For providers

The U.S. Department of Justice announced that charges have been filed against 12 other individuals accused of being involved in an over $200 million cryptocurrency theft and laundering scheme following the arrest and indictment of Malone Lam and Jeandiel Serrano in September.

House and Senate lawmakers from both sides of the aisle have expressed continued support for the dual-hat relationship between the National Security Agency and U.S. Cyber Command amid speculation that both roles would be separated following the ouster of NSA and Cyber Command Director Timothy Haugh last month.

The Office of Personnel Management has been urged by Senate Select Committee on Intelligence Vice Chairman Mark Warner, D-Va., to ensure the continuation of identity protection services provided to current and former federal employees whose data had been stolen in the colossal breach of the agency a decade ago, according to FedScoop.

Healthcare organizations were targeted with 45 cyberattacks last year, which was not only a significant increase from the year before but also higher than the incidence in the finance, energy, insurance, and telecommunications industries, Infosecurity Magazine reports.

Join us at Cisco Live San Diego to explore Cisco XDR’s latest innovations, including custom integrations, AI automation, and community features. Don’t miss out!

CISA has added six new vulnerabilities to its  Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CVE-2024-11182 MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability CVE-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CVE-2023-38950 ZKTeco BioTime Path Traversal Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the  BOD 22-01 Fact Sheet for more information. Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of  Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the  specified criteria.