSI und weiteren internationalen Partnern kürzlich nun eine überarbeitete Fassung der sogenannten "Minimum Elements for a Software Bill of Materials" veröffentlicht und damit die ursprüngliche Version aus dem Jahr 2021 aktualisiert:

https://www.cisa.gov/resources-tools/resources/2026-minimum-elements-software-bill-materials-sbom #cybersecurity

Weekly output: generative AI in enterprises, Trump cybersecurity policy (x2), Docusign’s designs for AI, AT&T’s kid-optimized tablet

I wrapped up this year’s fourth and final business trip to Las Vegas on Friday, and now I’m looking forward to having almost five months without the City of Bad Decisions in my schedule before CES inevitably draws me back there.

8/4/2026: The Generative AI Playbook: Setting Your Enterprise Up for Success, Ai4

The first of two panels I moderated at this conference for artificial-intelligence professionals (or aspiring professionals) was budgeted for 45 minutes. That could have been an intimidating amount of time to fill. But with four erudite and outgoing people on stage with me–Pankaj Jain, CIO for international operations at General Motors Financial; Murad Dikeidek, head of cybersecurity at UI Health; Max Gokhman, head of artificial intelligence and digital asset solutions at Franklin Templeton; and Kathryn Harrison, global vice president for strategy and business operations at Concentrix–the time flew by fast enough that I had to leave out a question or two in my outline. For a recap, see my friend Shashi Bellamkonda’s recap on his blog.

8/5/2026: Three takeaways from Black Hat’s opening keynote, PCMag

Previous years of Black Hat didn’t feature any main-stage programming on the afternoon and evening before its show floor opens, but this year’s event had an onstage interview of national cyber director Sean Cairncross followed by a panel featuring three other information-security higher-ups from Washington: Nick Andersen, acting director of the Cybersecurity & Infrastructure Security Agency; Katherine Sutton, assistant secretary for cyber policy and principal advisor for cyber policy at the Department of Defense; and Brett Leatherman, assistant director of the FBI’s cyber division. I took extensive notes, then met up with PCMag’s social-media manager Caroline Gilbert to do a quick standup video that she posted to PCMag’s Instagram (along with my client’s accounts on X, TikTok, Threads and Facebook later that night.

8/5/2026: US Cyber Director Promises Not to ‘Strangle’ Industry With Regulations, PCMag

Writing up a post on those opening talks–one that focused on the things that Cairncross left out of his banter–took a little longer. It did help that Wednesday didn’t involve any commuting up and down the Strip for me.

8/6/2026: What It Takes to Build an Agent Platform for Customers, Ai4

I didn’t get asked to do this second panel at Ai4 until the week before the conference. But my Black Hat schedule looked open enough Thursday morning, and the topic–how Docusign has put AI to work–looked interesting enough for me to take the gig and its added speaking fee. And then I saw Tabrez Mohammed, VP of AI at that firm, give some detailed and actionable advice that I hope had attendees taking careful notes.

8/6/2026: AT&T Adds a New Kid-Optimized 5G Android Tablet to Its Lineup, PCMag

One of my colleagues asked Monday if I could write up this announcement we’d gotten in advance from AT&T PR. I said I could but warned that the odds were against my having copy filed before AT&T would publish this news Tuesday morning… which was a good thing, because the advance copy of the release had one data point about this tablet’s battery life exceedingly wrong. We updated the post Saturday to add a couple of specs about this device’s battery that did make the final version of the press release.

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

Indicators extracted from public reporting. Source: https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html

Pulse ID: 6a76e1671cedd1a73cd47665
Pulse Link: https://otx.alienvault.com/pulse/6a76e1671cedd1a73cd47665
Pulse Author: CyberHunter_NL
Created: 2026-08-08 07:57:27

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CISA #CyberSecurity #HTML #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

#CISA warns of hackers exploiting #Langflow, #Ncentral, #Apache #Tomcat flaws

https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-langflow-n-central-apache-tomcat-flaws/

#cybersecurity

Authentication Bypass Vulnerability in N-central Exploited In-The-Wild

An authentication bypass vulnerability, CVE-2026-18577, affecting N-able N-central Remote Monitoring and Management platform has been actively exploited since August 1, 2026. This vulnerability emerged after an incomplete fix for a previous authentication bypass issue CVE-2026-18556. The flaw allows remote unauthenticated attackers to bypass authentication mechanisms and gain administrative control over vulnerable N-central servers. Attackers have exploited this vulnerability to leverage the platform's Take Control functionality for remote access to managed endpoints and deployed Cloudflare Tunnel (cloudflared) to establish persistent remote access. Given that N-central is widely used by managed service providers and enterprise IT teams with extensive administrative privileges, successful compromise provides attackers an efficient pathway to compromise downstream managed systems. CISA added this vulnerability to its Known Exploited Vulnerability catalog on August 3, 2026.

Pulse ID: 6a74564f0edb6c8f24fda004
Pulse Link: https://otx.alienvault.com/pulse/6a74564f0edb6c8f24fda004
Pulse Author: AlienVault
Created: 2026-08-06 09:39:27

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CISA #Cloud #CyberSecurity #Endpoint #InfoSec #OTX #OpenThreatExchange #RAT #SMS #Vulnerability #bot #AlienVault