Defend Today. Secure Tomorrow.

As part of its mission, CISA leads the effort to enhance the security, resiliency, and reliability of the Nation's cybersecurity and communications infrastructure.

Current Activity

Thursday, July 18, 2019

Canadian Centre for Cyber Security Releases Advisory on Fileless Malware

Wednesday, July 17, 2019

WaterISAC Releases Cybersecurity Fundamentals

Wednesday, July 17, 2019

Drupal Releases Security Update

Wednesday, July 17, 2019

Cisco Releases Security Updates for Multiple Products

Report Incidents

Report Phishing

Report Malware

Report Vulnerabilities

Share Indicators

Contact US-CERT

Recent Vulnerabilities

7/17

VU#790507

Oracle Solaris vulnerable to arbitrary code execution via /proc/self

7/15

VU#129209

LLVMs Arm stack protection feature can be rendered ineffective

7/8

VU#905115

Multiple TCP Selective Acknowledgement (SACK) and Maximum Segment Size (MSS) networking vulnerabilities may cause denial-of-service conditions in Linux and FreeBSD kernels

6/21

VU#465632

Microsoft Exchange server 2013 and newer are vulnerable to NTLM relay attacks

6/18

VU#576688

Microsoft Windows RDP can bypass the Windows lock screen

6/12

VU#119704

Microsoft Windows Task Scheduler SetJobFileSecurityByName privilege escalation vulnerability

National Cyber Awareness System

Current Activity

Provides up-to-date information about high-impact security activity affecting the community at large.

View Current Activity

Alerts

Timely information about current security issues, vulnerabilities, and exploits.

View Alerts

Bulletins

Weekly summaries of new vulnerabilities along with patch information.

View Bulletins

Analysis Reports

Provide in-depth analysis on a new or evolving cyber threat.

View Analysis Reports

Announcements

The Industrial Control Systems Joint Working Group (ICSJWG)—a collaborative and coordinating body for Industrial Control Systems hosted by CISA and driven by the community—is currently accepting abstracts for the 2019 Fall Meeting in Springfield, Massachusetts, August 27–29, 2019.

CISA Relaunch of the Newly Integrated Website

The Cybersecurity and Infrastructure Security Agency (CISA) is excited to announce the relaunch of the newly integrated us-cert.gov website! On June 25, us-cert.gov and ics-cert.us-cert.gov were consolidated into a single us-cert.gov site—a comprehensive, easy-to-navigate website with an updated look and feel.