NSA Cyber retweeted
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
Email servers remain a top target for adversaries. From Russian state-sponsored phishing to exploitation of unpatched or misconfigured software, the threats are real.
For #CybersecurityAwarenessMonth, we’re sharing critical remediations to protect NSS and DIB networks. Secure your servers: nsa.gov/Cybersecurity/Cybers…
NSA is taking proactive steps to protect national security systems from quantum computing threats. Key initiatives include the launch of the Post-Quantum Cryptography Resources Hub, collaboration on standards and guidelines, raising awareness and education, and partnering with industry and academia. Learn more: nsa.gov/cybersecurity/post-q…
"The basics are no longer boring, and AI can’t outrun the basics.”
Across two #BillingtonSummit panels, @NSACyber Director David Imbordino joined government, industry, and FVEY cyber leaders to discuss nation-state threats, AI, and strengthening collective cyber defense.
A strong finish to #TechNetCyber. Daniel McCormack, Chief Operations Officer of NSA’s Cybersecurity Directorate, shared insights on the evolving cyber landscape, innovation, and the partnerships that help strengthen our collective defense. #CyberDefense
NSA Cyber retweeted
Malicious cyber threat actors are targeting internet-exposed ATG systems in the United States. Review our joint fact sheet for TTPs and recommendations to protect your systems. 👉 go.dhs.gov/5Sz
NSA Cyber retweeted
Iran-affiliated cyber actors are targeting operational technology devices across US critical infrastructure, including programmable logic controllers (PLCs). These attacks have led to diminished PLC functionality, manipulation of display data and, in some cases, operational disruption and financial loss.
The @FBI, @CISAGov, @NSAgov, @EPA, @ENERGY and @US_CYBERCOM are urging US organizations—especially municipalities and those in the water and energy sectors—to review the tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) detailed in this advisory. Applying the recommended mitigations will reduce the risk of compromise: ic3.gov/CSA/2026/260407.pdf
NSA Cyber retweeted
Russian GRU cyber actors are exploiting vulnerable routers worldwide to intercept sensitive military, government, and critical infrastructure information.
The @FBI, @NSAgov and 21 international parties across 15 countries have released a #PSA detailing GRU techniques and providing defensive guidance.
We urge all network defenders and owners of small office/home office (SOHO) routers to update to the latest firmware versions, change default usernames and passwords, disable remote management interfaces from the internet, and stay alert for certificate warnings in web browsers and email clients. ic3.gov/PSA/2026/PSA260407
NSA supports @FBI PSA on Russian GRU cyber actors exploiting routers. Take action today to stay secure.
To learn more and for best practices, read NSA’s press release.
nsa.gov/Press-Room/Press-Rel…
#Cybersecurity #NSA #NetworkDefense #RouterSecurity
NSA Cyber retweeted
We urge orgs to monitor for potential cyber threats against U.S. #CriticalInfrastructure —routine targets for Iranian govt-affiliated actors. See our joint fact sheet for more info & mitigations. 👉 go.dhs.gov/wjJ
NSA Cyber retweeted
CISA completed a #RedTeam Assessment with a #CriticalInfrastructure partner, simulating real-world cyber threats. The result? 👀 The red team was able to compromise the org’s domain due to insufficient controls. Read more for lessons learned & insights 👉 bit.ly/40ZIX7y
NSA Cyber retweeted
From government to the private sector to academia, partnerships are critical in cybersecurity. Join Dave Luber, @NSA_CSDirector, and LtGen Jerry Carter as they discuss all things cyber in the second episode of No Such Podcast, available now wherever you get your podcasts!
NSA Cyber retweeted
“The area of most concern to me is where cyber meets physical.” @NSA_CSDirector Dave Luber shared his thoughts on the state of cybersecurity at #RSAC 2024.
NSA Cyber retweeted
Welcome to day three of #RSAC 2024! Our impressive line-up today kicks off with @NSA_CSDirector Dave Luber at 9:40am, followed by Michael Jenkins on a panel at 2:25pm. Close out the day with us at a pop-up booth event featuring Morgan Adamski and FBI Cyber DAD Cynthia Kaiser.























