Latest Emergency Directive news

CISA orders agencies impacted by Microsoft hack to mitigate risks

CISA has issued a new emergency directive ordering U.S. federal agencies to address risks resulting from the breach of multiple Microsoft corporate email accounts by the Russian APT29 hacking group.
- Sergiu Gatlan
- April 11, 2024
- 01:47 PM
- 0
CISA orders federal agencies to disconnect Ivanti VPN appliances by Saturday

CISA has ordered U.S. federal agencies to disconnect all Ivanti Connect Secure and Policy Secure VPN appliances vulnerable to multiple actively exploited bugs before Saturday.
- Sergiu Gatlan
- February 01, 2024
- 08:49 AM
- 0
CISA emergency directive: Mitigate Ivanti zero-days immediately

CISA issued this year's first emergency directive ordering Federal Civilian Executive Branch (FCEB) agencies to immediately mitigate two Ivanti Connect Secure and Ivanti Policy Secure zero-day flaws in response to widespread and active exploitation by multiple threat actors.
- Sergiu Gatlan
- January 19, 2024
- 02:25 PM
- 0
DHS orders federal agencies to patch VMware bugs within 5 days

The Department of Homeland Security's cybersecurity unit ordered Federal Civilian Executive Branch (FCEB) agencies today to urgently update or remove VMware products from their networks by Monday due to an increased risk of attacks.
- Sergiu Gatlan
- May 18, 2022
- 01:38 PM
- 0
US orders federal govt agencies to patch critical Log4j bug

US Federal Civilian Executive Branch agencies have been ordered to patch the critical and actively exploited Log4Shell security vulnerability in the Apache Log4j library within the next six days.
- Sergiu Gatlan
- December 17, 2021
- 12:35 PM
- 0
CISA orders federal agencies to fix hundreds of exploited security flaws

CISA has issued this year's first binding operational directive (BOD) ordering federal civilian agencies to mitigate security vulnerabilities exploited in the wild within an aggressive timeline.
- Sergiu Gatlan
- November 03, 2021
- 08:10 AM
- 0
CISA orders federal agencies to patch Windows PrintNightmare bug

A new emergency directive issued by the Cybersecurity and Infrastructure Security Agency (CISA) orders federal agencies to mitigate the actively exploited Window Print Spooler vulnerability on their networks.
- Sergiu Gatlan
- July 13, 2021
- 12:23 PM
- 0
CISA orders federal orgs to mitigate Pulse Secure VPN bug by Friday

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a new emergency directive ordering federal agencies to mitigate an actively exploited vulnerability in Pulse Connect Secure (PCS) VPN appliances on their networks by Friday.
- Sergiu Gatlan
- April 21, 2021
- 11:53 AM
- 0
CISA gives federal agencies until Friday to patch Exchange servers

The US Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to install newly released Microsoft Exchange security updates by Friday.
- Lawrence Abrams
- April 13, 2021
- 05:59 PM
- 0
DHS orders agencies to urgently patch or disconnect Exchange servers

The Department of Homeland Security's cybersecurity unit has ordered federal agencies to urgently update or disconnect Microsoft Exchange on-premises products on their networks.
- Sergiu Gatlan
- March 04, 2021
- 08:04 AM
- 1
DHS orders federal agencies to update SolarWinds Orion platform

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered all US federal agencies to update the SolarWinds Orion platform to the latest version by the end of business hours on December 31, 2020.
- Sergiu Gatlan
- December 30, 2020
- 12:18 PM
- 0
Federal agencies told to patch wormable Windows DNS bug in 24 hours

The Cybersecurity and Infrastructure Security Agency (CISA) today asked all U.S. federal executive branch departments and agencies to mitigate the critical SIGRed Windows DNS Server wormable remote code execution (RCE) vulnerability within 24 hours.
- Sergiu Gatlan
- July 16, 2020
- 04:14 PM
- 0
DHS Issues Emergency Directive to Prevent DNS Hijacking Attacks

The Department of Homeland Security has issued an emergency directive that requires all U.S. agencies that operate a .gov domain or agency-managed domain to audit their DNS records and servers to verify that they are resolving to the right IP addresses. They further require them harden the security related to DNS accounts.
- Lawrence Abrams
- January 23, 2019
- 02:21 AM
- 0