The Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive (ED) 24-01 in response to the prevalence of vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure products. The directive mandates immediate actions for federal civilian executive branch agencies to enhance their cybersecurity posture and prevent exploitation by malicious actors. The emergency directive applies not only to federal agencies but to all sectors that use these products. CISA urges all stakeholders to review and adopt the actions outlined in the directive to reduce the risk of compromise and fortify their systems against cyber threats.
CISA’s Urgent Directive: Shielding Federal Agencies from Exploitation ASAP
Latest from News
Screen Secrets: Keeping Digital Payments Safe with Threat Intelligence
TLDR: Mastercard acquired threat intelligence company Recorded Future for $2.65 billion, highlighting the importance of cybersecurity in digital payments. Threat intelligence plays a crucial
Fortinet’s data breach confirmed through third-party source
TLDR: Fortinet confirms the compromise of customer data leaked by a hacker named “Fortibitch” Data breach occurred via unauthorized access to a limited number
New CISA report links cyberattacks on critical infrastructure to Russia
TLDR: New joint advisory from CISA, FBI, and NSA ties recent cyber attacks on critical infrastructure to Russian GRU unit known as Unit 29155.
RansomHub boasts Kawasaki hack, threatens release of stolen information
TLDR: Kawasaki Motors Europe recovering from cyberattack by RansomHub ransomware gang RansomHub threatens to leak stolen data if demands aren’t met Kawasaki Motors Europe
Lazarus Group targets Python devs with fake jobs, coding malware
Summary of North Korean Hackers Targeting Python Devs TLDR: North Korean hackers have been targeting Python developers with malware disguised as coding tests for