These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing ...

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an ...

A vulnerability has been identified in the Open Interface Services (OIS) web module affecting Siveillance Control and Siveillance Control Pro (versions OIS 3.x.y and OIS 4.x.y) . This vulnerability ...

Successful exploitation of this vulnerability could result in a system crash, a DoS, or memory corruption, which could lead to code execution on the victim system.

New Framework Defines Quality, Explains Strategy Alignment, Establishes Roadmap, and Provides Measurements to Success ...

The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA)—hereafter referred to as the “authoring agencies”—have published this fact sheet to highlight ...

This document is to be used in tandem with the CPGs to help prioritize and track your organization’s implementation.

References Security Firewall | https://ubuntu.com/server/docs/firewalls iptables (8) Linux man page | https://linux.die.net/man/8/iptables How to Add IP Address in ...

The Recommendations to Space System Operators for Improving Cybersecurity paper, written by the public and private sector members of the Space Systems Critical Infrastructure Working Group, is ...

CISA Tabletop Exercise Packages (CTEPs) assist stakeholders in conducting their own exercises. The ChemLock exercise packages below are tailored specifically for chemical security, are no-cost to ...

Minimum Number of Participants Required: 8-12 participants Time Estimate: 4 hours Participants focus on how emerging and evolving risks and key drivers of change might affect different National ...

DOJ performs research and analysis of hardware and software acquisitions to identify supply chain risks, including vendor insolvency and litigation, cyber terrorism, malware, data theft, and Advanced ...