cisa alerts

CISA has warned that cyber threat actors are increasingly targeting internet-exposed programmable logic controllers in U.S. water and wastewater systems, changing passwords to lock out operators and altering IP addresses to disconnect equipment. The activity has already contributed to boil-water...

CISA added CVE-2008-4128, a cross-site request forgery flaw in legacy Cisco IOS, to its Known Exploited Vulnerabilities Catalog on July 13 after confirming evidence of exploitation. The vulnerability affects the web administration interface on Cisco 871 Integrated Services Routers running IOS...