Jan. 25, 2023

NSA, CISA, and MS-ISAC Release Guidance for Securing Remote Monitoring and Management Software

The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Multi-State Information Sharing and Analysis Center (MS-ISAC) released the “Protecting Against Malicious Use of Remote Monitoring and Management Software” Cybersecurity Advisory (CSA) today to help network defenders protect against the malicious use of legitimate remote monitoring and management (RMM) software.

Dec. 15, 2022

NSA Publishes 2022 Cybersecurity Year in Review

The National Security Agency published its 2022 Cybersecurity Year in Review today to share its mission focuses and demonstrate how it is producing cybersecurity outcomes for the nation.

Dec. 8, 2022

NSA Releases Series on Protecting DoD Microelectronics From Adversary Influence

The National Security Agency’s Joint Federated Assurance Center (JFAC) Hardware Assurance Lab publicly released four Cybersecurity Technical Reports today to help the Department of Defense protect field-programmable gate array (FPGA)-based systems from adversary influence.

Oct. 3, 2022

Collective Defense — Integrated cyber expertise hardens cybersecurity

Every October, the National Cybersecurity Alliance (NCSA) and Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) come together with industry and government to promote cybersecurity awareness and best practices for all Americans. NSA joins again this year with the NCSA and the CISA for the 19th Annual Cybersecurity Awareness Month as a Cyber Champion.

Sept. 14, 2022

Iranian Cyber Actors Exploit Known Vulnerabilities to Extort U.S. Critical Infrastructure Organizations, Other Victims

In a Cybersecurity Advisory released today, the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), NSA, U.S. Cyber Command, the Department of Treasury and international partners reveal how Iranian cyber actors continue to exploit known vulnerabilities on unprotected networks to extort and ransom victims, including U.S. critical infrastructure organizations.

Sept. 7, 2022

NSA Releases Future Quantum-Resistant (QR) Algorithm Requirements for National Security Systems

The National Security Agency (NSA) released the “Announcing Commercial National Security Algorithm Suite 2.0” (CNSA 2.0) Cybersecurity Advisory (CSA) today to notify National Security Systems (NSS) owners, operators and vendors of the future quantum-resistant (QR) algorithms requirements for NSS — networks that contain classified information or are otherwise critical to military and intelligence activities.

June 22, 2022

NSA, Partners Recommend Properly Configuring, Monitoring PowerShell in New Report

The National Security Agency (NSA) and partner cybersecurity authorities released a Cybersecurity Information Sheet today recommending that Microsoft Windows® operators and administrators properly configure and monitor PowerShell to prevent and detect abuse by malicious actors.

June 16, 2022

Cybersecurity Speaker Series: Defense Industrial Base

The National Security Agency (NSA) Cybersecurity Collaboration Center released the latest video in its Cybersecurity Speaker Series today, focusing on the Defense Industrial Base (DIB). The DIB consists of hundreds of thousands of technology, manufacturing, and service companies around the world that design, develop, and produce the Department of Defense’s critical systems, platforms and technologies required to defend the nation.

May 25, 2022

NSA is heading in-person to RSAC 2022

The National Security Agency (NSA) is taking the show on the road, heading to the 2022 RSA Conference from June 6-10 in San Francisco, California.

May 17, 2022

NSA, Allies Issue Cybersecurity Advisory on Weaknesses that Allow Initial Access

The Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA) and the FBI, along with allied nations, published a Cybersecurity Advisory today to raise awareness about the poor security configurations, weak controls and other poor network hygiene practices malicious cyber actors use to gain initial access to a victim’s system.