Defend Today. Secure Tomorrow.

As part of its mission, CISA leads the effort to enhance the security, resiliency, and reliability of the Nation's cybersecurity and communications infrastructure.

Current Activity

Tuesday, September 17, 2019

VMware Releases Security Updates for Multiple Products

Tuesday, September 17, 2019

2019 CWE Top 25 Most Dangerous Software Errors

Tuesday, September 10, 2019

Intel Releases Security Updates

Tuesday, September 10, 2019

Google Releases Security Updates for Chrome

Report Incidents

Report Phishing

Report Malware

Report Vulnerabilities

Share Indicators

Contact US-CERT

Recent Vulnerabilities

9/13

VU#672565

Exim fails to properly handle peer DN and SNI in TLS handshakes

9/3

VU#918987

Bluetooth BR/EDR supported devices are vulnerable to key negotiation attacks

9/3

VU#605641

HTTP/2 implementations do not robustly handle abnormal traffic and resource exhaustion

8/1

VU#489481

Cylance Antivirus Products Susceptible to Concatenation Bypass

7/17

VU#790507

Oracle Solaris vulnerable to arbitrary code execution via /proc/self

7/15

VU#129209

LLVMs Arm stack protection feature can be rendered ineffective

National Cyber Awareness System

Current Activity

Provides up-to-date information about high-impact security activity affecting the community at large.

View Current Activity

Alerts

Timely information about current security issues, vulnerabilities, and exploits.

View Alerts

Bulletins

Weekly summaries of new vulnerabilities along with patch information.

View Bulletins

Analysis Reports

Provide in-depth analysis on a new or evolving cyber threat.

View Analysis Reports

Announcements

HIDDEN COBRA – North Korean Malicious Cyber Activity

On September 9, 2019, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) identified two malware variants—referred to as ELECTRICFISH and BADCALL—used by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/HiddenCobra.

ICSJWG Accepting Abstracts through Friday, July 26

The Industrial Control Systems Joint Working Group (ICSJWG) is still accepting abstracts for their 2019 Fall Meeting at the Tower Square Hotel Springfield in Springfield, Massachusetts, August 27–29, 2019.

All members of the community are encouraged to submit an abstract by Friday, July 26, 2019 to ICSJWG.Communications@hq.dhs.gov.