agency of the United States Department of Homeland Security
F5 releases out-of-band patches for critical NGINX vulnerabilities: F5 has released out-of-band security patches to address multiple NGINX web server flaws ...
bleepingcomputer.com/news/security/f5-releases-out-of-band-patches-for-critical-nginx-vulnerabilities/
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to ...
bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day/
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks: Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day ...
bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks/
SAP warns of maximum severity OAuth2 SSRF security flaw: SAP has addressed 20 security flaws across multiple products in its October 2026 security updates ...
bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-oauth2-ssrf-security-flaw/
Brain Drain Is a Bigger Threat to National Cybersecurity Than AI: What good is investing in offense if you’ve hobbled your own defense?
gizmodo.com/brain-drain-is-a-bigger-threat-to-national-cybersecurity-than-ai-2000778508
krebsonsecurity.com Oct 14
Microsoft Patches More Than 1,400 Security Flaws – Krebs on Security
krebsonsecurity.com/2026/10/microsoft-patches-more-than-1400-security-flaws/
GitLab warns of max severity code execution vulnerability: GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular ...
bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/
An Engineer Extorted His Company for $750,000. A Rookie Cybersecurity Mistake Sent Him to Federal Prison
inc.com/chloe-aiello/an-engineer-extorted-his-company-for-750000-a-rookie-cybersecurity-mistake-sent-him-to-federal-prison/91416330
Trump allies could use midterms ‘counting window’ to disrupt results, experts warn
theguardian.com/us-news/2026/sep/27/trump-midterms-counting-window
dlvr.it Oct 05
Citrix NetScaler security snafus get even worse amid more 0-day reports: The new vuln, CVE-2026-88779, is a memory overflow bug that leads to denial of service
theregister.com/security/2026/10/05/citrix-netscaler-security-snafus-get-even-worse-amid-more-0-day-reports/5301232
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical ...
bleepingcomputer.com/news/security/cisa-warns-of-critical-pre-auth-rce-flaw-in-mikrotik-routeros/
OpenAI Agents Invaded SEC, Commerce Department Websites: Plus: Other OpenAI missteps; CISA’s election-security advice; Kiteworks apparently not hacked
wsj.com/pro/cybersecurity/openai-agents-invaded-sec-commerce-department-websites-d983a702
Paid articlePaywall CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks: The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are ...
bleepingcomputer.com/news/security/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks/
CISA alerts of active exploitation of three Linux kernel flaws: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are ...
bleepingcomputer.com/news/security/cisa-alerts-of-active-exploitation-of-three-linux-kernel-flaws/
Check Point warns of Management Server zero-day exploited in attacks: Check Point Software released emergency hotfixes to address a critical Security Management ...
bleepingcomputer.com/news/security/check-point-patches-management-server-zero-day-exploited-in-attacks/
NIST Finalizes Guidelines on Protecting Online Identity and Access Tokens From Misuse
nist.gov/news-events/news/2026/09/nist-finalizes-guidelines-protecting-online-identity-and-access-tokens
Cisco warns of max severity ISE zero-day exploited in attacks: Cisco has released security updates to address a maximum-severity Identity Services Engine ...
bleepingcomputer.com/news/security/cisco-warns-of-identity-service-engine-zero-day-exploited-in-attacks/
CISA: Critical VMware RCE flaw now exploited by ransomware gangs: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ...
bleepingcomputer.com/news/security/cisa-critical-vmware-vcenter-rce-flaw-now-exploited-by-ransomware-gangs/
ConnectWise warns of new ScreenConnect flaw without patch: ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access ...
bleepingcomputer.com/news/security/connectwise-warns-of-new-screenconnect-flaw-without-patch/
CISA: WatchGuard RCE flaw now exploited in ransomware attacks: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware ...
bleepingcomputer.com/news/security/cisa-watchguard-rce-flaw-now-exploited-in-ransomware-attacks/
SAP warns of maximum severity 'OVERPASS' kernel vulnerability: SAP has addressed 20 vulnerabilities across multiple products in its September 2026 ...
bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-overpass-kernel-vulnerability/
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks: Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a ...
bleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks/
Democrats press DHS on election security funding: Two congressional Democrats are pressing Department of Homeland Security (DHS) Secretary Markwayne Mullin to ...
thehill.com/homenews/senate/6069220-cisa-funding-delay-ei-isac/
US warns Siemens devices can be hacked amid fears Iran is breaching water plants: The warning comes amid widespread cyber incidents targeting local water systems ...
reuters.com/world/us-warns-siemens-devices-can-be-hacked-amid-fears-iran-is-breaching-water-plants-2026-08-19/
CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday: CISA has ordered U.S. government agencies to patch their Citrix NetScaler appliances against an ...
bleepingcomputer.com/news/security/cisa-hackers-now-exploiting-citrix-netscaler-rce-flaw-in-attacks/
Dems demand DHS fund election security. And, journalist Gloria Steinem has died: Two Democrats are demanding that Homeland Security officials fund election ...
npr.org/2026/09/03/g-s1-141784/up-first-newsletter-election-security-venezuela-oil-lindsay-clancy-gloria-steinem
dlvr.it Aug 28
CISA: Most exploited vulnerabilities should have been eradicated decades ago: Organizational culture and systemic gaps in Secure by Design adoption blamed for ...
theregister.com/security/2026/08/28/cisa-most-exploited-vulnerabilities-should-have-been-eradicated-decades-ago/5293194
Over 8,300 Gitea servers vulnerable to code execution attacks: Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw ...
bleepingcomputer.com/news/security/over-8-300-gitea-servers-vulnerable-to-code-execution-attacks/
CISA orders urgent patching of actively exploited Zimbra flaw: The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S ...
bleepingcomputer.com/news/security/cisa-orders-urgent-patching-of-actively-exploited-zimbra-flaw/
CISA: Medusa ransomware hit over 500 critical infrastructure orgs: The FBI said Tuesday that the Medusa ransomware gang has breached more than 500 critical ...
bleepingcomputer.com/news/security/cisa-medusa-ransomware-hit-over-500-critical-infrastructure-orgs/
Hackers target Microsoft SharePoint RCE chain with PoC exploit: Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow ...
bleepingcomputer.com/news/security/hackers-target-microsoft-sharepoint-rce-chain-with-poc-exploit/
Hackers now exploit critical Gitea flaw in code injection attacks: Attackers are now exploiting a critical-severity vulnerability in the Gitea self-hosted Git ...
bleepingcomputer.com/news/security/hackers-now-exploit-critical-gitea-flaw-in-code-injection-attacks/
U.S. agencies warn AI-powered attacks on Siemens PLCs at water plants: The NSA, CISA, FBI, and other agencies say threat actors are using AI-generated scripts to ...
dlvr.it/TV6X5r
Iran-linked hackers blamed for taking down U.K. power plant for first time, reports say
cbsnews.com/news/iran-linked-hackers-blamed-attack-uk-power-plant-reports/
Critical RCE flaw in Windows IKE Extension now actively exploited: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are ...
bleepingcomputer.com/news/security/cisa-critical-windows-ike-extension-flaw-now-exploited-in-attacks/
Major Warning Issued About Potential Attacks on U.S. Water Supply: The infrastructure being targeted includes energy, water, wastewater, and chemical facilities ...
newsweek.com/major-warning-issued-about-attacks-on-us-water-supply-12344061
CISA: Windows Task Host flaw now exploited by ransomware gangs: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware ...
bleepingcomputer.com/news/security/cisa-windows-task-host-flaw-now-exploited-by-ransomware-gangs/
CISA warns of hackers exploiting critical MLflow vulnerability: The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat ...
bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-critical-mlflow-vulnerability/
CISA: Microsoft SharePoint flaw now exploited in ransomware attacks: CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft ...
bleepingcomputer.com/news/security/cisa-microsoft-sharepoint-flaw-now-exploited-in-ransomware-attacks/
Minnesota IT officials disclose 'coordinated cyberattack' at more than 30 local water systems
reuters.com/legal/litigation/minnesota-it-officials-disclose-coordinated-cyberattack-more-than-30-local-water-2026-07-28/
dlvr.it Aug 18
CISA gives feds 3 days to fix actively exploited Ray RCE bug: Phishing, malvertising attacks could target devs to gain access to private corporate networks
theregister.com/security/2026/08/18/cisa-gives-feds-3-days-to-fix-actively-exploited-ray-rce-bug/5289007
Hackers leverage new Microsoft SharePoint exploit in attacks: Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft ...
