CISA’s Silent Adjustments Spark Concerns

In 2025, the Cybersecurity and Infrastructure Security Agency (CISA) made 59 subtle updates to its vulnerability alerts. These updates often revealed vulnerabilities exploited by ransomware, yet many went unnoticed. Glenn Thorpe, a senior security researcher at GreyNoise, voiced his concerns regarding the agency’s lack of communication. He emphasized the potential impact this could have had on preventing ransomware incidents.

CISA’s Known Exploited Vulnerabilities (KEV) catalog is designed to highlight critical weaknesses exploited by cybercriminals. This resource assists entities, especially federal agencies, in prioritizing which vulnerabilities need immediate attention. However, Thorpe pointed out a significant flaw: the quick inclusion of vulnerabilities in the catalog often outpaces defenders’ abilities to respond effectively.

Frustration over Lack of Notifications

Thorpe noted that the transition of a vulnerability from “unknown” to “known” represents a crucial shift in risk level. Despite this, CISA does not notify users of such changes; the alteration is simply recorded in a data file. This oversight means defenders might not adjust their threat priorities promptly.

His analysis revealed many vulnerabilities stemmed from major vendors like Microsoft, Ivanti, and Fortinet. With ransomware attackers targeting popular platforms such as VPNs and firewalls, these vulnerabilities become easy targets. Impressively, some vulnerabilities have lingered for over 1,300 days before being flagged as actively exploited.

To enhance awareness, GreyNoise introduced an RSS feed providing hourly updates on ransomware status changes within the KEV catalog.

Stay informed and proactive by considering the latest security updates, and join our community for more cybersecurity insights!

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.