Tag: CISA
Forged DNA files fool lab software as Thermo Fisher ships signatures
A researcher used AI to alter DNA evidence files in about 45 minutes, prompting Thermo Fisher to add digital signatures…
SharePoint zero-day added to CISA KEV as exploitation mounts
CISA warns of active exploitation of CVE-2026-58644 and three other SharePoint flaws, urging federal agencies to patch within a week.
White House launches Gold Eagle AI vulnerability clearinghouse
The Treasury-led Gold Eagle program uses frontier AI models to accelerate vulnerability discovery and coordinated patching.
SonicWall SMA1000 zero-days exploited in the wild for ransomware access
Two chained vulnerabilities give attackers full remote code execution on unpatched SMA 1000 appliances.
CISA publishes forensic report on May credential leak from contractor GitHub account
CISA publishes forensic analysis of May 2026 credential leak from contractor GitHub account
CISA contractor accidentally leaks AWS credentials on personal GitHub account
A CISA contractor accidentally exposed AWS access keys and admin credentials on a personal GitHub account, sparking a major security…
CISA Publishes Post Incident Analysis After Contractor Leaks AWS GovCloud Credentials
A contractor's accidental exposure of AWS GovCloud credentials in a public GitHub repository prompted CISA to release a detailed after…
Linux Kernel Zero Day Copy Fail Lets Attackers Gain Root Access on Major Distributions
The flaw was introduced through three separate kernel changes made in 2011, 2015, and 2017, none of which appeared malicious…