logo

CISA Cybersecurity Advisories

ID: 2be8d77e-54bf-5afd-a1ab-cb70f091035f

STIX ID: identity--2be8d77e-54bf-5afd-a1ab-cb70f091035f

Feed Type: rss

Earliest post: 2022-11-17

Latest post: 2026-04-21

CISA’s Alerts hub is the agency’s central page for publishing timely cybersecurity alert notices on major threats, incidents, and risks, with practical mitigation advice and links to related guidance.

01/01/2020
06/04/2026
Title Date Published Describes IncidentAuthorVisible
Defending Against China-Nexus Covert Networks of Compromised Devices2026-04-21TrueCISATrue
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure2026-04-06TrueCISATrue
Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure2025-12-05TrueCISATrue
CISA Shares Lessons Learned from an Incident Response Engagement2025-09-22TrueCISATrue
Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System2025-08-25TrueCISATrue
CISA and USCG Identify Areas for Cyber Hygiene Improvement After Conducting Proactive Threat Hunt at US Critical Infrastructure Organization2025-07-29TrueCISATrue
#StopRansomware: Interlock2025-07-21TrueCISATrue
Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider2025-06-12TrueCISATrue
Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations2025-05-20TrueCISATrue
Russian GRU Targeting Western Logistics Entities and Technology Companies2025-05-12TrueCISATrue
Fast Flux: A National Security Threat2025-04-01TrueCISATrue
#StopRansomware: Medusa Ransomware2025-03-11TrueCISATrue
#StopRansomware: Ghost (Cring) Ransomware2025-02-19TrueCISATrue
Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications2025-01-15TrueCISATrue
2023 Top Routinely Exploited Vulnerabilities2024-11-08TrueCISATrue
Iranian Cyber Actors’ Brute Force and Credential Access Activity Compromises Critical Infrastructure Organizations2024-09-30TrueCISATrue
CISA Adds One Known Exploited Vulnerability to Catalog2024-09-19TrueCISATrue
#StopRansomware: RansomHub Ransomware2024-08-29TrueCISATrue
Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations2024-08-23TrueCISATrue
Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization2024-08-02TrueCISATrue
CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth2024-07-09TrueCISATrue
People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action 2024-07-08TrueCISATrue
#StopRansomware: Black Basta2024-05-10TrueCISATrue
#StopRansomware: Akira Ransomware2024-04-17TrueCISATrue
#StopRansomware: Phobos Ransomware2024-02-26TrueCISATrue
SVR Cyber Actors Adapt Tactics for Initial Cloud Access2024-02-23TrueCISATrue
Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways2024-02-21TrueCISATrue
Threat Actor Leverages Compromised Account of Former Employee to Access State Government Organization2024-02-14TrueCISATrue
Known Indicators of Compromise Associated with Androxgh0st Malware2024-01-12TrueCISATrue
#StopRansomware: ALPHV Blackcat2023-12-19TrueCISATrue
Enhancing Cyber Resilience: Insights from the CISA Healthcare and Public Health Sector Risk and Vulnerability Assessment2023-12-13TrueCISATrue
Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally2023-12-12TrueCISATrue
#StopRansomware: Play Ransomware2023-12-11TrueCISATrue
New Exploits for Unsecure SAP Systems2022-11-17TrueCISATrue
Microsoft Operating Systems BlueKeep Vulnerability2022-11-17TrueCISATrue
Critical Vulnerabilities in Microsoft Windows Operating Systems2022-11-17TrueCISATrue
Potential for Iranian Cyber Response to U.S. Military Strike in Baghdad2022-11-17TrueCISATrue
Continued Exploitation of Pulse Secure VPN Vulnerability2022-11-17TrueCISATrue
Dridex Malware2022-11-17TrueCISATrue
Publicly Available Tools Seen in Cyber Incidents Worldwide2022-11-17TrueCISATrue
SamSam Ransomware2022-11-17TrueCISATrue
DNS Infrastructure Hijacking Campaign2022-11-17TrueCISATrue

1–42 of 42