CISA and partners caution U.S. organizations of ongoing cyber exploitation targeting internet-connected operational technology devices across multiple critical infrastructure sectors.

CISA and the FBI have released a Public Service Announcement warning against state cyber actors targeting commercial messaging apps.

CISA urges organizations to check endpoint management system configurations after a recent cyberattack targeting a U.S. corporation.

CISA’s Emergency Directive 26-03 calls on federal agencies to inventory SD-WAN systems, apply mitigations, and assess for compromise based on CVE-2026-20127 and CVE-2022-20775.

By embracing OpenEoX, we as a collective community can proactively eliminate vulnerabilities, safeguard the digital ecosystem at scale, and counter the ever-increasing exploitation speed of threat actors. 

CISA is holding a series of virtual town hall meetings to allow external stakeholders limited additional opportunity to provide input on refining the scope and burden of the CIRCIA Notice of Proposed Rulemaking (NPR) published in the Federal Register