bleepingcomputer.com/news/microsoft/hackers-leverage-new-microsoft-sharepoint-exploit-in-attacks/
CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs: CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall ...
bleepingcomputer.com/news/security/cisa-sonicwall-sma1000-flaws-now-exploited-by-ransomware-gangs/
Critical Progress LoadMaster flaw now actively exploited in attacks: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are ...
bleepingcomputer.com/news/security/cisa-warns-of-critical-progress-loadmaster-flaw-exploited-in-attacks/
OpinionCyberwarfare in the AI Age: A Conversation With Jen Easterly: A Conversation With Jen Easterly
foreignaffairs.com/podcasts/cyberwarfare-ai-age
Cisco warns of high-severity ClamAV flaws with public exploits: Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that ...
bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/
Max severity SAP Commerce Cloud flaw now targeted in attacks: A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is ...
bleepingcomputer.com/news/security/max-severity-sap-commerce-cloud-flaw-now-targeted-in-attacks/
CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws: The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies ...
bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-langflow-n-central-apache-tomcat-flaws/
State voting officials join CISA security call with election 85 days away: CISA, the federal agency tasked with protecting the cybersecurity of the nation’s ...
pbs.org/newshour/show/state-voting-officials-join-cisa-security-call-with-election-85-days-away
Key FactsICE Arrests Surge Amid Fatal Shootings Controversy
Jul 17, 2026 · Reading time: ~45 sec.
Summary created with AI assistance · Source: commondreams.org
Summary created with AI assistance · Source: commondreams.org
- ICE is on pace for the highest arrest total in July 2026 during Trump’s second term.
- Homeland Security Secretary Mullin insists on escalating deportation efforts despite two recent fatal ICE shootings.
- Calls for reform and probes continue after two innocent men were killed by ICE officers.
- Only 14% of those detained in 2025 had violent crime convictions, while 40% faced no charges.
We're turning up the heat on the streets.— Markwayne Mullin, US Homeland Security Secretary, said this during remarks about ICE operations as the administration pushes to ramp up arrests.
CISA warns of cyberattacks disrupting U.S. water utilities: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase ...
bleepingcomputer.com/news/security/cisa-warns-of-cyberattacks-disrupting-us-water-utilities/
Key FactsUS probes possible Iran link to water-system cyberattack
Jul 31, 2026 · Reading time: ~45 sec.
Summary created with AI assistance · Source: cbsnews.com
Summary created with AI assistance · Source: cbsnews.com
- Malicious cyber activity affected at least seven states according to the FBI; CBS News identified more than 30 affected community water systems in Minnesota, with some utilities switching to manual operations.
- Authorities have not definitively attributed the attack to any actor and cautioned that their assessment could change as more technical evidence is collected.
- No compromise of Minnesota’s water supply was reported, while South St. Paul, Braham and Plymouth maintained services during temporary manual or backup operations.
- The FBI, EPA and CISA warned of attacks on internet-exposed industrial controllers at water and wastewater systems, and CISA urged their prompt removal from the internet.
"I think that Minnesota is behind it," Mr. Trump said during a televised Cabinet meeting at Camp David. "You know who's behind it? Minnesota. Because they're grossly incompetent. I think the governor's behind it. I don't think there was an Iranian cyberattack. I think that Minnesota ought to get its act together." "They're like to say, 'Oh, it was Iran.' Iran should be so lucky. Iran's got bigger problems than worrying about Minnesota," the president said.— Donald J. Trump, during a televised Cabinet meeting at Camp David, suggested Minnesota was responsible and questioned Iran's role.
