DC3 DCISE

Official X account of the U.S. DoD-Defense Industrial Base Collaborative Information Sharing Environment (DCISE)

[DC3 DCISE @DC3DCISE]

#DCISEAlert: PAN-OS RCE threatens firewall management systems
Patch affected systems or restrict management access to trusted IPs to reduce the risk of privileged compromise.
Check guidance: https://t.co/IOqwHryC46

[DC3 DCISE @DC3DCISE]

Zimbra Expolit (CVE-2026-73570)
🛡 Update affected Zimbra servers to reduce the risk of command injection and data theft.e threat and mitigation guidance: https://t.co/d8IMPfqn3b…

[DC3 DCISE @DC3DCISE]

Review your reporting procedures and ensure your team knows when and how to submit a mandatory incident report.
📩 Need guidance? Contact DCISE: [email protected]

[DC3 DCISE @DC3DCISE]

#ZeroDayVulnerabilities
🎯 Threat: Successful exploitation of CVE-2026-88771 and CVE-2026-88772 lead to deployment of WHIPSHOT webshells and SLAPSHOT proxy tunnels for reconnaissance and credential theft.
🛡 Take Action: Response resources at https://t.co/mNLeoTbkcj…

[DC3 DCISE @DC3DCISE]

#Warning: Citrix NetScaler SAML Exploited
🎯 Threat: Exploitation of CVE-2026-88779 results in memory overflow leading to Denial of Service.
🛡 Take Action: Update relevant version https://t.co/XInFnde675

[DC3 DCISE @DC3DCISE]

#Warning: Microsoft SharePoint RCE
🎯 Threat: CVE-2026-65660 allows improper code injection in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
🛡 Take Action: Patch immediately https://t.co/iLbalAIMre.

[CISA Cyber @CISACyber]

🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 https://t.co/8vu6SvNzfB

[DC3 DCISE @DC3DCISE]

#Warning: Critical
MikroTik RouterOS Flaw
🎯 Threat: Successful exploitation of CVE-2026-84411 could allow an attacker to achieve remote code execution or cause a denial of service.
🛡 Take Action: Update RouterOS to 7.24+ immediately https://t.co/tyMtYmSZm2

[DC3 DCISE @DC3DCISE]

#Warning: Microsoft Exchange Flaw
Threat: CVE-2026-96940 allows authenticated attackers to gain access to other users' mailboxes within the same organization and read email messages and attachments.
Take Action: Update security patches via https:// https://t.co/OJ0cCwOtoM)

[DC3 DCISE @DC3DCISE]

Defending the DIB alone is a losing strategy.
Advanced adversaries exploit silos.
What hits your neighbor today could hit your network tomorrow.
Join the DIB Cybersecurity Program
Email [email protected] for more

[DC3 DCISE @DC3DCISE]

Blind spots in your network visibility make you an easy target for APTs looking to breach the DIB.
Action: Enroll in ENSITE. Get a customized, near real-time network monitoring dashboard.
Email [email protected] to learn more.

[DC3 DCISE @DC3DCISE]

https://t.co/uBTPh1Ilvm)

[DC3 DCISE @DC3DCISE]

#DCISEAlert: Citrix NetScaler Vulnerabilities Exploited
Threat: CVE-2026-88771 & CVE-2026-88772 (CVSS 9.5) enable RCE and Denial-of-Service in NetScaler ADC & Gateway.
Action: Apply Citrix security updates immediately to mitigate threat vector.

[DC3 DCISE @DC3DCISE]

https://t.co/uzht7h5flG

[DC3 DCISE @DC3DCISE]

CISA Adds Zyxel GS1900 Vulnerability to KEV
Threat: CVE-2026-7273, affecting Zyxel GS1900 Series Switches, is actively being exploited.
Action: Prioritize and apply mitigation guidance immediately to secure publicly exposed switches.

[DC3 DCISE @DC3DCISE]

https://t.co/M61F26gwgb

[DC3 DCISE @DC3DCISE]

#DCISEWarning: CISA Adds Cisco Secure Email Gateway Flaw to KEV
Threat: CVE-2026-76461 (SQLi, root command execution) is actively exploited in the wild via crafted email message parsing.
Action: Upgrade AsyncOS to 15.5.5-014, 16.0.4-302, or
16.5.0-780 now.

[DC3 DCISE @DC3DCISE]

https://t.co/GImaNuwf1N

[DC3 DCISE @DC3DCISE]

#DCISEWarning: Multiple Ivanti Vulnerabilities Disclosed
Threat: Ten CVEs across EMM, Neurons for ITSM, and Sentry enable privilege escalation (CVE-2026-18851, CVSS 8.8) and remote code execution (RCE) attacks.
Action: Apply September 2026 patches immediately.

[DC3 DCISE @DC3DCISE]

https://t.co/TyGzQIjA6Z)

[DC3 DCISE @DC3DCISE]

#DCISEWarning: VMware Center Targeted
by Chinese APTs
Threat: CVE-2026-59309 (Auth Bypass) & CVE-2026-59310 (RCE, CISA KEV) used to install reverse SSi backdoors.
Action: Patch immediately & check for
"vcenter_admin" or "zz-poc59310-syslog.log".