Latest NSA news

Microsoft: APT28 hackers exploit Windows flaw reported by NSA

Microsoft warns that the Russian APT28 threat group exploits a Windows Print Spooler vulnerability to escalate privileges and steal credentials and data using a previously unknown hacking tool called GooseEgg.
- Sergiu Gatlan
- April 22, 2024
- 01:22 PM
- 0
CISA shares critical infrastructure defense tips against Chinese hackers

CISA, the NSA, the FBI, and several other agencies in the U.S. and worldwide warned critical infrastructure leaders to protect their systems against the Chinese Volt Typhoon hacking group.
- Sergiu Gatlan
- March 19, 2024
- 04:18 PM
- 0
CISA, NSA share best practices for securing cloud services

The NSA and the Cybersecurity and Infrastructure Security Agency (CISA) have released five joint cybersecurity bulletins containing on best practices for securing a cloud environment.
- Lawrence Abrams
- March 07, 2024
- 06:05 PM
- 0
NSA shares zero-trust guidance to limit adversaries on the network

The National Security Agency is sharing new guidance to help organizations limit an adversary's movement on the internal network by adopting zero-trust framework principles.
- Ionut Ilascu
- March 05, 2024
- 06:29 PM
- 1
NSA and CISA reveal top 10 cybersecurity misconfigurations

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) revealed today the top ten most common cybersecurity misconfigurations discovered by their red and blue teams in the networks of large organizations.
- Sergiu Gatlan
- October 05, 2023
- 02:08 PM
- 0
FBI, CISA, and NSA reveal top exploited vulnerabilities of 2022

In collaboration with CISA, the NSA, and the FBI, Five Eyes cybersecurity authorities have issued today a list of the 12 most exploited vulnerabilities throughout 2022.
- Sergiu Gatlan
- August 03, 2023
- 11:08 AM
- 0
CISA warns of breach risks from IDOR web app vulnerabilities

CISA warned today of the significant breach risks linked to insecure direct object reference (IDOR) vulnerabilities impacting web applications in a joint advisory with the Australian Cyber Security Centre (ACSC) and U.S. National Security Agency (NSA).
- Sergiu Gatlan
- July 28, 2023
- 12:10 PM
- 0
NSA shares tips on blocking BlackLotus UEFI malware attacks

The U.S. National Security Agency (NSA) released today guidance on how to defend against BlackLotus UEFI bootkit malware attacks.
- Sergiu Gatlan
- June 22, 2023
- 04:50 PM
- 0
NSA shares guidance on how to secure your home network

The U.S. National Security Agency (NSA) has issued guidance to help remote workers secure their home networks and defend their devices from attacks.
- Sergiu Gatlan
- February 22, 2023
- 04:40 PM
- 2
CISA: Federal agencies hacked using legitimate remote desktop tools

CISA, the NSA, and MS-ISAC warned today in a joint advisory that attackers are increasingly using legitimate remote monitoring and management (RMM) software for malicious purposes.
- Sergiu Gatlan
- January 25, 2023
- 04:18 PM
- 0
NSA shares tips on mitigating 5G network slicing threats

The National Security Agency (NSA), the Cybersecurity and Infrastructure Security Agency (CISA), and the Office of the Director of National Intelligence (ODNI), have published a joint report that highlights the most likely risks and potential threats in 5G network slicing implementations.
- Bill Toulas
- December 14, 2022
- 11:02 AM
- 0
NSA shares supply chain security tips for software suppliers

NSA, CISA, and the Office of the Director of National Intelligence (ODNI) have shared a new set of suggested practices that software suppliers (vendors) can follow to secure the supply chain.
- Sergiu Gatlan
- October 31, 2022
- 12:54 PM
- 1
US govt shares top flaws exploited by Chinese hackers since 2020

NSA, CISA, and the FBI revealed today the top security vulnerabilities most exploited by hackers backed by the People's Republic of China (PRC) to target U.S. government and critical infrastructure networks.
- Sergiu Gatlan
- October 06, 2022
- 02:53 PM
- 3
NSA shares guidance to help secure OT/ICS critical infrastructure

The National Security Agency (NSA) and CISA have issued guidance on how to secure operational technology (OT) and industrial control systems (ICSs) part of U.S. critical infrastructure.
- Sergiu Gatlan
- September 22, 2022
- 02:49 PM
- 1
NSA and CISA share tips to secure the software supply chain

The U.S. National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have released guidance today with tips on how to secure the software supply chain.
- Sergiu Gatlan
- September 01, 2022
- 11:21 AM
- 0
NSA shares tips on securing Windows devices with PowerShell

The National Security Agency (NSA) and cybersecurity partner agencies issued an advisory today recommending system administrators to use PowerShell to prevent and detect malicious activity on Windows machines.
- Ionut Ilascu
- June 22, 2022
- 06:10 PM
- 5
US: Chinese govt hackers breached telcos to snoop on network traffic

Several US federal agencies today revealed that Chinese-backed threat actors have targeted and compromised major telecommunications companies and network service providers to steal credentials and harvest data.
- Sergiu Gatlan
- June 07, 2022
- 06:43 PM
- 1
Cybersecurity agencies reveal top initial access attack vectors

A joint security advisory issued by multiple national cybersecurity authorities revealed today the top 10 attack vectors most exploited by threat actors for breaching networks.
- Sergiu Gatlan
- May 17, 2022
- 11:33 AM
- 0
Cybersecurity agencies reveal top exploited vulnerabilities of 2021

In partnership with the NSA and the FBI, cybersecurity authorities worldwide have released today a list of the top 15 vulnerabilities routinely exploited by threat actors during 2021.
- Sergiu Gatlan
- April 27, 2022
- 11:08 AM
- 0
US warns of govt hackers targeting industrial control systems

A joint cybersecurity advisory issued by CISA, NSA, FBI, and the Department of Energy (DOE) warns of government-backed hacking groups being able to hijack multiple industrial devices using a new ICS-focused malware toolkit.
- Sergiu Gatlan
- April 13, 2022
- 01:53 PM
- 0