The CISA KEV catalog was expanded with 245 vulnerabilities in 2025, including 24 flaws exploited by ransomware groups.

DHS disputes reports that acting CISA director allegedly failed polygraph test, as ongoing investigation leads to suspension of multiple officials.

CISA ordered U.S. federal agencies to patch an actively exploited MongoDB vulnerability (MongoBleed) that can be exploited to ...

Government staffing cuts and instability, including this year’s prolonged shutdown, could be hindering US digital defense and ...

Sean Plankey’s nomination faltered as lawmakers ran out the clock after a tumultuous year of workforce reductions. The ...

The White House is expected to kick off 2026 with a new national cyber strategy. Here's what else we're watching in a ...

2025 included a number of monumental threats, from global nation-state attacks to a critical vulnerability under widespread ...

Ryan Donaghy had served at CISA since 2016. It’s not clear if she was voluntarily moved to TSA or was given transfer orders. Ryan Donaghy, the Cybersecurity and Infrastructure Security Agency official ...

An ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows the ...

National Security Agency, and Canadian Centre for Cyber Security have released an update to the Malware Analysis Report ...

Senate appropriators' draft spending bill would include new funding to hire FEMA staff after hundreds of employees departed the agency this year.

The Cybersecurity and Infrastructure Security Agency (CISA) has announced it is now participating in the Office of Personnel ...