CISA Adds Cacti Vulnerability to Known Exploited Vulnerabilities Catalog

The Cybersecurity and Infrastructure Security Agency has added a cyber vulnerability to its Known Exploited Vulnerabilities Catalog. The Cacti Command Injection Vulnerability allows unauthenticated users to execute arbitrary code on a server that runs the Cacti open-source platform. Specifically, it allows hackers to retrieve the client’s internet protocol address by bypassing authentication processes. The vulnerability […]
Posted on by Lawrence Carter

Rebellion Defense Receives SOFWERX Contract for Expanded Access to Network Vulnerability Detection Software

The Tampa, Florida-based nonprofit organization SOFWERX has awarded Rebellion Defense a contract to expand the use of the Rebellion Nova software. SOFWERX will use Nova to identify network vulnerabilities that could significantly impact warfighter capabilities before adversaries can exploit them. The software uses automated adversary emulsion and vulnerability prioritization to identify critical lapses. The contract […]
Posted on by Lawrence Carter

DHS Cybersecurity Grant Program Begins Funding Rollout for State, Local Governments

State and local governments are starting to receive funds from a four-year, $1 billion Department of Homeland Security grant program aimed at strengthening defense and response capabilities against threats to information systems. Tribal administrations are also set to receive support under a separate program, for which the funding notice is still being crafted. In all, […]
Posted on by Noah Lowell

XQ, Strategic Communications to Deliver Zero Trust Solutions to Government Agencies

Cloud and IT services and solutions provider Strategic Communications has partnered with the cybersecurity company XQ to provide zero trust solutions to federal and state agencies. Under the partnership, Strategic Communications will look to deliver XQ’s Virtual Private Network Upgrade and Quantum-Safe Vault products. Both solutions are meant to help users maintain compliance with the […]
Posted on by Lawrence Carter

NSA Publishes Joint Cybersecurity Guidance About North Korean Ransomware Threat

The National Security Agency, in partnership with other government agencies from the United States and South Korea, has released a joint cybersecurity advisory about a ransomware threat from North Korea. The advisory contains known tactics, techniques and procedures used by Pyongyang-sponsored cyber actors whenever they target American and South Korean health care systems and other […]
Posted on by Lawrence Carter