Organizations should use the kev catalog as an input to their vulnerability management prioritization framework.how to use the kev. Cisa has added two new vulnerabilities to its kev catalog, based on evidence of active exploitation. Cisa has added one new vulnerability to its known exploited vulnerabilities (kev) catalog, based on evidence of active exploitation. Cisa may update this alert to reflect new guidance issued by cisa or other parties Learn about the importance of cisa's known exploited vulnerability (kev) catalog and how to use it to help build a collective resilience across the cybersecurity community. Cisa has updated this alert to provide clarification on identifying exchange servers on an organization’s networks and provided further guidance on running the microsoft exchange health checker
A list of known exploited vulnerabilities. Foremost in this testing is the identification of code weaknesses and software vulnerabilities, including those listed in the dhs cisa known exploited vulnerabilities (kev) catalog with vulnerable components either patched, rebuilt, or otherwise mitigated. Cisa releases guidance on unmanned aircraft system detection technology to assist stakeholders with selecting and leveraging capabilities that enhance situational awareness of drone activity.
WATCH