2 items tagged with "cisa"
US law requiring critical infrastructure entities to report covered cyber incidents and ransomware payments to CISA within defined deadlines.
The KEV catalog is CISA’s authoritative list of vulnerabilities with reliable evidence of active exploitation in the wild — confirmed fact, not prediction.