Ivanti failed to issue an out-of-band patch for a high-severity defect in Ivanti Connect Secure after finding it in June. Attackers tracked as UTA0576 exploited the vulnerability in the wild starting October 1, chaining three zero-days to bypass authentication and execute code. Volexity researchers observed the threat actor stealing credentials and dumping Active Directory metadata…
Cisco has alerted customers that hackers are actively exploiting a critical vulnerability in its Secure Email Gateway product. The flaw, identified as CVE-2026-76519, allows unauthenticated remote attackers to write arbitrary files and execute commands with root privileges. The issue affects the Advanced Malware Protection feature when specific conditions regarding file reputation services and Content Scanner…
October 16, 2026 By Sara Friedman / June 4, 2026 Implementation of President Trump’s latest artificial intelligence order will bring up several questions on how specific taskings will be carried out in practice, according to a Venable post which raises coordination concerns over participation in a…
Acting CISA Director Nick Andersen says upcoming tabletop exercises will help critical infrastructure operators test their ability to recover from cyberattacks and maintain essential services.
The U.S. Cybersecurity and Infrastructure Security Agency warned security teams to urgently fix a high-severity authentication bypass in Ivanti Connect Secure. Tracked as CVE-2026-104935, the vulnerability has been exploited in the wild since at least October 1st, allowing remote attackers to execute arbitrary commands without user interaction. Ivanti released updated versions on Tuesday to address…
The Treasury Inspector General for Tax Administration rated the IRS information security program ineffective for the second consecutive year in a report dated September 15, 2026. The watchdog found that six of seven sampled systems had critical vulnerabilities that were not fixed within the required 30-day window. Additionally, 841 privileged service accounts across 313 systems…
Chris Butera, acting executive assistant director for cybersecurity at CISA, discussed how the agency is preparing federal systems for AI-fueled threats. CISA issued a binding operational directive requiring agencies to patch the highest risk vulnerabilities within three days starting in December. The agency is also supporting the Gold Eagle program to manage the surge in…