/
attack_type:credential_theft × latest_source_host:cisa.gov × limpar

Resultados

2 casos · pág. 1/1

cisa.gov · medium

CISA red team assessments of two critical infrastructure orgs: both fully compromised, but only one detected and contained the intrusion

CISA ran concurrent red team assessments at two organizations: Organization A (Government Services and Facilities) and Organization B (Water and Wastewater Systems). Both reached full domain compromise and accessed sensitive business systems (SBSs) and cloud resources. Organization A did not detect or contain the activity. Organization B …

government water and wastewater
cisa.gov · · 2 atualizações critical

CISA adds exploited Ivanti Connect Secure zero-day CVE-2026-104935 (unauthenticated RCE) and Windows CVE-2026-96951 to KEV

CISA warns that threat actors are exploiting CVE-2026-104935, a zero-day authentication bypass by spoofing in Ivanti Connect Secure that allows remote, unauthenticated execution of arbitrary commands. The activity is being used for credential theft and data exfiltration. On Oct. 13, 2026, CISA added it to its Known Exploited Vulnerabiliti…

CVE-2026-96951 CVE-2026-104935 government