US flag signifying that this is a United States Federal Government website

  Official website of the Cybersecurity and Infrastructure Security Agency

Official websites use .gov

A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS

A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

All Recent News

Sep 24, 2021
VMware vCenter Server Vulnerability CVE-2021-22005 Under Active Exploit
Sep 24, 2021
Google Releases Security Updates for Chrome
Sep 24, 2021
Critical Cisco Bugs Allow Code Execution on Wireless, SD-WAN
Sep 23, 2021
REvil Affiliates Confirm: Leadership Were Cheating Dirtbags
Sep 23, 2021
Apple Releases Security Updates
Sep 23, 2021
5 Tips for Achieving Better Cybersecurity Risk Management
Sep 23, 2021
100M IoT Devices Exposed By Zero-Day Bug
Sep 23, 2021
Cisco Releases Security Updates for Multiple Products
Sep 23, 2021
Acronis Offers up to $5,000 to Users Who Spot Bugs in Its Cyber Protection Products
Sep 23, 2021
Federal Government Perspectives on Managing Supply Chain Cybersecurity Risks to Computing Devices Webinar
Sep 23, 2021
DHS, NIST Coordinate in Releasing Preliminary Cybersecurity Performance Goals for Critical Infrastructure Control Systems
Sep 23, 2021
Large-Scale Phishing-as-a-Service Operation Exposed
Sep 22, 2021
CISA, FBI, and NSA Release Joint Cybersecurity Advisory on Conti Ransomware 
Sep 22, 2021
VMware Warns of Ransomware-Friendly Bug in vCenter Server
Sep 22, 2021
Google Releases Security Updates for Chrome
Sep 22, 2021
TikTok, GitHub, Facebook Join Open-Source Bug Bounty
Sep 22, 2021
Feds Sanctions SUEX Cryptocurrency Exchange for Laundering Ransomware Payouts
Sep 21, 2021
NETGEAR Releases Security Updates for RCE Vulnerability
Sep 21, 2021
VMware Releases Security Updates
Sep 21, 2021
Apple Releases Security Updates for Multiple Products
Sep 21, 2021
46% of On-Prem Databases Globally Contain Vulnerabilities: Is Yours Safe?
Sep 21, 2021
Securing the IIoT—Cybersecurity for Distributed Energy Resources: Draft SP 1800-32 Available for Comment
Sep 21, 2021
Pre-Draft Call for Comments | Incorporating Privacy in Awareness and Training
Sep 20, 2021
Europol Breaks Open Extensive Mafia Cybercrime Ring
Sep 17, 2021
Ditch the Alert Cannon: Modernizing IDS is a Security Must-Do
Sep 17, 2021
Microsoft MSHTML Flaw Exploited by Ryuk Ransomware Gang
Sep 16, 2021
ACSC Releases Annual Cyber Threat Report
Sep 16, 2021
FBI-CISA-CGCYBER Advisory on APT Exploitation of ManageEngine ADSelfService Plus Vulnerability
Sep 16, 2021
Microsoft Releases Security Update for Azure Linux Open Management Infrastructure
Sep 16, 2021
Drupal Releases Multiple Security Updates
Sep 16, 2021
Financial Cybercrime: Following Cryptocurrency via Public Ledgers
Sep 16, 2021
DDoS Attacks: A Flourishing Business for Cybercrooks – Podcast
Sep 16, 2021
HP Omen Hub Exposes Millions of Gamers to Cyberattack
Sep 16, 2021
Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk
Sep 15, 2021
No Patch for High-Severity Bug in Legacy IBM System X Servers
Sep 15, 2021
Attackers Impersonate DoT in Two-Day Phishing Scam
Sep 14, 2021
Microsoft Patches Actively Exploited Windows Zero-Day Bug
Sep 14, 2021
Adobe Releases Security Updates for Multiple Products
Sep 14, 2021
Citrix Releases Security Update for ShareFile Storage Zones Controller
Sep 14, 2021
SAP Releases September 2021 Security Updates 
Sep 14, 2021
Microsoft Releases September 2021 Security Updates
Sep 14, 2021
Pair of Google Chrome Zero-Day Bugs Actively Exploited
Sep 14, 2021
Google Releases Security Updates for Chrome
Sep 14, 2021
Unpatched Bugs Plague Databases; Your Data Is Probably Not Secure – Podcast
Sep 14, 2021
Workshop on Cybersecurity Labeling Programs for Consumers: Internet of Things (IoT) Devices and Software
Sep 13, 2021
Apple Issues Emergency Fix for NSO Zero-Click Zero Day
Sep 13, 2021
Apple Releases Security Updates to Address CVE-2021-30858 and CVE-2021-30860
Sep 13, 2021
WhatsApp’s End-to-End Encryption Isn’t Actually Broken
Sep 13, 2021
