A vulnerability that meets all four criteria would need to be fixed within three days, for instance.

Acting director Nick Andersen said a binding operational directive is en route for agencies, and that more specific discussions need to happen with critical infrastructure owners.

A binding operational directive issued Thursday looks to combat an attack pathway that has been behind some of the biggest attacks and most common exploits in recent…

While CISA says the catalog is catching on, some think it needs improvement.

CISA wants agencies to tackle nearly 300 flaws in all, ranging from within two weeks to six months.

It’s the latest sign that federal officials are warming to white-hat hackers from various walks of life.

The Department of Homeland Security’s cybersecurity division is trying something new in appealing for public input before issuing an order.

A directive under consideration at CISA would order agencies to set up disclosure programs to work with outside security researchers.

Hackers are getting quicker at exploiting flaws. DHS wants agencies to faster than the hackers.

In a letter posted on the company's website, CEO Eugene Kaspersky claims DHS did not give his company due process.