NAC A.I CyberSecurity Scoring
19/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for National Association of Counties in 2026.
No incidents recorded for National Association of Counties in 2026.
No incidents recorded for National Association of Counties in 2026.
Public Policy Offices
Latest updates, reports, and threat intel affecting the global network.
Action Needed. Urge your Members of Congress to support legislation to reauthorize the State and Local Cybersecurity Grant Program (SLCGP).
Friday, March 6, 2026 | 2:00 p.m. - 3:00 p.m. ETCyber threats are increasingly targeting public sector finance teams and resilience starts with...
The FBI's CJIS Security Policy 6.0 requires agencies to move beyond point-in-time compliance and demonstrate continuous governance, risk management,...
The U.S. House passed a bill to reauthorize the State and Local Cybersecurity Grant Program, a key priority for counties. The U.S. Senate has also...
The PILLAR Act, which would renew federal cybersecurity grants to state and local governments for 10 years, passed by voice vote in the...
During Cybersecurity Awareness Month (October), the National Association of Counties (NACo) is offering exclusive scholarships that reduce...
Join county IT leaders to hear how they are defending local government systems, staff, and constituents from ever-increasing cyber-attacks.
The Trump administration wants CISA to transition to a “new model” for supporting local government agencies' cyber strategy.
Groups including the National Governors Association and NASCIO have signed a letter asking Congress to reauthorize the State and Local...
A vulnerability was identified in Databend up to 1.2.881 on HTTP. This affects the function ClientSessionManager::state_key of the file src/query/service/src/servers/http/v1/session/client_session_manager.rs of the component Tenant Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The pull request to fix this issue awaits acceptance.
A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory.handlers.ts of the component Memory REST API. Executing a manipulation of the argument conversationId can lead to improper authorization. The attack may be performed from remote. This attack is characterized by high complexity. The exploitation is known to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.
A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the component Password Protection Handler. Performing a manipulation results in use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.
A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remove_file of the file src/ragapp/backend/controllers/files.py of the component Knowledge File Handler. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.
A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sharing Handler. This manipulation of the argument conversation.agent causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.