The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed active exploitation of two critical PHP2Shell remote code execution (RCE) flaws, adding them to its Known Exploited Vulnerabilities (KEV) catalogue.
The US Cybersecurity and Infrastructure Security Agency has outlined its CISA 2030 strategy, establishing a proactive model focused on rapid threat response and critical infrastructure resilience.
A new joint guide from NIST, CISA, and the NSA highlights that identity records are the primary evidence when autonomous AI agents act outside their intended parameters.
CISA has added critical vulnerabilities in Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities catalogue following evidence of active exploitation.
Federal agencies report that the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024.
