Cybersecurity and Infrastructure Security Agency

By targeting RMM products, threat actors attempt to evade detection and maintain persistent access, a technique known as living off the land.

The self-appraisal tool helps users contemplate their community’s resilience goals and start developing an approach to incorporating critical infrastructure resilience into their planning activities.

The annual exercise gives participants the opportunity to share practices around cyber and physical incident planning, preparedness, identification, response, and recovery.

Black comes to the agency as CISA is launching a new initiative to engage with open- source community organizations to strengthen the overall security posture of open-source software.

The RFI seeks input on where the government should focus areas for prioritization to secure open source software.

Objectives in the new agency roadmap are built around assessing immediate threats, hardening the attack surface, and driving development of trustworthy tech products.

This advisory provides details on the Common Vulnerabilities and Exposures (CVEs) routinely and frequently exploited by malicious cyber actors in 2022 and the associated Common Weakness Enumeration(s).

CISA and NCSC-NO are concerned about the potential for widespread exploitation of both vulnerabilities in government and private sector networks.