The vendor said the memory-corruption defect was exploited to target specific people, but it did not describe the objectives of the attack.

One industry official told CyberScoop the town halls are probably not what CIRCIA needs right now.

Acting Director Madhu Gottumukkala said it could affect everything from responding to threats to finalizing CIRCIA regulations.

Microsoft said three of the exploited vulnerabilities were publicly known, suggesting attackers already had details about the defects prior to Tuesday’s release.

The Cybersecurity and Infrastructure Security Agency said the attack highlighted threats from vulnerable edge devices to operational technology and industrial control systems.

Shadowserver scans have identified 86 compromised instances, and researchers warn multiple threat groups are involved.

A binding operational directive issued Thursday looks to combat an attack pathway that has been behind some of the biggest attacks and most common exploits in recent…

Nick Andersen, a top CISA official, discussed plans for improving CIPAC and developing an AI-ISAC.

Limited attacks occurred prior to Ivanti’s disclosure, followed by mass exploitation by multiple threat groups. More than 1,400 potentially vulnerable instances remain exposed.

Secretaries of State are scrambling to replace cybersecurity services once provided by CISA and other federal agencies.