United States federal agency
Appears in 14 stories · Last updated Nov 8, 2026
Co-author of the November 5 joint advisory; no attribution issued
In August 2026, refrigerators failed at U.S. military commissaries. Attacks then hit hundreds of French supermarkets in October and spread in early November to stores in at least eight European countries, including Italy, Sweden and Belgium.
Updated 3 days ago
Set an October 29 deadline for federal civilian agencies to patch the PHP flaws, then added the Fragnesia kernel bug to its exploited-vulnerabilities catalog on October 28 with a Saturday deadline
Palo Alto Networks confirmed that attackers chained the PHP2Shell flaws with a Linux kernel bug to take root control of its firewalls, and shipped hotfixes for PAN-OS 12.2, 12.1, 11.2, 11.1 and 10.2. Unit 42, the company's threat research arm, said it independently verified the tooling and results that Dream Security described.
Updated Nov 1
Had not listed the flaw in its exploited-vulnerabilities catalog as of October 30
Linux kernels have carried a race condition in their IPv4 TCP code since October 2015, when the faulty commit landed for version 4.4. The kernel's CVE team published it as CVE-2026-98432 on October 15, scoring it 9.8 out of 10.
Added CVE-2026-111497 to its Known Exploited Vulnerabilities catalog on October 27
A memory bug in Google's Brotli decompressor lets a crafted compressed file overwrite memory in any program that unpacks it. The flaw, CVE-2026-111497, scores 9.2 out of 10, and researchers at Imperva ran attacker code on an unpatched Node.js build by feeding it Brotli data.
Issued Binding Operational Directive 26-04
U.S. federal agencies can now buy Aikido Security's software security platform. The company received FedRAMP Moderate Authorization on October 5, 2026, through Knox Systems, a managed federal cloud provider.
Updated Oct 23
As of October 2026: Issued joint advisory on China-based distillation campaigns
A security firm has uncovered a network of more than 80,000 proxy servers that mask the origin of AI requests flowing to Western frontier labs. The relays pool AI accounts and issue their own keys, so providers see only the intermediary — not who is actually querying the models.
Updated Oct 1
As of September 2026: Added CVE-2026-60004 to its known exploited catalog August 25
Forgejo released version 16.0.4 on September 10 to close a critical remote code execution vulnerability affecting every version through 16.0.3. The news reached Hacker News the same day.
Updated Sep 10
As of September 2026: Withholding $39.6M in congressionally directed election security funds
Two months before the midterms, the federal agency built to protect election systems hasn't spent a cent of the money Congress told it to use. Top Democrats on both election committees are demanding the Department of Homeland Security release $39.6 million earmarked for local election security, with a response due September 9.
Updated Sep 6
As of August 2026: Issued and updated the controlling threat advisory
Nine days after Michigan disclosed intrusions at nine of its water systems, the tally of affected states has held near a dozen. The FBI is still working out which incidents trace back to Iran-linked hackers, and no state has confirmed contaminated water reached customers.
Updated Aug 11
As of May 2026: Reviewing February 2026 incident as critical infrastructure matter
On February 16, 2026, a misconfigured routing update at Cloudflare's Ashburn data center cascaded across the internet, taking down X for three hours and degrading AWS's largest region. Thousands of other websites went down too. The error took 40 minutes to identify but four hours to fix because corrupted routing tables spread to upstream providers.
Updated May 29
As of May 2026: Tracking and mandating remediation of exploited vulnerabilities
Microsoft released its February 2026 Patch Tuesday update fixing 58 security flaws, including six zero-day vulnerabilities already being exploited; the most severe bypasses Windows SmartScreen, tricking users into running malicious software without warnings. CISA added all six to its Known Exploited Vulnerabilities catalog, giving federal agencies until March 3, 2026 to patch.
Updated May 27
As of May 2026: Driving industry-wide secure-by-design adoption
On January 12, 2026, millions of Teams users woke up to find their security settings had changed overnight. Microsoft activated weaponizable file blocking, malicious URL detection, and phishing protections across every organization still using default configurations—no administrator approval required. Days earlier, it had expanded Zero-Hour Auto Purge malware removal to all Defender for Office 365 Plan 1 customers. These moves are part of Microsoft's $34 billion bet on 'secure by default' security, following Russian and Chinese attacks on its networks in 2023.
Updated May 20
As of May 2026: Lead agency for critical infrastructure cybersecurity defense
Chinese hackers have burrowed deep into America's power grids, water systems, telecommunications networks, and transportation infrastructure—not to steal secrets, but to flip a kill switch. The Pentagon's December 2024 report confirms Beijing expects to fight and win a war over Taiwan by 2027.
Updated May 16
As of May 2026: Coordinating defense against Russian infrastructure targeting
From 2021 to 2025, Amazon exposed that Sandworm (GRU Unit 74455)—the team behind NotPetya and Ukraine's grid attacks—had shifted to infiltrating misconfigured devices at Western utilities, energy companies, and security providers. They compromised edge devices, harvested credentials, and penetrated networks across North America and Europe.
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
