Cyber Security News

CISA to Stop Publishing Cybersecurity Alerts and Advisories on Webpages

Cybersecurity and Infrastructure Security Agency (CISA) has announced significant changes to how it communicates cybersecurity updates and guidance to stakeholders.

In a recent announcement, CISA revealed plans to shift away from listing advisories on its webpage to focus on more direct communication channels.

However, following community feedback, the agency has temporarily paused these changes while it reassesses its approach to information sharing.

CISA initially announced that effective May 12, 2025, cybersecurity updates and new guidance would no longer appear on the agency’s Cybersecurity Alerts & Advisories webpage.

Instead, these critical announcements would be distributed exclusively through CISA’s official social media platforms and email notification systems.

The agency’s stated goal with this transition was to prioritize the visibility of truly urgent information related to emerging threats or significant cyber activity.

This strategic pivot represented a fundamental change in how the federal government’s lead cybersecurity agency delivers time-sensitive information to defenders and organizations across the country.

The restructured approach aimed to streamline information delivery and ensure that critical alerts receive appropriate attention without being lost amid less urgent advisories.

Under the new system, the Cybersecurity Alerts & Advisories webpage would be reserved exclusively for the most pressing security information, creating a clearer signal-to-noise ratio for cyber professionals monitoring potential threats.

This change reflected CISA’s ongoing efforts to optimize its communication strategies in an increasingly complex threat environment.

Notification Methods and Subscription Choices

With the shift away from webpage listings, CISA emphasized alternative methods for stakeholders to stay informed.

The agency encouraged cybersecurity professionals and organizations to subscribe to email notifications through CISA.gov and follow the official @CISACyber account on X (formerly Twitter) for timely security updates.

These channels would serve as the primary distribution mechanisms for standard advisories and guidance documents that previously appeared on the agency’s website.

CISA also announced specific changes for users who track Known Exploited Vulnerabilities (KEV) Catalog updates through RSS feeds.

These users were advised to transition to the KEV subscription topic via GovDelivery to ensure continued receipt of these critical vulnerability notifications.

This adjustment represented a technical modernization of CISA’s notification infrastructure while maintaining service continuity for security professionals who rely on timely vulnerability information.

Stakeholder Feedback and Temporary Pause

Just one day after implementing these changes, on May 13, CISA acknowledged that the new approach had “caused some confusion in the cyber community.”

In response to stakeholder concerns, the agency announced a temporary pause to the immediate changes while it reassessed the optimal approach to information sharing.

This rapid adjustment demonstrated CISA’s responsiveness to community feedback and commitment to effective communication with its diverse stakeholder base.

The agency indicated that during this reassessment period, it would work to develop an improved communication strategy that balances the need for streamlined, attention-grabbing alerts with the accessibility and consistency that cybersecurity professionals have come to expect from CISA.

Throughout this transition, CISA has emphasized its appreciation for stakeholder input and reaffirmed its commitment to maintaining strong connections with the cyber defense community.

As this situation continues to evolve, cybersecurity professionals are encouraged to maintain connections through both traditional and newly emphasized channels to ensure they receive all critical security information from the agency.

Find this News Interesting! Follow us on Google News, LinkedIn, & X to Get Instant Updates!

Mayura Kathir

Mayura Kathir is a cybersecurity reporter at GBHackers News, covering daily incidents including data breaches, malware attacks, cybercrime, vulnerabilities, zero-day exploits, and more.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

2 days ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

2 days ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

2 days ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago