Homepage | CISA

Current Activity

Friday, February 14, 2020

North Korean Malicious Cyber Activity

Wednesday, February 12, 2020

New SchoolSafety.gov Provides Cyber Guidance for K-12 Schools

Wednesday, February 12, 2020

FBI Releases IC3 2019 Internet Crime Report

Report Incidents

Report Phishing

Report Malware

Report Vulnerabilities

Share Indicators

Contact US-CERT

Recent Vulnerabilities

2/13

VU#597809

IBM ServeRAID Manager exposes unauthenticated Java Remote Method Invocation (RMI) service

2/12

VU#261385

Cisco Discovery Protocol (CDP) enabled devices are vulnerable to denial-of-service and remote code execution

2/7

VU#390745

OpenSMTPD vulnerable to local privilege escalation and remote code execution

2/3

VU#619785

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP web server vulnerability

1/22

VU#338824

Microsoft Internet Explorer Scripting Engine memory corruption vulnerability

1/18

VU#491944

Microsoft Windows Remote Desktop Gateway allows for unauthenticated remote code execution

National Cyber Awareness System

Current Activity

Provides up-to-date information about high-impact security activity affecting the community at large.

Alerts

Timely information about current security issues, vulnerabilities, and exploits.

Bulletins

Weekly summaries of new vulnerabilities along with patch information.

Analysis Reports

Provide in-depth analysis on a new or evolving cyber threat.

Announcements

North Korean Malicious Cyber Activity

On February 14, 2020, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD), released six new Malware Analysis Reports (MARs) and an updated MAR on malware used by the North Korean government. The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/northkorea.

HIDDEN COBRA – North Korean Malicious Cyber Activity

On October 31, 2019, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD) identified a Trojan malware variant—referred to as HOPLIGHT—used by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/HiddenCobra.