cisa - Tech News from Simmons Systems

Tech News from Simmons Systems

cisa

A collection of 34 posts

CISA Orders Federal Agencies to Patch Exploited Fortinet FortiSandbox Flaws by Sunday

CISA has ordered federal agencies to patch two critical vulnerabilities in Fortinet's FortiSandbox threat detection platform by Sunday, July 19. The flaws, tracked as CVE-2026-39808 and CVE-2026-25089, allow unauthenticated attackers to execute remote code through command injection attacks that require no user interaction. Both vulnerabilities have been added

CISA Urges Immediate Patching of Actively Exploited SharePoint Vulnerabilities

CISA warns that attackers are actively exploiting three serious vulnerabilities in Internet-exposed, on-premises Microsoft SharePoint Server instances. These flaws, tracked as CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, affect all supported self-hosted versions of SharePoint Server. Attackers use them to bypass authentication, execute remote code, and establish persistence on compromised systems. According to

US Government Warns Russian State Hackers Target Home and Office Routers

Russian state-sponsored hacking groups backed by the FSB continue to mass-compromise home and small office routers worldwide, according to a new advisory from the Cybersecurity and Infrastructure Security Agency. The hackers exploit poorly configured devices, particularly those with exposed SNMP agents that still accept default or common credentials. Once compromised,

US and Allies Warn of Russian Hackers Targeting Critical Infrastructure Routers

Cybersecurity agencies from the United States and eight allied nations issue a joint advisory warning that Russian state hackers are actively targeting critical infrastructure networks. The advisory, co-authored by the NSA, FBI, and CISA alongside agencies from Australia, the UK, Canada, and several European nations, attributes the campaign to the

CISA Warns of Active Exploitation Targeting Microsoft SharePoint RCE Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns that attackers are actively exploiting a high-severity remote code execution vulnerability in Microsoft SharePoint. Tracked as CVE-2026-45659, the flaw stems from improper deserialization of untrusted data and allows authenticated attackers with low privileges to execute arbitrary code on unpatched servers.

White House Unveils AI Action Plan and Three Executive Orders to Boost US Competitiveness

The White House releases a comprehensive AI Action Plan focused on innovation, infrastructure, and security, accompanied by three new Executive Orders targeting AI exports, data center permitting, and federal AI usage.

US Agencies Update Shields Up Guidance Amid Russian Malware Threats

CISA and the FBI update their Shields Up webpage with new defensive recommendations as Russian state-sponsored wiper malware targets Ukrainian organizations. Officials urge all US businesses to immediately assess and bolster their cybersecurity postures.

US Officials Alarmed as 5G Conspiracy Theories Spark UK Cell Tower Arson

U.S. intelligence officials conclude that recent arson attacks on British cell towers stem from debunked online conspiracy theories linking 5G technology to the coronavirus pandemic. Authorities on both sides of the Atlantic fear these dangerous falsehoods could inspire similar violence elsewhere.

Trump Faces Record Ransomwave Threat as Cybersecurity Policy Shifts

President-elect Donald Trump inherits a record-breaking ransomware crisis despite recent U.S. government disruptions against major cybercriminal networks. Industry leaders expect significant changes in cybersecurity policy as attacks continue to rise regardless of political leadership.

Chinese-Linked Hackers Target T-Mobile in Broad Telecom Espionage Campaign

T-Mobile confirms it is caught up in a sweeping Chinese cyberespionage campaign targeting major U.S. telecom networks. The company claims no significant impact to customer data, though it refuses to detail what hackers may have accessed.

CrowdStrike Update Causes Global IT Outage Impacting Millions

A faulty CrowdStrike software update triggers a massive IT outage affecting 8.5 million Windows devices worldwide. Authorities warn users to watch for opportunistic cyberattacks disguised as outage remediation tools.

artificial intelligence

Biden Executive Order Tasks Homeland Security With Leading AI Safety Efforts

A new Executive Order directs the Department of Homeland Security to spearhead federal efforts in securing artificial intelligence across critical infrastructure and cyberspace. DHS will establish an advisory board and develop safety guidelines to mitigate risks associated with AI.

US Agencies Warn Destructive Ukraine Wiper Malware Could Spread Stateside

CISA and the FBI warn that destructive wiper malware targeting Ukrainian organizations poses a potential spill-over threat to US businesses. The agencies urge companies to heighten their cyber defenses immediately.

US Agencies Warn Destructive Ukraine Malware Could Spread to American Networks

CISA and the FBI warn that Russian "wiper" malware targeting Ukrainian systems poses a significant risk of spilling over into US networks. The destructive software renders Windows systems inoperable and exploits common IT management tools to propagate.

CISA Issues Shields Up Warning Amid Growing Russian Cyber Threat

The Cybersecurity and Infrastructure Security Agency alerts US businesses and agencies to prepare for potential Russian cyberattacks as tensions over Ukraine escalate. The agency urges organizations to immediately strengthen their digital defenses and update incident response plans.