May 17, 2022

NSA, Allies Issue Cybersecurity Advisory on Weaknesses that Allow Initial Access

The Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA) and the FBI, along with allied nations, published a Cybersecurity Advisory today to raise awareness about the poor security configurations, weak controls and other poor network hygiene practices malicious cyber actors use to gain initial access to a victim’s system.

May 9, 2022

NSA recognizes Codebreaker challenger winners in ceremony shedding light on cybersecurity careers

In recognition of Georgia Tech's 2021 Codebreaker Challenge victory, a team from National Security Agency's (NSA) Academic Outreach team jointly hosted an in-person celebration at Georgia Institute of Technology's CODA Tech Square with Georgia Tech's School of Cybersecurity and Privacy. The NSA Codebreaker Challenge (CBC) is an annual cryptanalysis and reverse engineering event that offers students at U.S.-based schools an opportunity to experience a realistic NSA mission-centric scenario typifying the work that NSA experts perform daily in defense of the Nation.

May 4, 2022

President Biden Signs Memo to Combat Quantum Computing Threat

FORT MEADE, Md. — The White House announced today that President Joe Biden has signed a National Security Memorandum (NSM) aimed at maintaining U.S. leadership in quantum information sciences and to mitigate the risks of quantum computing to the Nation's security.

April 13, 2022

NSA’s Centers of Academic Excellence students give Florida a peek at the Nation’s future cybersecurity workforce

FORT LAUDERDALE, Fla. — Over the course of three days, over 200 students from NSA’s Centers of Academic Excellence in Cybersecurity (NCAE-C) designated schools and USCYBERCOM’s Academic Engagement Network tested the security of a fictional port. Armed with fictitious threat intelligence, students identified solutions and overcame obstacles as they either attacked or defend parts of a Fort Lauderdale port carrying U.S. government defense weapons.

April 13, 2022

NSA partners with DOE, CISA, and FBI to release advisory on APT Cyber Tools Targeting ICS/SCADA devices

FORT MEADE, Md. — The Department of Energy (DOE), along with the Cybersecurity and Infrastructure Agency (CISA), the National Security Agency (NSA), and the Federal Bureau of Investigation (FBI), issued a joint cybersecurity advisory, “APT Cyber Tools Targeting ICS/SCADA Devices,” to warn that certain advanced persistent threat (APT) actors have the capability to gain full system access to multiple industrial control system/supervisory control and data acquisition (ICS/SCADA) devices.

March 21, 2022

NSA provides expertise at Hack the Port 22

FORT MEADE, Md. — A team of NSA cybersecurity practitioners will join over 150 students participating in HackThePort22, hosted by the Maryland Initiative for Security Innovation (MISI) and inspired by US Cyber Command, in Fort Lauderdale, Fla. from March 21-25, 2022.

March 15, 2022

NSA, CISA release Kubernetes Hardening Guidance

FORT MEADE, Md. — The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) released a Cybersecurity Technical Report, “Kubernetes Hardening Guidance,” today. This report details threats to Kubernetes environments and provides configuration guidance to minimize risk.

March 8, 2022

Cybersecurity Speaker Series: Ghidra — Beyond the Code

The National Security Agency (NSA) Cybersecurity Collaboration Center released the fourth video in its Cybersecurity Speaker Series today, focusing on Ghidra, NSA’s open source reverse engineering tool. The Speaker Series highlights subject matter experts at NSA sharing insights, lessons, and contributions of their work in cybersecurity.

March 1, 2022

NSA Details Network Infrastructure Best Practices

The National Security Agency (NSA) released the “Network Infrastructure Security Guidance” Cybersecurity Technical Report today. The report captures best practices based on the depth and breadth of experience in supporting customers and responding to threats. 

Feb. 17, 2022

NSA Publishes Best Practices for Selecting Cisco Password Types

The National Security Agency published guidance today to help administrators secure network infrastructure devices and their credentials. The “Cisco Password Types: Best Practices” Cybersecurity Information Sheet analyzes Cisco’s wide variety of password encryption and hashing schemes to secure passwords stored in configuration files. NSA provides recommendations based on each password type and best practices to help administrators secure sensitive credentials.