Known Exploited Vulnerabilities Catalog - CISA
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains …
UPDATE: Microsoft Releases Guidance on Exploitation of ... - CISA
Aug 6, 2025 · . For more information see MAR-251132.c1.v1 Exploitation of SharePoint Vulnerabilities and CISA Releases Malware Analysis Report Associated with Microsoft …
Microsoft Releases Guidance on High-Severity Vulnerability (CVE …
Aug 12, 2025 · . CISA is aware of the newly disclosed high-severity vulnerability, CVE-2025-53786 , that allows a cyber threat actor with administrative access to an on-premise Microsoft …
Threat Actors Exploit Atlassian Confluence CVE-2023-22515 for
Oct 16, 2023 · SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and Multi-State Information Sharing and Analysis Center (MS …
Top Routinely Exploited Vulnerabilities - CISA
Aug 20, 2021 · The NCSC offers 10 Steps to Cyber Security , providing detailed guidance on how medium and large organizations can manage their security. On vulnerabilities specifically, the …
Vulnerability Disclosure Policy (VDP) Platform - CISA
The VDP Platform enables agencies to receive actionable vulnerability information and collaborate with the public to improve the security of their internet-accessible systems.
Secure by Design Alert: Eliminating Buffer Overflow Vulnerabilities
Feb 12, 2025 · This Secure by Design Alert is part of an ongoing series aimed at advancing industry-wide best practices to eliminate entire classes of vulnerabilities during the design and …
Cybersecurity Alerts & Advisories | CISA
Dec 19, 2025 · Use when: You need immediate awareness of a high-priority threat or vulnerability and a rapid response. Cybersecurity Advisory: Provides detailed information on cyber threats, …
Secure by Design Alert: Eliminating Cross-Site Scripting ...
Sep 18, 2024 · Malicious Cyber Actors Use Cross-Site Scripting Vulnerability to Compromise Systems CISA and FBI are releasing this Secure by Design Alert as a part of our ongoing …
Microsoft Releases Out-of-Band Security Update to Mitigate
Oct 29, 2025 · Microsoft released an update to address a critical remote code execution vulnerability impacting Windows Server Update Service (WSUS) in Windows Server (2012, …