Honing Cybersecurity Strategy When Everyone’s a Target for Ransomware
Sep 13, 2021
WooCommerce Multi Currency Bug Allows Shoppers to Change eCommerce Pricing
Sep 13, 2021
CISA's Annual National Cybersecurity Summit
Sep 10, 2021
5 Steps For Securing Your Remote Work Space
Sep 10, 2021
WordPress Releases Security Update
Sep 10, 2021
Stolen Credentials Led to Data Theft at United Nations
Sep 09, 2021
Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’
Sep 09, 2021
Citrix Releases Security Updates for Hypervisor
Sep 09, 2021
Cisco Releases Security Updates for Multiple Products
Sep 09, 2021
Zoho ManageEngine Password Manager Zero-Day Gets a Fix, Amid Attacks
Sep 08, 2021
What Ragnar Locker Got Wrong About Ransomware Negotiators – Podcast
Sep 08, 2021
Spoofing Bug Highlights Cybersecurity for Digital Vaccine Passports
Sep 08, 2021
Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird
Sep 08, 2021
Microsoft, CISA Urge Mitigations for Zero-Day RCE Flaw in Windows
Sep 08, 2021
Ransomware Risk Management: Draft NISTIR 8374 Available for Comment
Sep 07, 2021
Ragnar Locker Gang Warns Victims Not to Call the FBI
Sep 07, 2021
Zoho Releases Security Update for ADSelfService Plus
Sep 07, 2021
Microsoft Releases Mitigations and Workarounds for CVE-2021-40444
Sep 07, 2021
Jenkins Hit as Atlassian Confluence Cyberattacks Widen
Sep 07, 2021
Authorities Arrest Another TrickBot Gang Member in South Korea
Sep 07, 2021
Holy Grail of Security: Answers to ‘Did XYZ Work?’ – Podcast
Sep 03, 2021
CISA Insights on Risk Considerations for Managed Service Provider Customers
Sep 03, 2021
Atlassian Releases Security Updates for Confluence Server and Data Center
Sep 03, 2021
Brute-Force Attacks Target Inboxes for Gift Card Data
Sep 02, 2021
Bluetooth Bugs Open Billions of Devices to DoS, Code Execution
Sep 02, 2021
Cisco Releases Security Updates for Cisco Enterprise NFVIS
Sep 02, 2021
Google Play Sign-Ins Allow Covert Location-Tracking
Sep 02, 2021
7 Ways to Defend Mobile Apps, APIs from Cyberattacks
Sep 02, 2021
Digital State IDs Start Rollouts Despite Privacy Concerns
Sep 02, 2021
Comcast RF Attack Leveraged Remotes for Surveillance
Sep 01, 2021
Gutenberg Template Library & Redux Framework Bugs Plague WordPress Sites
Sep 01, 2021
BEC Scammers Seek Native English Speakers on Underground
Sep 01, 2021
Google Releases Security Updates for Chrome
Sep 01, 2021
Feds Warn of Ransomware Attacks Ahead of Labor Day
Sep 01, 2021
Prioritizing Cybersecurity Risk for Enterprise Risk Management: Draft NISTIR 8286B Available for Comment
Aug 31, 2021
Fortress Home Security Open to Remote Disarmament
Aug 31, 2021
FBI-CISA Advisory on Ransomware Awareness for Holidays and Weekends
Aug 31, 2021
QNAP Is Latest to Get Dinged by OpenSSL Bugs Fallout
Aug 31, 2021
Top 3 API Vulnerabilities: Why Apps are Pwned by Cyberattackers
Aug 31, 2021
Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Draft Project Description Available for Comment
Aug 31, 2021
Validating the Integrity of Computing Devices: Preliminary Draft of SP 1800-34B Available for Comment
Aug 31, 2021
LockFile Ransomware Uses Never-Before Seen Encryption to Avoid Detection
Aug 30, 2021
HPE Warns Sudo Bug Gives Attackers Root Privileges to Aruba Platform
Aug 30, 2021
Microsoft Exchange ‘ProxyToken’ Bug Allows Email Snooping
Aug 30, 2021
CISA Adds Single-Factor Authentication to list of Bad Practices
Aug 27, 2021
Microsoft Azure Cosmos DB Guidance
Aug 27, 2021
Experts: WH Cybersecurity Summit Should Be Followed by Regulation, Enforcement
Aug 27, 2021
Winning the Cyber-Defense Race: Understand the Finish Line
Aug 27, 2021
FBI Releases Indicators of Compromise Associated with Hive Ransomware
Aug 27, 2021
 ICSJWG 2021 Fall Virtual Meeting
Aug 27, 2021
Ragnarok Ransomware Gang Bites the Dust, Releases Decryptor
Aug 27, 2021
Top Strategies That Define the Success of a Modern Vulnerability Management Program
Aug 27, 2021
‘Pay Ransom’ Screen? Too Late, Humpty Dumpty – Podcast
Aug 27, 2021
NIST Technical Series Publications: Proposed Publication Identifier Syntax