@RoganDawes I felt something was missing in my IT/OT dropboxes, and these have surpassed Phantap in terms of functionality and capabilities for years now.

The difference between an OT dropbox and an IT dropbox lies in their intended use and functionality.

Please excuse me for not revealing more, but I protect my work and research. All too often, companies like hak5... have misused the work of others for their own commercial purposes, and I won’t tolerate that. There will be discussions about the boxes, and the dropboxes will be sent to people I know personally at #INL, #CISA, #Iberdrola, and others.

And since I was asked: my employer won’t be getting a single one, for good reason.

Politico: CISA drops probe into failed polygraph test opened by former chief https://www.politico.com/news/2026/03/28/cisa-polygraph-investigation-closed-00849376 @politico #CISA #infosec
CISA drops probe into failed polygraph test opened by former chief

The department accused seven staffers last July of “misleading” the agency’s former acting director into taking a polygraph.

Politico

DHS dropped their retaliatory probe into CISA staff involved with a counterintelligence polygraph exam for their disgraced former acting director, Gottumukkala.

https://www.politico.com/news/2026/03/28/cisa-polygraph-investigation-closed-00849376

#cisa #infosec #uspol

CISA drops probe into failed polygraph test opened by former chief

The department accused seven staffers last July of “misleading” the agency’s former acting director into taking a polygraph.

Politico
CISA: New Langflow flaw actively exploited to hijack AI workflows

The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical vulnerability identified as CVE-2026-33017, which affects the Langflow framework for building AI agents.

BleepingComputer
U.S. CISA adds a flaw in F5 BIG-IP AMP to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in F5 BIG-IP AMP to its Known Exploited Vulnerabilities catalog.

Security Affairs
CISA and BSI warn orgs of critical PTC Windchill and FlexPLM flaw

CISA warns of a critical flaw in PTC Windchill and FlexPLM (CVE-2026-4681), with no patch yet and potential for imminent exploitation.

Security Affairs

New.

CISA: MAR-25993211-r1.v2 Ivanti Connect Secure (RESURGE) https://www.cisa.gov/news-events/analysis-reports/ar25-087a

Summary: CISA Issues Updated RESURGE Malware Analysis Highlighting a Stealthy but Active Threat https://www.cisa.gov/news-events/news/cisa-issues-updated-resurge-malware-analysis-highlighting-stealthy-active-threat #CISA #malware #infosec #threatresearch

CISA has updated the KEV catalogue.

- CVE-2026-33017: Langflow Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-33017 #CISA #infosec #vulnerability

"Testimony🚨just now at House #DHS CMTE is truly alarming.

Head of #CISA, the US's cybersecurity agency,🚨said they have *1,000* vacancies right now.

Post-DOGE & post-shutdowns.... that number is striking.

This agency🚨protects against attacks on our infrastructure."
-S MacFarlane

#TSA chief:🚨>480 screeners have quit during #shutdown.

HN McNeill:🚨TSA WF stands to lose $1B in missed paychecks should the shutdown persist through Fri.
#Kakistocracy #Fascism #Protest #USPol
https://www.politico.com/live-updates/2026/03/25/congress/tsa-chief-dhs-shutdown-testimony-00844024

CISA has listed four industrial vulnerabilities: https://www.cisa.gov/ #infosec #CISA #vulnerability
Homepage | CISA

CISA leads the effort to enhance the security, resiliency, and reliability of the Nation's cybersecurity and communications infrastructure.