View post on Reddit.

CISA has ordered federal agencies to patch a critical Splunk Enterprise flaw, CVE-2026-20253, after confirming it is being actively exploited in attacks. The vulnerability affects multiple Splunk Enterprise versions and can enable unauthorized file operations and potentially remote code execution, prompting urgent fixes and mitigation guidance from Splunk and CISA. #CVE-2026-20253 #SplunkEnterprise #CISA #BOD26-04

CISA ordered U.S. federal agencies to patch the actively exploited Ivanti Sentry flaw CVE-2026-10520 within three days after it was added to the KEV Catalog under BOD 26-04. Shadowserver reported widespread exploitation attempts and likely compromise of unpatched Internet-exposed Ivanti Sentry gateways. #CVE-2026-10520 #IvantiSentry #CISA #Shadowserver #BOD26-04

CISA has directed federal agencies to prioritize patching based on four urgency criteria, including public exposure, exploit automation, system takeover potential, and active real-world exploitation. The new BOD 26-04 aims to speed remediation for the most critical vulnerabilities, with some fixes required in as little as three days and broader policy updates due over the next 180 days. #CISA #BOD26-04 #KEVCatalog

Thank you for your interest in joining the Riverside LGBTQ+ Pride Board of Directors! Riverside LGBTQ+ Pride is a 100% volunteer-powered organization. None of us are paid staff and we […]