Latest NSA news

NSA: Top 25 vulnerabilities actively abused by Chinese hackers

The U.S. National Security Agency (NSA) warns that Chinese state-sponsored hackers exploit 25 different vulnerabilities in attacks against U.S. organizations and interests.
- Sergiu Gatlan
- October 20, 2020
- 11:20 AM
- 0
NSA offers advice on how to reduce location tracking risks

The U.S. National Security Agency (NSA) today has published guidance on how to expose as little location information as possible while using mobile and IoT devices, social media, and mobile apps.
- Sergiu Gatlan
- August 04, 2020
- 01:10 PM
- 2
NSA releases guidance on securing IPsec Virtual Private Networks

The US National Security Agency (NSA) has published guidance on how to properly secure IP Security (IPsec) Virtual Private Networks (VPNs) against potential attacks.
- Sergiu Gatlan
- July 02, 2020
- 03:02 PM
- 1
NSA: Russian govt hackers exploiting critical Exim flaw since 2019

The U.S. National Security Agency (NSA) says that Russian military threat actors tracked as Sandworm Team have been exploiting a critical flaw in the Exim mail transfer agent (MTA) software since at least August 2019.
- Sergiu Gatlan
- May 28, 2020
- 11:10 AM
- 0
NSA: Hackers exploit these vulnerabilities to deploy backdoors

The U.S. National Security Agency (NSA) and the Australian Signals Directorate (ASD) have jointly issued an advisory warning of threat actors increasingly exploiting vulnerable web servers to deploy web shells.
- Sergiu Gatlan
- April 23, 2020
- 02:10 PM
- 0
NSA Warns About Microsoft Exchange Flaw as Attacks Start

The U.S. National Security Agency (NSA) warned about a post-auth remote code execution vulnerability in all supported Microsoft Exchange Server servers via a tweet published on the agency's Twitter account.
- Sergiu Gatlan
- March 09, 2020
- 05:08 PM
- 0
Bipartisan Coalition Bill Introduced to Reform NSA Surveillance

A bipartisan coalition of U.S. lawmakers introduced a new bill that wants to protect Americans from warrantless government surveillance such as the one run by the National Security Agency (NSA).
- Sergiu Gatlan
- January 23, 2020
- 04:41 PM
- 0
How Malware Gains Trust by Abusing the Windows CryptoAPI Flaw

The new Windows CryptoAPI CVE-2020-0601 vulnerability disclosed by the NSA can be abused by malware developers to sign their executables so that they appear to be from legitimate companies. This creates trust in the program, which may cause a user to be more willing to execute them.
- Lawrence Abrams
- January 17, 2020
- 03:14 PM
- 1
PoCs for Windows CryptoAPI Bug Are Out, Show Real-Life Exploit Risks

Proof-of-concept exploit code is now available for the Windows CryptoAPI spoofing vulnerability tracked as CVE-2020-0601 and reported by the National Security Agency (NSA), just two days after Microsoft released a patch.
- Sergiu Gatlan
- January 16, 2020
- 12:59 PM
- 0
NSA's First Public Vulnerability Disclosure: An Effort to Build Trust

The U.S. National Security Agency (NSA) started a new chapter after discovering and reporting to Microsoft a vulnerability tracked as CVE-2020-0601 and impacting Windows 10 and Windows Server systems.
- Sergiu Gatlan
- January 14, 2020
- 04:07 PM
- 4
NSA Publishes Advisory Addressing Encrypted Traffic Inspection Risks

The National Security Agency (NSA) published an advisory that addresses the risks behind Transport Layer Security Inspection (TLSI) and provides mitigation measures for weakened security in organizations that use TLSI products.
- Sergiu Gatlan
- November 19, 2019
- 05:26 PM
- 0
Russian Hackers Use Iranian Threat Group's Tools, Servers as Cover

The Russian-backed Turla cyber-espionage group used stolen malware and hijacked infrastructure from the Iranian-sponsored OilRig to attack targets from dozens of countries according to a joint United Kingdom's National Cyber Security Centre (NCSC) and U.S. National Security Agency (NSA) advisory published today.
- Sergiu Gatlan
- October 21, 2019
- 03:29 PM
- 0
Hackers Infect Businesses with CryptoMiners Using NSA Leaked Tools

Security researchers have discovered an ongoing cryptojacking campaign which infects unpatched computers of businesses from all over the world with XMRig Monero miners using Equation group's leaked exploit toolkit.
- Sergiu Gatlan
- June 13, 2019
- 05:39 PM
- 2
NSA's Ghidra Reverse Engineering Framework Stirs Up Malware Researchers

The National Security Agency released a free, public version of Ghidra, a set of tools developed internally for software reverse engineering. The agency will also release Ghidra's source code, allowing users to improve the framework's feature set and turn it into a more effective tool.
- Ionut Ilascu
- March 06, 2019
- 10:35 AM
- 0
NSA Releasing the GHIDRA Reverse Engineering Tool at RSAConference

At the RSAConference in March, a free reverse engineering framework called GHIDRA is being released that was developed by the U.S. National Security Agency.
- Lawrence Abrams
- January 05, 2019
- 11:05 AM
- 0
NSA Deletes Hundreds of Millions of Call Records Over "Technical Irregularities"

The US National Security Agency (NSA) announced last week it was mass-deleting hundreds of millions of records of phone calls and text messages dating back to 2015.
- Catalin Cimpanu
- July 02, 2018
- 05:16 AM
- 0
NSA Retreats From Targeted PCs If They're Already Infected by Other APT Malware

Hacking tools leaked last year and believed to belong to the US National Security Agency (NSA) contain an utility for detecting the presence of malware developed by other cyber-espionage groups.
- Catalin Cimpanu
- March 12, 2018
- 12:27 PM
- 0
NSA Exploits Ported to Work on All Windows Versions Released Since Windows 2000

A security researcher has ported three leaked NSA exploits to work on all Windows versions released in the past 18 years, starting with Windows 2000.
- Catalin Cimpanu
- February 05, 2018
- 07:10 AM
- 0
Script Recovers Event Logs Doctored by NSA Hacking Tool

Security researchers have found a way to reverse the effects of an NSA hacking utility that deletes event logs from compromised machines.
- Catalin Cimpanu
- December 11, 2017
- 08:22 AM
- 0
NSA Employee at the Middle of the Kaspersky Saga Admits Taking Files Home

The US Department of Justice (DOJ) has formally charged a former NSA employee for taking classified documents home. The man, Nghia Hoang Pho, 67, of Ellicott City, Maryland, pleaded guilty today, according to court documents released by the DOJ.
- Catalin Cimpanu
- December 02, 2017
- 04:06 AM
- 3