/
loss_type:operational × latest_source_host:cisa.gov × limpar

Resultados

4 casos · pág. 1/1

cisa.gov · · 2 fontes · 2 atualizações critical

CISA urges Citrix NetScaler ADC/Gateway patching and compromise checks as zero-days, including new CVE-2026-107406, are exploited

CISA issued an alert on exploitation of critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway, noting confirmed malicious activity involving at least some of them. The alert references Citrix bulletins for CVE-2026-107406, CVE-2026-88779 and CVE-2026-88771 through CVE-2026-88778. Because NetScaler updates can be …

CVE-2026-88771 CVE-2026-88772 CVE-2026-88779 government education
cisa.gov · critical

Iranian-affiliated APT actors disrupt internet-exposed Rockwell, Schneider Electric and Siemens PLCs across US critical infrastructure

The FBI, CISA, NSA, EPA, DOE, CNMF and Treasury warn of ongoing exploitation of internet-exposed PLCs by an Iranian-affiliated APT group, with activity observed since at least March 2026. Targets are Rockwell Automation/Allen-Bradley, Schneider Electric and Siemens PLCs in the Government Services and Facilities, Water and Wastewater Syste…

Iranian-affiliated APT government water and wastewater
cisa.gov · high

Pro-Russia hacktivists (CARR, Z-Pentest, NoName057(16), Sector16) compromise internet-exposed VNC HMIs in critical infrastructure OT

A joint advisory (AA25-343A) from FBI, CISA, NSA and some 18 other US, European, Five Eyes and Czech agencies warns that pro-Russia hacktivist groups are conducting opportunistic, low-sophistication attacks on critical infrastructure OT. The groups named are Cyber Army of Russia Reborn (CARR), Z-Pentest, NoName057(16) and Sector16. They e…

Cyber Army of Russia Reborn Z-Pentest water and wastewater food and agriculture
cisa.gov · high

CISA and FBI #StopRansomware advisory on Gunra, a Conti-derived RaaS exploiting Fortinet and VPN flaws for double extortion

The FBI, CISA, DC3, NSA, USSS and the Republic of Korea's KNPA issued joint advisory AA26-222A on Gunra ransomware. Gunra appeared in April 2025 as a double-extortion variant derived from the leaked Conti source code. It launched a structured RaaS affiliate program in January 2026, also operating under the alias Golden Community, and recr…

CVE-2024-55591 CVE-2025-24472 Gunra Golden Community healthcare financial services