cisa news - Search News

CISA Flags Critical Flaws in Mitel and Oracle Systems

TechRadar on MSN · 1d

CISA says Oracle and Mitel have critical security flaws being exploited

Mitel’s MiCollab is a popular unified communications platform, and as such - a major target for cybercriminals. In early December this year, the company patched a three-month-old zero-day vulnerability that allowed crooks to read sensitive files.

The Hacker News · 15h

CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active Exploitation

CISA lists critical flaws in Mitel MiCollab (CVE-2024-41713, CVE-2024-55550) and Oracle WebLogic (CVE-2020-2883).

The Register on MSN · 1d

Mitel 0-day, 5-year-old Oracle RCE bugs under active exploit

CVEs added to CISA's catalog Cybercriminals are actively exploiting two vulnerabilities in Mitel MiCollab, including a zero-day flaw, alongside a critical remote code execution vulnerability in Oracle WebLogic Server that has been exploited for at least five years.

CSOonline · 1d

Critical Mitel, Oracle flaws find active exploitation, CISA urges patching

CISA added the flaws to its known vulnerability catalog, recommending swift patching pursuant to Binding Operational Directive (BOD) 22-01.

Bleeping Computer · 2d

CISA warns of critical Oracle, Mitel flaws exploited in attacks

CISA has warned U.S. federal agencies to secure their systems against critical vulnerabilities in Oracle WebLogic Server and Mitel MiCollab systems that are actively exploited in attacks.

2don MSN

CISA says ‘no indication’ other US government agencies affected in Treasury hack

The US Treasury Department suffered a cyberattack in late 2024 CISA has confirmed it does not believe any other agencies were ...

3don MSN

CISA says ‘no indication’ of wider government hack beyond Treasury

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said in a brief statement Monday that there is “no ...

federalnewsnetwork.com6d

What will 2025 bring for CISA?

There's a lot swirling around CISA heading into the Trump administration. We breakdown the outlook for the cyber agency in ...

2d

CISA says hack targeting Treasury Department did not impact other federal agencies

BeyondTrust says an investigation of a December attack spree is nearing completion and SaaS instances are fully patched.

CISA: Virtual Training on Assessing and Responding to Anonymous Threats of Violence in the K-12 Environment

Please join the Cybersecurity and Infrastructure Security Agency (CISA) School Safety Task Force for a virtual training on ...

Federal Cybersecurity Policy in 2025: What to Watch in Changing Times

Last year we made some predictions about 2024’s cyber landscape and major issues. Several proved prescient, with incident reporting, CISO ...

2don MSN

CISA says ‘no indication’ other agencies impacted by Treasury hack

The Cybersecurity and Infrastructure Security Agency (CISA) said Monday that there is “no indication” other federal agencies ...

2h

What’s Next for Open Source Software Security in 2025?

Hidden dependencies, social engineering attacks, and the complexity of foundation models can all contribute tothe insecure ...

Some results have been hidden because they may be inaccessible to you

Show inaccessible results