Stories
CISA
Stories curated for CISA

Cybersecurity
CISA Adds Six Exploited Flaws, Including Reported Plex2Shell
CISA added six actively exploited CVEs: four Plex flaws linked as Plex2Shell, plus SiteGuard and Siemens bugs for organizations to assess and patch.

Cybersecurity
U.S. Agencies Publish Rogue-Agent Incident Playbook
U.S. agencies issued voluntary guidance for super-intelligence training incidents, outlining ten practices for detection, containment, recovery and reporting.

Cybersecurity
CISA Warns of Active Exploitation in BeyondTrust Remote Support
CVE-2026-102764 affects self-hosted BeyondTrust Remote Support versions through 26.2.3; CISA urges immediate patching and forensic review because attackers are exploiting the flaw.

Security
CISA Warns of Exploited Ivanti VPN Vulnerability and Urges Immediate Updates
CISA says attackers exploited CVE-2026-104935 in Ivanti Connect Secure for remote command execution, credential theft, and data exfiltration; fixed releases are available.