US flag signifying that this is a United States Federal Government website

  Official website of the Cybersecurity and Infrastructure Security Agency

Official websites use .gov

A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS

A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

All Recent News

Third PQC Standardization Conference
Enhancing Software Supply Chain Security: Workshop and Call for Position Papers on Standards and Guidelines
It’s Time to Prepare for a Rise in Insider Threats
Microsoft, Adobe Exploits Top List of Crooks’ Wish List
What a Year It’s Been: RSA 2021 Embraces ‘Resilience’
Workshop and Call for Position Papers on Standards and Guidelines to Enhance Software Supply Chain Security
FIN7 Backdoor Masquerades as Ethical Hacking Tool
‘Scheme Flooding’ Allows Websites to Track Users Across Browsers
CISA Publishes Eviction Guidance for Networks Affected by SolarWinds and AD/M365 Compromise
Verizon: Pandemic Ushers in ⅓ More Cyber-Misery
WordPress Releases Security Update
Colonial Pipeline Shells Out $5M in Extortion Payout, Report
Ransomware Going for $4K on the Cyber-Underground
Five Critical Password Security Rules Your Employees Are Ignoring
NIST Releases Tips and Tactics for Dealing With Ransomware
Researchers Flag e-Voting Security Flaws
Adobe Releases Security Updates for Multiple Products 
Microsoft Releases May 2021 Security Updates
Citrix Releases Security Updates for Workspace App for Windows
Juniper Networks Releases Security Updates
Wormable Windows Bug Opens Door to DoS, RCE
Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader
Fake Chrome App Anchors Rapidly Worming ‘Smish’ Cyberattack
Joint CISA-FBI Cybersecurity Advisory on DarkSide Ransomware
Shifting Threats in a Changed World: Edge, IoT and Vaccine Fraud
DarkSide Wanted Money, Not Disruption from Colonial Pipeline Attack
Google Releases Security Updates for Chrome
Lemon Duck Cryptojacking Botnet Changes Up Tactics
NIST Releases Draft of NIST SP 800-161, Revision 1 for comment, Cyber Supply Chain Risk Management Practices for Systems and Organizations.
NIST Requests Public Comments on Several Existing Cryptography Standards and Special Publications
Major U.S. Pipeline Crippled in Ransomware Attack
Exim Releases Security Update
Joint NCSC-CISA-FBI-NSA Cybersecurity Advisory on Russian SVR Activity
 Cisco Releases Security Updates for Multiple Products 
Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks
Mozilla Releases Security Updates for Firefox
VMware Releases Security Update
CISA Releases Analysis Reports on New FiveHands Ransomware
Second Draft of “Securing Telehealth Remote Patient Monitoring Ecosystem” (SP 1800-30) is Available for Comment
Pulse Secure VPNs Get a Fix for Critical Zero-Day Bugs
Apple Fixes Zero‑Day Security Bugs Under Active Attack
Apple Releases Security Updates
Sneakers, Gaming, Nvidia Cards: Retailers Can Stop Shopping Bots
Scripps Health Cyberattack Causes Widespread Hospital Outages
Ivanti Releases Pulse Secure Security Update
Codecov Releases New Detections for Supply Chain Compromise
Samba Releases Security Updates
CISA Updates Alert on Pulse Connect Secure
Microsoft Warns of 25 Critical Vulnerabilities in IoT, Industrial Devices
Babuk Ransomware Gang Mulls Retirement
F5 Big-IP Vulnerable to Security-Bypass Bug
Experian API Leaks Most Americans’ Credit Scores
CISA Releases ICS Advisory on Real-Time Operating System Vulnerabilities
Cisco Releases Security Updates for Multiple Products
ISC Releases Security Advisory for BIND
Anti-Vaxxer Hijacks QR Codes at COVID-19 Check-In Sites
Comments Sought on Updates to Cyber Supply Chain Risk Management Practices for Systems and Organizations (Draft NIST SP 800-161, Revision 1)
Implementing the HIPAA Security Rule: Call for Comments on SP 800-66, Revision 1
Google Chrome V8 Bug Allows Remote Code-Execution
Challenges with Adopting Post-Quantum Cryptographic Algorithms: Final Version of Cybersecurity White Paper Published
Nintendo Sues Video-Game Pirates
Linux Kernel Bug Opens Door to Wider Cyberattacks
Apple Releases Security Updates
Google Releases Security Updates for Chrome
Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses
Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software
CISA and NIST Release New Interagency Resource: Defending Against Software Supply Chain Attacks
NIST Releases Measurement Tool for Emerging BGP Security Technologies
FBI-DHS-CISA Joint Advisory on Russian Foreign Intelligence Service Cyber Operations
Oscar-Bait, Literally: Hackers Abuse Nominated Films for Phishing, Malware
5 Fundamental But Effective IoT Device Security Controls
REvil’s Big Apple Ransomware Gambit Looks to Pay Off
Spotlight on Cybercriminal Supply Chains
CISA Incident Response to SUPERNOVA Malware
Telegram Platform Abused in ‘ToxicEye’ Malware Campaigns
It’s Easy to Become a Cyberattack Target, but a VPN Can Help
Drupal Releases Security Updates
4 Innovative Ways Cyberattackers Hunt for Security Bugs
QR Codes Offer Easy Cyberattack Avenues as Usage Spikes
SonicWall Releases Patches for Email Security Products
Pulse Secure Critical Zero-Day Security Bug Under Active Exploit
Google Releases Security Updates for Chrome
Novel Email-Based Campaign Targets Bloomberg Clients with RATs
CISA Issues Emergency Directive on Pulse Connect Secure
Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock
CISA Releases Alert on Exploitation of Pulse Connect Secure Vulnerabilities
Oracle Releases April 2021 Critical Patch Update
GEICO Alerts Customers Hackers Stole Driver License Data for Two Months
VMware Releases Security Update
Mozilla Releases Security Update for Firefox, Firefox ESR, and Thunderbird
Ransomware: A Deep Dive into 2021 Emerging Cyber-Risks
What COVID-19 Taught Us: Prepping Cybersecurity for the Next Crisis
Return to top Return to Top