Remove 01
article thumbnail

US CISA orders federal agencies to fix Log4Shell by December 24th

Security Affairs

US CISA ordered federal agencies to address the critical Log4Shell vulnerability in the Log4j library by December 24th, 2021. US CISA ordered federal agencies to address the critical Log4Shell vulnerability in the Log4j library by December 24th, 2021. Conduct a security review to determine if there is a security concern or compromise.

article thumbnail

CISA Issues New Cybersecurity Directive for Federal Agencies

Hunton Privacy

On November 3, 2021, the Cybersecurity and Infrastructure Security Agency (“CISA”) announced Directive 22-01 – Reducing the Significant Risk of Known Exploited Vulnerabilities (the “Directive”), establishing a CISA-managed catalog of vulnerabilities and compelling federal agencies to remediate such vulnerabilities on government information systems.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

US CISA added 17 flaws to its Known Exploited Vulnerabilities Catalog

Security Affairs

According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities , FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog. Pierluigi Paganini.

CMS 87
article thumbnail

HackDHS bug bounty program accepts reports of Log4j-related flaws in DHS systems

Security Affairs

The Department of Homeland Security (DHS) announced that white hat hackers can now report the impact of the Log4J on its systems as part of the ‘ Hack DHS ‘ bug bounty program. — Secretary Alejandro Mayorkas (@SecMayorkas) December 21, 2021. Below is the announcement of DHS Secretary Alejandro N. Pierluigi Paganini.

article thumbnail

CISA adds WatchGuard flaw to its Known Exploited Vulnerabilities Catalog

Security Affairs

Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2022-23176 flaw in WatchGuard Firebox and XTM appliances to its Known Exploited Vulnerabilities Catalog. government has announced that it had dismantled the Cyclops Blink botnet operated by the Russia-linked Sandworm APT group. Recently, the U.S.

IT 79
article thumbnail

Trends and Predictions for 2022 – More of the Same?

Thales Cloud Protection & Licensing

Wed, 01/05/2022 - 05:12. Are we going to see more of the same as we did in 2021? During the latest Thales Security Sessions podcast , hosted by Neira Jones, I had the pleasure to discuss what we can expect in 2022 with Andy Green, CISO at Gemserv, and how the many changes have impacted the security landscape.

Phishing 127
article thumbnail

Five Hot Security and Privacy Topics You Need To Understand in 2022

Thales Cloud Protection & Licensing

Five Hot Security and Privacy Topics You Need To Understand in 2022. Thu, 01/27/2022 - 06:13. Throughout 2021 Thales hosted several webinars whose purpose was to raise awareness on trending topics around cybersecurity and privacy. Schrems II and the Security of International Data Flows. Privacy Shield Framework.

Privacy 71