Official website of the Department of Homeland Security
US-CERT strives for a safer, stronger Internet for all Americans by responding to major incidents, analyzing threats, and exchanging critical cybersecurity information with trusted partners around the world.
Security alerts, tips, and other updates
Contact Us
(888) 282-0870
Send us email
Download PGP/GPG keysIncidents, Indicators, Phishing, Malware, or Vulnerabilities
VMware Releases Security Updates
VMware has released security updates to address vulnerabilities in ESXi, vCenter Server, Fusion, and Workstation. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system.
US-CERT encourages users and administrators to review VMware Security Advisory VMSA-2017-0015 and apply the necessary updates.
Potential Phishing Scams Related to Equifax Data Breach
The Federal Trade Commission (FTC) has released an alert on phishing attacks related to the Equifax data breach. Phishing attacks try to trick message recipients into sharing sensitive information with cyber criminals. FTC warns consumers to be wary of calls or emails purporting to be from Equifax agents. Legitimate Equifax representatives will not contact consumers to ask for verification of their information.
BlueBorne Bluetooth Vulnerabilities
US-CERT is aware of a collection of Bluetooth vulnerabilities, known as BlueBorne, potentially affecting millions of unpatched mobile phones, computers, and Internet of Things (IoT) devices. A remote attacker could exploit several of these vulnerabilities to take control of affected devices.
US-CERT recommends that users and administrators read Vulnerability Note VU#240311 for more information.
Alerts
Timely information about current security issues, vulnerabilities, and exploits.
- Jul 01 Petya Ransomware
- Jun 13 HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
- Jun 12 CrashOverride Malware
Bulletins
Weekly summaries of new vulnerabilities along with patch information when available.
Tips
Advice and best practices about common security issues for the general public.
Technical Documents
In-depth articles that provide advice and summarize a variety of internet security topics.