# cybersecurity and infrastructure security agency

Published articles for cybersecurity and infrastructure security agency.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## CISA's Logging Reference Architecture for OMB M-26-14: What federal agencies should do next

DevFeed: [CISA's Logging Reference Architecture for OMB M-26-14: What federal agencies should do next](<https://devfeed.tech/articles/cisa-s-logging-reference-architecture-for-omb-m-26-14-what-federal-agencies-should-do-next-30890.md>)

Original publisher: [Read original article](<https://www.elastic.co/blog/cisa-logging-omb-m-26-14>)

Author: Woody Walton

Published: 2026-09-16T00:00:00Z

Content type: article

Language: en

Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack](<https://devfeed.tech/sources/elastic-blog-elasticsearch-kibana-and-elk-stack.md>)

Topics: [cisa](<https://devfeed.tech/topics/cisa.md>), [Logging](<https://devfeed.tech/topics/logging.md>), [cybersecurity and infrastructure security agency](<https://devfeed.tech/topics/cybersecurity-and-infrastructure-security-agency.md>), [log management](<https://devfeed.tech/topics/log-management.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [implementation](<https://devfeed.tech/topics/implementation.md>), [audit](<https://devfeed.tech/topics/audit.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [architecture](<https://devfeed.tech/tags/architecture.md>), [audit](<https://devfeed.tech/tags/audit.md>), [cisa](<https://devfeed.tech/tags/cisa.md>), [cybersecurity-and-infrastructure-security-agency](<https://devfeed.tech/tags/cybersecurity-and-infrastructure-security-agency.md>), [cybersecurity-open-source-standards-log-management-government](<https://devfeed.tech/tags/cybersecurity-open-source-standards-log-management-government.md>), [government](<https://devfeed.tech/tags/government.md>), [implementation](<https://devfeed.tech/tags/implementation.md>), [logging](<https://devfeed.tech/tags/logging.md>), [logs](<https://devfeed.tech/tags/logs.md>), [public-sector](<https://devfeed.tech/tags/public-sector.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This Elastic blog explains CISA's Logging Reference Architecture for OMB M-26-14 and the actions federal civilian executive branch agencies must take. It highlights planning and maturity deadlines, recommends assessing existing capabilities and documenting gaps, and discusses storage tiers, retrieval, immutability, and audit requirements.

### Source excerpt

Now that CISA has released its Logging Reference Architecture (LRA) for OMB M-26-14, federal agencies tasked to complete their logging plans. In this blog, we walk you through the most important aspects of the LRA guidance.

## Perfect-10 GitLab bug under attack days after patch lands

DevFeed: [Perfect-10 GitLab bug under attack days after patch lands](<https://devfeed.tech/articles/perfect-10-gitlab-bug-under-attack-days-after-patch-lands-21634.md>)

Original publisher: [Read original article](<https://www.theregister.com/security/2026/09/14/perfect-10-gitlab-bug-under-attack-days-after-patch-lands/5296176>)

Author: Carly Page

Published: 2026-09-14T14:30:00Z

Content type: news

Language: en

Sources: [www.theregister.com - Articles](<https://devfeed.tech/sources/www-theregister-com-articles.md>)

Topics: [GitLab](<https://devfeed.tech/topics/gitlab.md>), [bug](<https://devfeed.tech/topics/bug.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Internet](<https://devfeed.tech/topics/internet.md>), [servers](<https://devfeed.tech/topics/servers.md>)

Tags: [bug](<https://devfeed.tech/tags/bug.md>), [cisa](<https://devfeed.tech/tags/cisa.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [cybersecurity-and-infrastructure-security-agency](<https://devfeed.tech/tags/cybersecurity-and-infrastructure-security-agency.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [gitlab](<https://devfeed.tech/tags/gitlab.md>), [internet](<https://devfeed.tech/tags/internet.md>), [security](<https://devfeed.tech/tags/security.md>), [servers](<https://devfeed.tech/tags/servers.md>)

### AI overview

CISA confirms active exploitation of a critical GitLab vulnerability shortly after a patch was released. Security researchers observed attackers probing internet-facing servers.

