Defend Today. Secure Tomorrow.

As part of its mission, CISA leads the effort to enhance the security, resiliency, and reliability of the Nation's cybersecurity and communications infrastructure.

Current Activity

Friday, January 24, 2020

Cisco Releases Security Updates

Friday, January 24, 2020

NSA Releases Guidance on Mitigating Cloud Vulnerabilities

Thursday, January 23, 2020

Citrix Releases Security Updates for SD-WAN WANOP

Thursday, January 23, 2020

Cisco Releases Security Updates

Report Incidents

Report Phishing

Report Malware

Report Vulnerabilities

Share Indicators

Contact US-CERT

Recent Vulnerabilities

1/22

VU#338824

Microsoft Internet Explorer Scripting Engine memory corruption vulnerability

1/21

VU#619785

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP web server vulnerability

1/18

VU#491944

Microsoft Windows Remote Desktop Gateway allows for unauthenticated remote code execution

1/14

VU#849224

Microsoft Windows CryptoAPI fails to properly validate ECC certificate chains

1/14

VU#335217

Multiple caching service providers are vulnerable to HTTP cache poisoning

12/20

VU#941987

Apple devices vulnerable to arbitrary code execution in SecureROM

National Cyber Awareness System

Current Activity

Provides up-to-date information about high-impact security activity affecting the community at large.

Alerts

Timely information about current security issues, vulnerabilities, and exploits.

Bulletins

Weekly summaries of new vulnerabilities along with patch information.

Analysis Reports

Provide in-depth analysis on a new or evolving cyber threat.

Announcements

HIDDEN COBRA – North Korean Malicious Cyber Activity

On October 31, 2019, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD) identified a Trojan malware variant—referred to as HOPLIGHT—used by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/HiddenCobra.

HIDDEN COBRA – North Korean Malicious Cyber Activity

On September 9, 2019, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) identified two malware variants—referred to as ELECTRICFISH and BADCALL—used by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/HiddenCobra.