CISA

8 articles

ThreatsIndustrial, OT & IoTCritical
CISA Discloses Critical Vulnerabilities in Rockwell Automation Logix Controllers & 1756 Modules
CISA alerted industrial manufacturing operators to severe vulnerabilities in Rockwell Automation Logix controllers and 1756 communication modules allowing PLC tampering.
Mei-Lin Chen14 Sep 2026, 20:00 IST7 min read
ThreatsEnergy & UtilitiesHigh
CISA Alerts Critical Energy Sector to High-Severity Flaws in AVEVA Pipeline Integrity Monitor
CISA issued an energy sector ICS advisory warning of memory corruption and authentication defects in AVEVA Pipeline Integrity Monitor supervising oil and gas transport.
Daniel Okafor14 Sep 2026, 19:45 IST8 min read
ThreatsHealthcare & PharmaBreaking
CISA Warns of Critical RCE Flaws in NextGen Mirth Connect Threatening Hospital HL7 Pipelines
CISA published an urgent medical ICS advisory detailing critical RCE vulnerabilities in NextGen Mirth Connect integration engines routing hospital clinical records.
Priya Raman14 Sep 2026, 19:30 IST8 min read
IndustryGovernment & DefenceHigh
CISA Finalizes CIRCIA Mandate: 72-Hour Incident and 24-Hour Ransomware Reporting Enforced
CISA issued its landmark final rule under CIRCIA, legally mandating critical infrastructure operators report major cyber incidents within 72 hours and ransom payments within 24 hours.
Tom Verhoeven14 Sep 2026, 18:30 IST8 min read
ResearchTechnology, Cloud & SaaSHigh
CISA, NSA, and FBI Warn Critical Infrastructure of Advanced AI Model Extraction Campaigns
A joint cybersecurity advisory from CISA, NSA, and FBI alerts defense contractors and cloud vendors to sophisticated state-sponsored AI model extraction campaigns.
Daniel Okafor14 Sep 2026, 18:15 IST9 min read
InsightsGovernment & Defence
CISA BOD 26-04 ends CVSS-ordered patching: the four questions that replace it
CISA's Binding Operational Directive 26-04 drops CVSS from federal patch prioritisation, replacing it with four yes/no questions and a sixteen-row deadline table.
Priya Raman11 Sep 2026, 13:45 IST7 min read
ResearchEducation & AcademiaHigh
Eight new ransomware brands in one week: why tracking group names has stopped working
One tracker logged 315 leak-site posts from 40 groups in a single August week, eight of them new. Brand-based detection cannot keep pace. Here is what to instrument instead.
Daniel Okafor10 Sep 2026, 19:15 IST6 min read
ThreatsGovernment & DefenceHigh
Gunra ransomware: what AA26-222A actually gives your detection engineers
Six agencies detailed Gunra's Fortinet entry, its forticloud-sync backdoor and an MFA bypass planted in a VDI server. Here is how to turn that into detection coverage.
Daniel Okafor8 Sep 2026, 21:00 IST6 min read