### Source excerpt

CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers

## Cisco Umbrella for Government: DNS Security Integrated With CISA Protective DNS

DevFeed: [Cisco Umbrella for Government: DNS Security Integrated With CISA Protective DNS](<https://devfeed.tech/articles/cisco-umbrella-for-government-dns-security-integrated-with-cisa-protective-dns-20374.md>)

Original publisher: [Read original article](<https://umbrella.cisco.com/blog/cisco-umbrella-for-government-dns-security-integrated-with-cisa-protective-dns>)

Author: Christina Hausman

Published: 2024-08-29T08:00:00Z

Content type: release

Language: en

Sources: [OpenDNS](<https://devfeed.tech/sources/opendns.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Cisco](<https://devfeed.tech/topics/cisco.md>), [cisa](<https://devfeed.tech/topics/cisa.md>)

Tags: [cisa](<https://devfeed.tech/tags/cisa.md>), [cisco](<https://devfeed.tech/tags/cisco.md>), [cisco-umbrella-for-government](<https://devfeed.tech/tags/cisco-umbrella-for-government.md>), [cybersecurity-and-infrastructure-security-agency](<https://devfeed.tech/tags/cybersecurity-and-infrastructure-security-agency.md>), [dns](<https://devfeed.tech/tags/dns.md>), [dns-layer-security](<https://devfeed.tech/tags/dns-layer-security.md>), [dns-security](<https://devfeed.tech/tags/dns-security.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [government](<https://devfeed.tech/tags/government.md>), [government-cybersecurity](<https://devfeed.tech/tags/government-cybersecurity.md>), [malware](<https://devfeed.tech/tags/malware.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [products-services](<https://devfeed.tech/tags/products-services.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

Cisco Umbrella for Government has achieved FedRAMP Moderate authorization and integrates with CISA Protective DNS. The integration provides DNS-layer protection against malware and phishing and supports on-premises and roaming users across several device platforms.

### Source excerpt

Cisco Umbrella for Government has achieved FedRAMP Moderate authorization*. Eligible customers can now leverage Cisco Umbrella for Government for robust DNS security and to meet the mandate for CISA's Protective DNS with enhanced protection for on-premises and roaming client users. Cisco Umbrella DNS-layer security proactively protects against malware and phishing attacks by blocking access to [...] The post Cisco Umbrella for Government: DNS Security Integrated With CISA Protective DNS appeared first on Cisco Umbrella.

## Grype Adds OpenVEX Support for Vulnerability Analysis

DevFeed: [Grype Adds OpenVEX Support for Vulnerability Analysis](<https://devfeed.tech/articles/vexed-then-grype-about-it-chainguard-and-anchore-announce-grype-supports-openvex-13311.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/vexed-then-grype-about-it-chainguard-and-anchore-announce-grype-supports-openvex>)

Published: 2023-10-10T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [grype](<https://devfeed.tech/topics/grype.md>), [openvex](<https://devfeed.tech/topics/openvex.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [anchore](<https://devfeed.tech/topics/anchore.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [anchore](<https://devfeed.tech/tags/anchore.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cybersecurity-and-infrastructure-security-agency](<https://devfeed.tech/tags/cybersecurity-and-infrastructure-security-agency.md>), [grype](<https://devfeed.tech/tags/grype.md>), [openssf](<https://devfeed.tech/tags/openssf.md>), [openvex](<https://devfeed.tech/tags/openvex.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [security](<https://devfeed.tech/tags/security.md>), [software-bill-of-materials](<https://devfeed.tech/tags/software-bill-of-materials.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [vex](<https://devfeed.tech/tags/vex.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>), [vulnerability-scanner](<https://devfeed.tech/tags/vulnerability-scanner.md>)

### AI overview

Grype, Anchore's open-source vulnerability scanner, now supports OpenVEX, a machine-readable standard for vulnerability analysis. The article explains how this can provide context for vulnerabilities and help reduce false positives and vulnerability-management effort.

### Source excerpt

Open source vulnerability scanner Grype has added support for OpenVEX, making software supply chain security easier. Learn how to implement it today.