NSA Cyber (@NSACyber) header
NSA Cyber (@NSACyber) profile picture

NSA Cyber

@NSACyber

We protect our nation’s most sensitive systems against cyber threats. Likes, retweets, and follows ≠ endorsement.

nsa.gov/Cybersecurity/
Joined November 2019
  • Tweets518
  • Following12
  • Followers215K
266Media
Photo by NSA Cyber (@NSACyber)Photo by NSA Cyber (@NSACyber)Photo by NSA Cyber (@NSACyber)Photo by NSA Cyber (@NSACyber)Photo by NSA Cyber (@NSACyber)Photo by NSA Cyber (@NSACyber)Photo by NSA Cyber (@NSACyber)Photo by NSA Cyber (@NSACyber)Photo by NSA Cyber (@NSACyber)Photo by NSA Cyber (@NSACyber)
PQC transition also depends on your supply chain’s readiness. We’ve joined @ASDGovAu and @CISAgov to outline questions for procurements, contract renewals, and or vendor assurance processes to prevent residual risk. #supplychain media.defense.gov/2026/Nov/0…
Image from NSA Cyber (@NSACyber)
12
44
1
116
9,663
PHP security risks remain high and PHP mitigation requires immediate attention. Our guidance is further supported by additional agencies including @CISACyber, @NCSC, @ASDGovAu, and CERT-EU. If you have not reviewed your exposure and applied mitigations, now is the time. Please read the linked resources, follow requisite vendor guidance, assess your environment, and implement mitigations without delay. nsa.gov/Press-Room/Press-Rel…
NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities.

ALT NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities.

50
210
22
628
38,723
UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Rel…
NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities

NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities

FORT MEADE, Md. — PHP — short for PHP: Hypertext Preprocessor — works on most major operating systems.  It runs directly on web servers and can be added into HTML to create

nsa.gov
NSA Cyber (@NSACyber) profile pictureNSA Cyber
@NSACyberOct 21
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
87
931
79
3,871
331,058
NSA Cyber retweeted
CISA Cyber (@CISACyber) profile picture
CISA Cyber
@CISACyberOct 21
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
62
734
67
2,274
299,399
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,289
10,803
2,843
70,076
12,674,765
NSA joined @NIST and @CISACyber in releasing guidelines for managing SI control incidents. Organizations utilizing SI are encouraged to adopt these practices. Read the joint report: media.defense.gov/2026/Oct/1…
Text on the image reads: "NSA and Others Release: Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation. Cybersecurity Information Sheet.

ALT Text on the image reads: "NSA and Others Release: Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation. Cybersecurity Information Sheet.

17
90
20
342
161,246
NSA Cyber retweeted
NSA/CSS (@NSAGov) profile picture
NSA/CSS
@NSAGovOct 13
Email servers remain a top target for adversaries. From Russian state-sponsored phishing to exploitation of unpatched or misconfigured software, the threats are real. For #CybersecurityAwarenessMonth, we’re sharing critical remediations to protect NSS and DIB networks. Secure your servers: nsa.gov/Cybersecurity/Cybers…
A digital graphic shows a laptop with a glowing envelope being hooked. The National Security Agency logo is in the upper left corner. The text reads, "Securing your email is a fundamental step in protecting your organization's data.

ALT A digital graphic shows a laptop with a glowing envelope being hooked. The National Security Agency logo is in the upper left corner. The text reads, "Securing your email is a fundamental step in protecting your organization's data.

40
67
8
272
20,448
Integrity Tech has enabled Chinese government-linked threat actors to exploit organizations’ networks globally and exfiltrate critical data. We’ve joined @FBICyberDiv and others to arm organizations with guidance to proactively defend their networks from this threat. nsa.gov/Press-Room/Press-Rel…
"NSA joins FBI and others in releasing: Chinese government-linked cyber threat actors combine automated and hands-on hacking tools to steal sensitive data. Cybersecurity advisory.

ALT "NSA joins FBI and others in releasing: Chinese government-linked cyber threat actors combine automated and hands-on hacking tools to steal sensitive data. Cybersecurity advisory.

20
125
13
268
66,803
NSA recommends implementing #ZeroTrust mitigation principles to enhance security of legacy #OperationalTechnology and prevent catastrophic impacts to U.S. national security, economic security, and public health and safety. Learn more: media.defense.gov/2026/Oct/0…
On the left side, text reads, "NSA Releases: Hardening Department of War (DOW) Critical Operational Technology (OT) Environments with Zero Trust (ZT) Principles." Below, it says, "Cybersecurity Information Sheet." The NSA logo is displayed in the top left corner.

ALT On the left side, text reads, "NSA Releases: Hardening Department of War (DOW) Critical Operational Technology (OT) Environments with Zero Trust (ZT) Principles." Below, it says, "Cybersecurity Information Sheet." The NSA logo is displayed in the top left corner.

