U.S. #CISA adds #Google #Chromium Mojo flaw to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/175936/security/u-s-cisa-adds-google-chromium-mojo-flaw-to-its-known-exploited-vulnerabilities-catalog.html
#securityaffairs #hacking
New: CISA has updated the KEV catalogue.
- CVE-2025-2783: Google Chromium Mojo Sandbox Escape Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-2783
- Added yesterday:
- CVE-2019-9874: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability https://www.cve.org/CVERecord?id=CVE-2019-9874
- CVE-2019-9875: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability https://www.cve.org/CVERecord?id=CVE-2019-9875 #CISA #cybersecurity #infosec #Google
CISA Releases One Industrial Control Systems Advisory https://www.cisa.gov/news-events/alerts/2025/03/27/cisa-releases-one-industrial-control-systems-advisory #CISA #cybersecurity #infosec
U.S. #CISA adds #Sitecore CMS and XP, and #GitHub Action flaws to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/175915/security/u-s-cisa-adds-sitecore-cms-and-xp-and-github-action-flaws-to-its-known-exploited-vulnerabilities-catalog.html
#securityaffairs #hacking #malware
Want an action-packed docket of dynamic speakers and cross-industry topics? Look no further
Register for VulnCon25 today! 
https://www.first.org/conference/vulncon2025/ #vulnerabilitymanagement #CVE #CVSS #EPSS #CISA #MITRE #VEX #Raleigh
CISA has updated the KEV catalogue:
- CVE-2019-9874: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability https://www.cve.org/CVERecord?id=CVE-2019-9874
- CVE-2019-9875: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability https://www.cve.org/CVERecord?id=CVE-2019-9875 #CISA #cybersecurity #Infosec
CISA Releases Four Industrial Control Systems Advisories https://www.cisa.gov/news-events/alerts/2025/03/25/cisa-releases-four-industrial-control-systems-advisories #CISA #cybersecurity #infosec
HIRING: Deputy Director, Physical & Cyber Security / San Jose, California
USD 208K+
If you missed this, CISA added this vulnerability to the KEV catalogue late yesterday. CVE-2025-30154 was last updated on March 19.
CVE-2025-30154 (high): reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-30154 #CISA #cybersecurity #infosec #GitHub
I'm looking for a #Tabletop #Cybersecurity incident exercise.
Idealy a sufficiently detailed scenario, similare to a (Solo) Adventure RPG Gamebook.
Any hints?
The #CISA Cybersecurity Scenarios https://www.cisa.gov/resources-tools/resources/cybersecurity-scenarios are going into this direction but contain too little details for me. I just have too little #Incident handling experience to create a coherent exercise which is addapted to participant actions.
“The upheaval at the #US government's #Cybersecurity and Infrastructure Security Agency, aka CISA, took another twist on Tuesday, as it moved to reinstate staffers it had #fired over the past few weeks - specifically those still in their probationary period - though they've been benched on paid leave for now.
Last week, a senior penetration tester at CISA claimed his 100-plus-strong #RedTeam as well as its support workers were dismissed after Elon #Musk's Trump-blessed cost-trimming #DOGE unit pulled the plug on a federal government contract; a second #CISA red team was also said to have been cut soon after.
The cyber-agency quickly confirmed it had indeed dumped a number of workers, and said its remaining red teams will continue to operate as usual.”
The sacking of #tech workers continues.
#TheRegister / #efficiency / #WhiteCollar / #sackings <https://theregister.com/2025/03/18/cisa_rehired_doge/>
just wow. that’s a proper security security vulnerability! None of this messy packing bytes into some arrangement that’s probably processor specific. just ask politely to skip all the middle layer with the authentication in it and go straight to the api call. I’m sure #CISA are all over it. https://infosec.exchange/@hdm/114209441459410050
DOGE to Fired CISA Staff: Email Us Your Personal Data
https://krebsonsecurity.com/2025/03/doge-to-fired-cisa-staff-email-us-your-personal-data/
"The message instructed recently-fired #CISA employees to get in touch so they can be rehired and then immediately placed on leave, asking employees to send their #SocialSecurity number or date of birth in a password-protected email attachment — presumably with the #password needed to view the file included in the body of the email."
@mwyres bloody Nora. President Musk is a disaster.
“On Monday, the administration announced that those dismissed employees would be reinstated but placed on paid administrative leave…
‘“Please provide a password protected attachment that provides your full name, your dates of employment (including date of termination), and one other identifying factor such as date of birth or social security number,” the message reads. “Please, to the extent that it is available, attach any termination notice.”’
That mission is now under threat, acc/to interviews with 7 #CISA employees & another person familiar w/the matter, all of whom requested anonymity to avoid reprisals.
“Our enemies are not slowing their continuous assaults on our systems,” says Suzanne Spaulding, who led CISA’s predecessor during the Obama admin. “We need all hands on deck & focused, not traumatized & distracted.”
Inside #CISA, vital support staff are gone, international partnerships have been strained, & workers are afraid to discuss #threats to #democracy that they’re now PROHIBITED from countering. Employees are even more overworked than usual, & new assignments from the admin are interfering w/important tasks. Meanwhile, CISA’s temporary leader is doing everything she can to appease #Trump, infuriating employees who say she’s out of touch & refusing to protect them.
‘People Are Scared’: Inside #CISA as It Reels From #TrumpPurge
Employees at the #Cybersecurity & #Infrastructure #Security Agency…are struggling to protect the #US while the #Trump admin dismisses their colleagues & poisons…partnerships.
#MassLayoffs & weak leadership are taking a severe toll on the US govt’s #cyber #defense agency, undermining its ability to protect America from…adversaries bent on crippling infrastructure & #ransomware gangs…bleeding #SmallBusiness dry.
https://archive.is/2025.03.13-143433/https://www.wired.com/story/inside-cisa-under-trump/
♬ 
