Cisa
PulseAugur coverage of Cisa — every cluster mentioning Cisa across labs, papers, and developer communities, ranked by signal.
- 2026-05-24 regulatory CISA added the Langflow vulnerability CVE-2025-34291 to its Known Exploited Vulnerabilities catalog. 来源
- 2026-05-15 regulatory CISA is considering accelerating patch deadlines due to AI threats. 来源
- 2026-05-15 regulatory CISA is considering accelerating patch deadlines due to AI threats. 来源
4 天有情绪数据
-
TeamPCP 利用 GitHub、Grafana 和 VS Code 进行供应链攻击
一个由 TeamPCP 组织发起的一系列协调网络攻击，利用了整个软件供应链的漏洞。这些攻击始于一个在 GitHub 员工设备上的恶意 VS Code 扩展，导致数千个内部代码库被窃取。其他事件包括通过未轮换的令牌泄露 Grafana，一个广泛使用的 GitHub Action 被攻破，以及在公共电子表格中发现敏感凭证，这凸显了供应链风险的普遍性。
-
CISA 将关键的 Langflow 漏洞添加到已利用目录
美国网络安全和基础设施安全局 (CISA) 已将 Langflow 中的一个关键漏洞（标识为 CVE-2025-34291）添加到其已知已利用漏洞 (KEV) 目录中。此缺陷允许攻击者窃取敏感的 API 密钥和令牌。将其纳入 KEV 目录要求联邦机构修补此漏洞，以防止潜在的利用。
-
CISA 警告 AI 漏洞；HMD 将本地 AI 带入入门级手机
CISA 已在其目录中添加了两个新漏洞，其中一个特别影响 AI 系统。该机构正在优先处理补丁和缓解措施，以防止这些漏洞被利用。另外，HMD 正在将本地 AI 功能引入印度的入门级智能手机，旨在通过减少对云的依赖来增强隐私和速度。
-
Microsoft Defender Zero-Days Exploited; Emergency Patch Released
Microsoft is issuing an emergency update for its Defender security software following confirmation from CISA that two zero-day vulnerabilities are actively being exploited. One vulnerability, CVE-2026-41091, allows for …
-
Spartans-GraphRAG uses knowledge graphs to cut LLM token costs
A new system called Spartans-GraphRAG has been developed to make Large Language Model (LLM) inference more efficient, particularly for complex tasks like cybersecurity threat intelligence. This system leverages knowledg…
-
Microsoft Exchange Server hit by active zero-day exploit
Microsoft has confirmed an active zero-day exploit targeting its on-premises Exchange Server, identified as CVE-2026-42897. This vulnerability allows unauthenticated remote code execution and is being actively exploited…
-
CISA eyes faster patch deadlines amid rising AI threats
The Cybersecurity and Infrastructure Security Agency (CISA) is considering accelerating its patch deadlines due to increasing AI-driven threats. This move aims to bolster defenses against sophisticated cyberattacks that…
-
Five Eyes nations warn against using AI agents for sensitive tasks
Government agencies from the Five Eyes intelligence alliance have issued a joint advisory warning against the use of AI agents for sensitive tasks. The advisory, released by entities including the NSA and CISA, emphasiz…
-
Five Eyes agencies caution against rapid agentic AI adoption due to risks
Security agencies from the Five Eyes intelligence alliance have issued guidance cautioning against the rapid adoption of agentic AI. The report highlights that these systems can amplify existing organizational weaknesse…
-
CISA警告：存在被积极利用的“Copy Fail”Linux内核漏洞，可导致root权限接管
美国网络安全和基础设施安全局（CISA）警告称，一个被称为“Copy Fail”（CVE-2026-31431）的关键Linux内核漏洞目前正被积极利用。该漏洞允许未经授权的本地用户将权限提升至root级别，影响Ubuntu、Amazon Linux、RHEL和SUSE等主要发行版。Theori的研究人员同时披露了该漏洞和一个可靠的概念验证（PoC）利用代码，导致其迅速被列入CISA的已知被利用漏洞目录，并要求联邦机构在两周内进行修补。
-
Hackers actively exploit critical cPanel vulnerability, exposing millions of sites
A critical vulnerability in cPanel and WebHost Manager (WHM), tracked as CVE-2026-41940, is being actively exploited by hackers. This flaw allows attackers to bypass authentication and gain root access to servers, poten…
-
Microsoft patches fail, Russian spies exploit new Windows zero-day
Microsoft has released a patch for a zero-day vulnerability in Windows that was being exploited by Russian intelligence groups. This new flaw, CVE-2026-32202, is an authentication coercion issue that allows attackers to…
-
CISA warns of data-theft bug in NSA-developed GrassMarlin tool
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a data-theft vulnerability, CVE-2026-6807, affecting GrassMarlin, a network security tool developed by the NSA. This flaw, stemming …
-
CISA and UK NCSC warn of Firestarter malware targeting Cisco devices
A sophisticated backdoor malware named Firestarter has been detected targeting a US federal agency, prompting a high alert from CISA and its UK counterparts. The malware, which targets Cisco Secure Firewall devices, is …
-
CISA lacks access to Anthropic's powerful Mythos hacking model
The Cybersecurity and Infrastructure Security Agency (CISA) has been denied access to Anthropic's new AI model, Mythos Preview, despite its potential to identify and exploit security vulnerabilities. While over 40 compa…