25
104
15
373
39,692
NSA Cyber retweeted
NSA/CSS (@NSAGov) profile picture
NSA/CSS
@NSAGovOct 1
NSA is taking proactive steps to protect national security systems from quantum computing threats. Key initiatives include the launch of the Post-Quantum Cryptography Resources Hub, collaboration on standards and guidelines, raising awareness and education, and partnering with industry and academia. Learn more: nsa.gov/cybersecurity/post-q…
The image features a stylized design with the text "Post-Quantum Cryptography Resource Hub" and "Now Live" on a dark background. A logo resembling the letters "PQC" is on the left, and the NSA seal is in the lower right corner.

ALT The image features a stylized design with the text "Post-Quantum Cryptography Resource Hub" and "Now Live" on a dark background. A logo resembling the letters "PQC" is on the left, and the NSA seal is in the lower right corner.

80
202
35
728
48,317
NSA Cyber retweeted
NSA/CSS (@NSAGov) profile picture
NSA/CSS
@NSAGovOct 1
October is Cybersecurity Awareness Month! Throughout the month, we'll be sharing guidance to help you stay ahead of digital threats and keep your data safe. Visit our site for guidance and more: nsa.gov/cybersecurity-awaren…
Image from NSA/CSS (@NSAGov)
61
243
29
859
42,372
NSA Cyber retweeted
NSA/CSS (@NSAGov) profile picture
NSA/CSS
@NSAGovSep 10
"The basics are no longer boring, and AI can’t outrun the basics.” Across two #BillingtonSummit panels, @NSACyber Director David Imbordino joined government, industry, and FVEY cyber leaders to discuss nation-state threats, AI, and strengthening collective cyber defense.
NSA Cybersecurity Director David Imbordino speaks during a panel at the 2026 Billington Cybersecurity Summit.

ALT NSA Cybersecurity Director David Imbordino speaks during a panel at the 2026 Billington Cybersecurity Summit.

NSA Cybersecurity Director David Imbordino speaks during a panel at the 2026 Billington Cybersecurity Summit.

ALT NSA Cybersecurity Director David Imbordino speaks during a panel at the 2026 Billington Cybersecurity Summit.

62
61
11
198
35,306
China-based AI companies are illicitly distilling U.S. frontier AI capabilities. Read NSA’s new report, co-sealed with @FBI, @CISAgov, highlighting AI knowledge distillation, TTPs used, and recommended mitigations: media.defense.gov/2026/Sep/0…
Image from NSA Cyber (@NSACyber)
98
275
75
830
192,935
NSA’s latest guide captures foundational network actions that remain essential in keeping networks protected against traditional and AI-enhanced targeting. Review for immediate and long-term steps to help prioritize impactful defenses. media.defense.gov/2026/Sep/0…
Image from NSA Cyber (@NSACyber)
47
97
7
314
29,616
The China-linked hacking group QTFY provides tools for targeting critical systems in the U.S. and abroad. The FBI, NSA, and CNMF recommend organizations implement the recommended mitigations to counter their malicious tools: nsa.gov/Press-Room/Press-Rel…
The China-linked hacking group QTFY provides tools for targeting critical systems in the U.S. and abroad. The FBI, NSA, and CNMF recommend organizations implement the recommended mitigations to counter their malicious tools.

ALT The China-linked hacking group QTFY provides tools for targeting critical systems in the U.S. and abroad. The FBI, NSA, and CNMF recommend organizations implement the recommended mitigations to counter their malicious tools.

54
77
7
198
24,729
NSA today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. Learn about the threats and appropriate mitigations to reduce risk: nsa.gov/Press-Room/Press-Rel…
The National Security Agency (NSA) today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. The reports — ASIC Best Practices Threat Catalog and the Application Specific Integrated Circuit (ASIC) Level of Assurance 1 (LoA1) Best Practices — explain the threats against ASICs and recommend mitigations to reduce risk.

ALT The National Security Agency (NSA) today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. The reports — ASIC Best Practices Threat Catalog and the Application Specific Integrated Circuit (ASIC) Level of Assurance 1 (LoA1) Best Practices — explain the threats against ASICs and recommend mitigations to reduce risk.

27
88
8
292
26,797
NSA and others releases guidance on applying prevention tactics to strengthen defense of U.S-based programmable logic controllers being targeted by cyber actors using AI. Learn more: media.defense.gov/2026/Aug/1… #cybersecurity #AI
56
198
23
1,000
223,783
NSA joins the @FBI and others in releasing a joint Cybersecurity Advisory, “#StopRansomware: Gunra Ransomware,” as an ongoing effort to publish information about various ransomware variants and threat actors. Learn more: media.defense.gov/2026/Aug/1…
Image from NSA Cyber (@NSACyber)
31
33
1
67
12,485
Learn how your organization can leverage SBOMs to drive security decisions about your software systems in this updated report: 2026 Minimum Elements for a Software Bill of Materials (SBOM). media.defense.gov/2026/Jul/2…
Image from NSA Cyber (@NSACyber)
29
40
1
69
10,860
Russian state-supported actors are targeting Zimbra Collaboration Suite users to exfiltrate sensitive communications and email directories. Reduce the risk of being a target. Read the full Cybersecurity Advisory for IOCs and recommended mitigations: media.defense.gov/2026/Jul/2…
Image from NSA Cyber (@NSACyber)
13
39
2
40
9,842
Load more