CISA
Every ZeroDayFeed story on CISA — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
-
Ransomware
Anne Arundel County confirms files were copied in August intrusion after Rhysida ransomware claim
Anne Arundel County, Md., says an unauthorized actor got into a limited number of systems in August and copied files. The Rhysida gang claimed the attack and says it wants $2 million, but the county won't comment on what data the group says it took.
-
Zero-Days & Exploits
CISA orders patching of exploited Fortinet path-traversal flaw tied to stealthy FortiGate implant at telecom
CISA added Fortinet's CVE-2025-61624 to its KEV catalog with an Oct 19 deadline and a forensic-triage requirement, as Palo Alto Networks links the flaw to a long-running telecom intrusion using a memory-resident FortiGate implant it calls PeerStitch.
-
Breaches
Cyber incident at contractor BAE Systems knocks out federal bankruptcy court noticing systems
A cybersecurity incident at BAE Systems, which runs the federal judiciary's Bankruptcy Noticing Center, has stopped the production and distribution of bankruptcy notices and taken four uscourts.gov services offline, with no restoration timeline yet.
-
Zero-Days & Exploits
Chinese espionage group exploited BeyondTrust Remote Support zero-day since August; CISA deadline is today
BeyondTrust has patched CVE-2026-102764, a Remote Support authentication bypass that Mandiant says has been exploited since Aug. 29 by Armory Castle (formerly UNC5221). CISA's KEV deadline for federal agencies is Oct. 19.
