NSA Cybersecurity Advisories & Guidance


NSA leverages its elite technical capability to develop advisories and mitigations on evolving cybersecurity threats.

Browse or search our repository of advisories, info sheets, tech reports, and operational risk notices listed below. Some resources have access requirements.

For a subset of cybersecurity products focused on telework and general network security for end users, view our Telework and Mobile Security Guidance page.

To read our complete series on protecting DoW microelectronics from adversary influence, view our DoW Microelectronics Guidance page.

ImageTitlePublication Date
CTR: Zero Trust Implementation Guideline PrimerCTR: Zero Trust Implementation Guideline Primer1/14/2026
CTR: Zero Trust Implementation Guideline Discovery PhaseCTR: Zero Trust Implementation Guideline Discovery Phase1/14/2026
CTR: Zero Trust Implementation Guideline Phase TwoCTR: Zero Trust Implementation Guideline Phase Two1/30/2026
CTR: Zero Trust Implementation Guideline Phase OneCTR: Zero Trust Implementation Guideline Phase One1/30/2026
Cisco SD-WAN Threat Hunt GuideCisco SD-WAN Threat Hunt Guide2/25/2026
CSA: Exploitation of SD-WAN AppliancesCSA: Exploitation of SD-WAN Appliances2/25/2026
CSI: AI ML Supply Chain Risks and MitigationsCSI: AI ML Supply Chain Risks and Mitigations3/13/2026
CSI: Securing Space Cyber Security For Low Earth Orbit Satellite CommunicationsCSI: Securing Space Cyber Security For Low Earth Orbit Satellite Communications3/24/2026
Joint CSA: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical InfrastructureJoint CSA: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure4/7/2026
Public Service Announcement: Russian GRU Exploiting Vulnerable Routers to Steal Sensitive DataPublic Service Announcement: Russian GRU Exploiting Vulnerable Routers to Steal Sensitive Data4/7/2026
Page 18 of 18

Additional Documents

Some guidance is protected and requires use of a DoW Common Access Card (CAC) to access. Visit https://cyber.mil/nsa/cybersecurity-advisories-and-technical-guidance/ to access the following and other protected documents:

  • Avoid Dangers of Wildcard TLS Certificates and the ALPACA Technique (FOUO version)
  • Protecting VSAT Communications
  • Quantum Security of Symmetric Cryptography and Hash Functions: A Review
  • Securing AWS S3
  • Security Considerations for Office 365 Government Customers