Gold Eagle: Advancing AI-Driven Vulnerability Reporting
CISA and Treasury are working with federal government and industry partners to implement U.S. government AI policies, drive operational collaboration to reduce cyber risk, and add new capabilities to support Coordinated Vulnerability Disclosure.
CISA, FBI, and Partners Release Joint Cybersecurity Advisory on Gunra Ransomware
Part of the #StopRansomware series, this joint advisory provides technical details on Gunra ransomware, a double-extortion variant now operating as ransomware-as-a-service, along with detection and mitigation guidance.
CISA Releases New Guidance on Open Source Software Security Principles and Practices
Open source software drives innovation but demands careful oversight. Learn how to select, evaluate, and contribute to open source software projects with our new guidance on secure use, software supply chain, and AI-related risks.
2026 Minimum Elements for a Software Bill of Materials (SBOM)
This joint guidance includes refined baseline data fields, practices, and processes for SBOMs that reflect advancements driven by software community adoption.
CISA and Partners Release Joint Guidance on Isolating Vital Operational Technology and Enabling Systems During Crisis
This CI Fortify guidance outlines practical steps for organizations to proactively isolate essential systems, minimize cyber risk through network separation, and ensure critical services stay operational and resilient during disruptions.
CISA Releases Joint Cybersecurity Advisory on Russian State-Supported Threat Actors Targeting Zimbra Collaboration Suite Users
This advisory warns of Russian state-supported threat group LAUNDRY BEAR exploiting a known vulnerability in the Zimbra Collaboration Suite (ZCS) to exfiltrate sensitive data; includes indicators of compromise, mitigations, and remediation guidance.