Skip to content
Hugin
Hugin / Topic

federal-agencies

Every record this desk has filed under federal-agencies, newest first, each with the number of sources it can still show you.

3 recordsOctober 3, 2026 – October 7, 2026All topics
  1. News2 receipts3 min

    None of 24 major federal agencies has fully met the three preparation practices GAO drew from federal guidance for a future quantum computer able to break some of today's encryption.

    The Government Accountability Office reported October 6 that none of the 24 agencies covered by the Chief Financial Officers Act has fully built the cryptography inventories, funding assessments and testing federal guidance calls for before a quantum computer able to break some of today's encryption exists. In a sensitive September 2025 report, GAO made 89 recommendations to CISA and 23 of those agencies: 12 agreed, two partially agreed, one disagreed with three of its four, seven neither agreed nor disagreed, and Interior did not respond.

    Also filed undercybersecurityquantum-computingencryptionpost-quantum-cryptography

  2. News3 receipts2 min

    A third NetScaler flaw in eight days carries an October 7 federal remediation deadline and forensic-triage requirement

    CISA added CVE-2026-88779 to its exploited-vulnerabilities catalog October 4, with an October 7 federal due date. The entry calls for vendor mitigations and compliance with forensic-triage guidance. It is the third NetScaler entry added from September 27 through October 4, by this desk’s count. Affected builds and fixed versions are not established by this catalog record.

    Also filed undercybersecurityvulnerabilitiescitrixnetscaler

  3. News8 receipts3 min

    CISA adds a FortiMail path-traversal flaw and two Zammad flaws to its exploited-vulnerabilities catalog, with federal deadlines October 4 and 5

    CISA's Known Exploited Vulnerabilities catalog, updated October 2 to 1,733 entries, added a critical FortiMail path-traversal flaw (CVE-2026-104286, CVSS 9.8, added October 1, due October 4), plus two Zammad flaws added October 2, due October 5: a session-fixation bug (CVE-2026-102489), fixed in Zammad 7.2.0, and an improper-privilege-management bug (CVE-2026-102490) whose reported scope Zammad says it cannot verify. CISA marks ransomware use Unknown for all three. Fortinet lists its fixed builds as upcoming, so its advisory urges a workaround.

    Also filed undercybersecurityvulnerabilitiesfortinetzammad

A record appears here because it carries federal-agencies in its own tags. If a record you expected is missing, it was filed under a different subject — the full list is on the topics index.