Latest NSA news

NSA and CISA share guidance on securing 5G cloud infrastructure

CISA and the NSA shared guidance on securing cloud-native 5G networks from attacks seeking to compromise information or deny access by taking down cloud infrastructure.
- Sergiu Gatlan
- October 28, 2021
- 01:06 PM
- 0
FBI, CISA, NSA share defense tips for BlackMatter ransomware attacks

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) published today an advisory with details about how the BlackMatter ransomware gang operates.
- Ionut Ilascu
- October 18, 2021
- 06:03 PM
- 0
US government discloses more ransomware attacks on water plants

U.S. Water and Wastewater Systems (WWS) Sector facilities have been breached multiple times in ransomware attacks during the last two years according to joint advisory published by US government agencies on Thursday.
- Sergiu Gatlan
- October 15, 2021
- 03:43 AM
- 0
NSA warns of wildcard certificate risks, provides mitigations

The U.S. National Security Agency (NSA) is warning of the dangers stemming from the use of broadly-scoped certificates to authenticate multiple servers in an organization. These include a recently disclosed ALPACA technique that could be used for various traffic redirect attacks.
- Ionut Ilascu
- October 12, 2021
- 02:23 AM
- 0
NSA, CISA share VPN security tips to defend against hackers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have released guidance for hardening the security of virtual private network (VPN) solutions.
- Ionut Ilascu
- September 28, 2021
- 05:45 PM
- 0
FBI, CISA, and NSA warn of escalating Conti ransomware attacks

CISA, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) warned today of an increased number of Conti ransomware attacks targeting US organizations.
- Sergiu Gatlan
- September 22, 2021
- 01:24 PM
- 0
NSA and CISA share Kubernetes security recommendations

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have published comprehensive recommendations for strengthening the security of an organization's Kubernetes system.
- Ionut Ilascu
- August 04, 2021
- 01:02 AM
- 0
NSA shares guidance on how to secure your wireless devices

The US National Security Agency (NSA) today published guidance on how to properly secure wireless devices against potential attacks targeting them when traveling or working remotely.
- Sergiu Gatlan
- July 29, 2021
- 01:26 PM
- 0
NSA: Russian GRU hackers use Kubernetes to run brute force attacks

The National Security Agency (NSA) warns that Russian nation-state hackers are conducting brute force attacks to access US networks and steal email and files.
- Lawrence Abrams
- July 01, 2021
- 11:00 AM
- 1
NSA shares guidance on securing voice, video communications

The National Security Agency (NSA) has shared mitigations and best practices that systems administrators should follow when securing Unified Communications (UC) and Voice and Video over IP (VVoIP) call-processing systems.
- Sergiu Gatlan
- June 17, 2021
- 02:00 PM
- 1
NSA: Top 5 vulnerabilities actively abused by Russian govt hackers

A joint advisory from the U.S. National Security Agency (NSA), the Cybersecurity and Infrastructure Security Agency (CISA), and the Federal Bureau of Investigation (FBI) warn that the Russian Foreign Intelligence Service (SVR) is exploiting five vulnerabilities in attacks against U.S. organizations and interests.
- Lawrence Abrams
- April 15, 2021
- 09:29 AM
- 0
CISA gives federal agencies until Friday to patch Exchange servers

The US Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to install newly released Microsoft Exchange security updates by Friday.
- Lawrence Abrams
- April 13, 2021
- 05:59 PM
- 0
NSA discovers critical Exchange Server vulnerabilities, patch now

Microsoft today has released security updates for Exchange Server that address a set of four vulnerabilities with severity scores ranging from high to critical.
- Ionut Ilascu
- April 13, 2021
- 03:15 PM
- 0
NSA, Microsoft promote a Zero Trust approach to cybersecurity

The National Security Agency (NSA) and Microsoft are advocating for the Zero Trust security model as a more efficient way for enterprises to defend against today's increasingly sophisticated threats.
- Ionut Ilascu
- February 27, 2021
- 12:03 PM
- 2
Chinese hackers used NSA exploit years before Shadow Brokers leak

Chinese state hackers cloned and started using an NSA zero-day exploit almost three years before the Shadow Brokers hacker group publicly leaked it in April 2017.
- Sergiu Gatlan
- February 22, 2021
- 11:26 AM
- 1
NSA advises companies to avoid third party DNS resolvers

The US National Security Agency (NSA) says that companies should avoid using third party DNS resolvers to block threat actors' DNS traffic eavesdropping and manipulation attempts and to block access to internal network information.
- Sergiu Gatlan
- January 14, 2021
- 01:05 PM
- 3
NSA shares guidance, tools to mitigate weak encryption protocols

The National Security Agency has shared guidance on how to detect and replace outdated Transport Layer Security (TLS) protocol versions with up to date and secure variants.
- Sergiu Gatlan
- January 05, 2021
- 03:15 PM
- 0
NSA warns of hackers forging cloud authentication information

An advisory from the U.S. National Security Agency is providing Microsoft Azure administrators guidance to detect and protect against threat actors looking to access resources in the cloud by forging authentication information.
- Ionut Ilascu
- December 18, 2020
- 11:56 AM
- 1
NSA: Russian state hackers exploit new VMware vulnerability to steal data

The National Security Agency (NSA) warns that Russian state-sponsored threat actors are exploiting a recently patched VMware vulnerability to steal sensitive information after deploying web shells on vulnerable servers.
- Sergiu Gatlan
- December 07, 2020
- 10:03 AM
- 0
VMware fixes zero-day vulnerability reported by the NSA

VMware has released security updates to address a zero-day vulnerability in VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector.
- Sergiu Gatlan
- December 04, 2020
- 07:45 AM
- 0