Gov Alerts / ISAC

Critical Patches Issued for Microsoft Products, April 14, 2026

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code executio…

Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Fortinet products, the most severe of which could allow for arbitrary code execut…

Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution…

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitat…

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploit…

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitatio…

Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Mozilla products, the most severe of which could allow for arbitrary code executi…

Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure

Advisory at a Glance Title Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructur…

A Vulnerability in Fortinet FortiClientEMS Could Allow for Arbitrary Code Execution

A Vulnerability has been discovered in Fortinet FortiClientEMS that could allow for arbitrary code execution. FortiClientEMS is a…

Multiple Vulnerabilities in Progress ShareFile Could Allow for Remote Code Execution

Multiple vulnerabilities have been discovered in Progress ShareFile, which when chained together, could allow for remote code exec…

Multiple Vulnerabilities in Cisco Products Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Cisco products, the most severe of which could allow for arbitrary code execution…

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution.…

Multiple Vulnerabilities in Apple Products Could Allow for Privilege Escalation

Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for privilege escalation. Su…

A Vulnerability in F5 Products Could Allow for Remote Code Execution

A vulnerability has been discovered in F5 Products that could allow for remote code execution. F5 BIG IP APM is an access policy m…

Multiple Vulnerabilities in NetScaler ADC and NetScaler Gateway Could Allow for Memory Overread

Multiple Vulnerabilities have been discovered in NetScaler ADC and NetScaler Gateway, the most severe of which could allow for mem…

A Vulnerability in Oracle Products Could Allow for Remote Code Execution

A vulnerability has been discovered in Oracle Products that could allow for remote code execution.   Oracle Identity Manager is…

Reflections from the Second NIST Cyber AI Profile Workshop

Thank you to everyone who participated in the Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile) Works…

All aboard: the NIST Cybersecurity for IoT Program is headed to our next stop! Share your input on where we’re headed during our Future Directions Two-Day Workshop on March 31st.

Workshop Details… We’re looking forward to hearing from the community during our “Future Directions” Workshop! Date: March 31 - Ap…

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution.…

Multiple Vulnerabilities in Mozilla Firefox Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Mozilla Firefox, the most severe of which could allow for arbitrary code executio…

Critical Patches Issued for Microsoft Products, March 10, 2026

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code executio…

Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution…

A Vulnerability in pac4j-jwt (JwtAuthenticator) Could Allow for Authentication Bypass

A vulnerability has been discovered in pac4j-jwt (JwtAuthenticator) which could allow for authentication bypass. pac4j-jwt is a Ja…

Multiple Vulnerabilities in Cisco Products Could Allow for Remote Code Execution

Multiple vulnerabilities have been discovered in Cisco products, the most severe of which could allow for remote code execution.…

Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution

Multiple vulnerabilities have been discovered in Google Android OS, the most severe of which could allow for remote code execution…

CISA Issues Updated RESURGE Malware Analysis Highlighting a Stealthy but Active Threat

Multiple Vulnerabilities in Cisco Catalyst SD-WAN Products Could Allow for Authentication Bypass

Multiple vulnerabilities have been discovered in Cisco Catalyst SD-WAN products, the most severe of which could allow for authenti…

Celebrating Two Years of CSF 2.0!

Celebrate this milestone with us! Email us at csf [at] nist.gov (csf[at]nist[dot]gov) or tag @NISTcyber on X telling us what your…

A Vulnerability in Dell RecoverPoint for Virtual Machines Could Allow for Arbitrary Code Execution

A vulnerability has been discovered in Dell RecoverPoint for Virtual Machines which could allow for arbitrary code execution. Dell…

A Vulnerability in Google Chrome Could Allow for Arbitrary Code Execution

A vulnerability has been discovered in Google Chrome which could allow for arbitrary code execution. Successful exploitation of th…