PQC transition also depends on your supply chain’s readiness. We’ve joined @ASDGovAu and @CISAgov to outline questions for procurements, contract renewals, and or vendor assurance processes to prevent residual risk. #supplychain
media.defense.gov/2026/Nov/0…
PHP security risks remain high and PHP mitigation requires immediate attention. Our guidance is further supported by additional agencies including @CISACyber, @NCSC, @ASDGovAu, and CERT-EU. If you have not reviewed your exposure and applied mitigations, now is the time. Please read the linked resources, follow requisite vendor guidance, assess your environment, and implement mitigations without delay. nsa.gov/Press-Room/Press-Rel…
NSA joined @NIST and @CISACyber in releasing guidelines for managing SI control incidents. Organizations utilizing SI are encouraged to adopt these practices. Read the joint report: media.defense.gov/2026/Oct/1…
Integrity Tech has enabled Chinese government-linked threat actors to exploit organizations’ networks globally and exfiltrate critical data. We’ve joined @FBICyberDiv and others to arm organizations with guidance to proactively defend their networks from this threat. nsa.gov/Press-Room/Press-Rel…
NSA recommends implementing #ZeroTrust mitigation principles to enhance security of legacy #OperationalTechnology and prevent catastrophic impacts to U.S. national security, economic security, and public health and safety. Learn more: media.defense.gov/2026/Oct/0…
NSA’s latest guide captures foundational network actions that remain essential in keeping networks protected against traditional and AI-enhanced targeting. Review for immediate and long-term steps to help prioritize impactful defenses. media.defense.gov/2026/Sep/0…
The China-linked hacking group QTFY provides tools for targeting critical systems in the U.S. and abroad. The FBI, NSA, and CNMF recommend organizations implement the recommended mitigations to counter their malicious tools: nsa.gov/Press-Room/Press-Rel…
NSA today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. Learn about the threats and appropriate mitigations to reduce risk: nsa.gov/Press-Room/Press-Rel…

ALT The National Security Agency (NSA) today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. The reports — ASIC Best Practices Threat Catalog and the Application Specific Integrated Circuit (ASIC) Level of Assurance 1 (LoA1) Best Practices — explain the threats against ASICs and recommend mitigations to reduce risk.
NSA joins the @FBI and others in releasing a joint Cybersecurity Advisory, “#StopRansomware: Gunra Ransomware,” as an ongoing effort to publish information about various ransomware variants and threat actors. Learn more: media.defense.gov/2026/Aug/1…









