Defend Today. Secure Tomorrow.

As part of its mission, CISA leads the effort to enhance the security, resiliency, and reliability of the Nation's cybersecurity and communications infrastructure.

Current Activity

Friday, November 15, 2019

Reminder: Malware Can Exploit Improper Configurations

Thursday, November 14, 2019

NCSC-NZ Releases Annual Cyber Threat Report

Tuesday, November 12, 2019

VMware Releases Security Updates

Tuesday, November 12, 2019

Adobe Releases Security Updates

Report Incidents

Report Phishing

Report Malware

Report Vulnerabilities

Share Indicators

Contact US-CERT

Recent Vulnerabilities

11/15

VU#125336

Microsoft Office for Mac cannot properly disable XLM macros

10/25

VU#763073

iTerm2 with tmux integration is vulnerable to remote command execution

10/25

VU#766427

Multiple D-Link routers vulnerable to remote command execution

10/22

VU#927237

Pulse Secure VPN contains multiple vulnerabilities

10/11

VU#719689

Multiple vulnerabilities found in the Cobham EXPLORER 710 satcom terminal

9/18

VU#672565

Exim fails to properly handle trailing backslashes in string_interpret_escape()

National Cyber Awareness System

Current Activity

Provides up-to-date information about high-impact security activity affecting the community at large.

Alerts

Timely information about current security issues, vulnerabilities, and exploits.

Bulletins

Weekly summaries of new vulnerabilities along with patch information.

Analysis Reports

Provide in-depth analysis on a new or evolving cyber threat.

Announcements

HIDDEN COBRA – North Korean Malicious Cyber Activity

On October 31, 2019, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD) identified a Trojan malware variant—referred to as HOPLIGHT—used by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/HiddenCobra.

HIDDEN COBRA – North Korean Malicious Cyber Activity

On September 9, 2019, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) identified two malware variants—referred to as ELECTRICFISH and BADCALL—used by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/HiddenCobra.