Official website of the Department of Homeland Security
The National Cybersecurity and Communications Integration Center (NCCIC) is the Nation’s flagship cyber defense, incident response, and operational integration center. Our mission is to reduce the Nation’s risk of systemic cybersecurity and communications challenges.
Security alerts, tips, and other updates
Contact Us
(888) 282-0870
Send us email
Download PGP/GPG keysIncidents, Indicators, Phishing, Malware, or Vulnerabilities
Drupal Releases Security Updates
Drupal has released security updates to address multiple vulnerabilities in Drupal Core. A remote attacker could exploit some of these vulnerabilities to take control of an affected website.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Drupal’s security advisories SA-CORE-2019-005 and SA-CORE-2019-006 and apply the necessary updates.
Cisco Releases Security Updates
Cisco has released a security update to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Cisco Security Advisory page and apply the necessary updates.
ICSJWG Spring Meeting April 23–25
The Industrial Control Systems Joint Working Group (ICSJWG)—a collaborative and coordinating body operating under the Critical Infrastructure Partnership Advisory Council framework—will hold the 2019 ICSJWG Spring Meeting in Kansas City, MO, April 23–25, 2019. ICSJWG facilitates information sharing to reduce the risk to the Nation’s industrial control systems.
Multiple Vulnerabilities in Broadcom WiFi Chipset Drivers
The CERT Coordination Center (CERT/CC) has released information on multiple vulnerabilities in Broadcom Wi-Fi chipset drivers. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the CERT/CC Vulnerability Note VU#166939 for more information and refer to vendors for appropriate updates, when available.
Alerts
Timely information about current security issues, vulnerabilities, and exploits.
- Jan 24 DNS Infrastructure Hijacking Campaign
- Dec 03 SamSam Ransomware
- Nov 27 3ve – Major Online Ad Fraud Operation
Bulletins
Weekly summaries of new vulnerabilities along with patch information when available.
Tips
Advice and best practices about common security issues for the general public.
Analysis Reports
Provide in-depth analysis on a new or evolving cyber threat.