OpinionOpinion | Small Towns Shouldn’t Have to Defend America’s Water Supply From Iran: Local communities need Washington’s help to fight foreign hackers.
nytimes.com/2026/08/02/opinion/iran-water-hack-trump.html
America's water systems are getting hacked amid security gaps: "No one guarding these systems"
cbsnews.com/news/us-water-systems-cyberattacks-iran-security-gaps/
What we know about the cyberattacks on water systems in 7 states: According to the FBI, at least seven states have now been targeted in a growing wave of ...
pbs.org/newshour/show/what-we-know-about-the-cyberattacks-on-water-systems-in-7-states
Fact-checking Trump speech on election security: President Trump is delivering a speech on election security Thursday night at the White House.
cbsnews.com/news/fact-checking-trump-speech-on-election-security/
Key FactsTrump's Campaign to Undermine Election Integrity
Jul 19, 2026 · Reading time: ~45 sec.
Summary created with AI assistance · Source: theguardian.com
Summary created with AI assistance · Source: theguardian.com
- Trump presented unsubstantiated claims of foreign election interference, despite contradictory evidence in public documents.
- Federal authorities seized election materials in Fulton County, Georgia, even after votes were verified multiple times.
- These actions aim to erode election security and cast suspicion on voter groups, disproportionately affecting Black communities.
- Legislation like the Save America Act proposes stricter voter ID and citizenship verification requirements nationwide.
To this president, any election he loses is a crime scene.— Jamil Smith, Guardian US columnist; closing line of the article
What to Know About the U.S. Water Systems Cyberattacks: Cyberattacks targeting water systems in multiple states over the past week have raised questions about ...
time.com/article/2026/08/02/what-to-know-about-the-u-s-water-systems-cyberattacks/
dlvr.it Aug 05
IBM's agentic AI platform is under active attack - patch now: A critical Langflow flaw allowing RCE on default deployments is being exploited, says the CISA
theregister.com/security/2026/08/05/ibms-agentic-ai-platform-is-under-active-attack-patch-now/5283535
CISA shares advice on isolating vital systems during cyberattacks: The U.S. and Australian governments have released new guidance urging critical infrastructure ...
bleepingcomputer.com/news/security/cisa-shares-advice-on-isolating-vital-systems-during-cyberattacks/
US cyber agency warns of water system attacks after Minnesota targeted: More than 30 water systems in the state faced an attack this week - with US media ...
bbc.com/news/articles/cvgwe2qpgq1o
The Star-Ledger Aug 03
N.J. water systems also hit by hackers in cyberattacks targeting utilities nationwide
nj.com/news/2026/08/nj-water-systems-also-hit-by-hackers-in-cyberattacks-targeting-utilities-nationwide.html
CISA orders urgent action on actively exploited Langflow RCE flaw: The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S ...
bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-langflow-rce-flaw/
Hackers target over 30 Minnesota water utilities in coordinated OT attack: The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response ...
bleepingcomputer.com/news/security/hackers-target-over-30-minnesota-water-utilities-in-coordinated-ot-attack/
Russian hackers exploit Zimbra zero-click flaw for email theft: CISA is warning that the Russian state-sponsored hacking group Laundry Bear ...
bleepingcomputer.com/news/security/russian-hackers-exploit-zimbra-zero-click-flaw-for-email-theft/
Trump Has Dismantled Election Security Efforts. Here’s How.: Since his return to the White House, the lead federal partner for states on election security has ...
nytimes.com/2026/07/16/us/politics/trump-election-security-cisa.html
Check Point warns of SmartConsole zero-day exploited in attacks: Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day ...
bleepingcomputer.com/news/security/check-point-patches-smartconsole-zero-day-exploited-in-attacks/
Computerworld Jul 17
CISA urges immediate SharePoint hardening as exploits mount: Three actively exploited SharePoint vulnerabilities have landed in the KEV catalog ...
computerworld.com/article/4197818/cisa-urges-immediate-sharepoint-hardening-as-exploits-mount-2.html
President Trump's Speech Tonight to Focus on Election Security: Live Updates
nytimes.com/live/2026/07/16/us/trump-news
CISA urges immediate action on actively exploited Fortinet flaws: CISA on Thursday ordered government agencies to prioritize patching two actively exploited ...
bleepingcomputer.com/news/security/cisa-warns-feds-to-patch-exploited-fortinet-fortisandbox-flaws-by-sunday/
CISA orders feds to patch actively exploited Oracle flaw by Saturday: CISA has ordered federal agencies to secure their systems by Saturday against ongoing ...
bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-oracle-flaw-by-saturday/
