Homepage | CISA

Current Activity

Wednesday, March 25, 2020

Apple Releases Security Updates

Wednesday, March 25, 2020

Adobe Releases Security Update for Creative Cloud Desktop Application

Monday, March 23, 2020

Microsoft RCE Vulnerabilities Affecting Windows, Windows Server

Thursday, March 19, 2020

Drupal Releases Security Updates

Report Incidents

Report Phishing

Report Malware

Report Vulnerabilities

Share Indicators

Contact US-CERT

Recent Vulnerabilities

3/30

VU#962085

Versiant LYNX Customer Service Portal is vulnerable to stored cross-site scripting

3/30

VU#944837

Vertiv Avocent UMG-4000 vulnerable to command injection and cross-site scripting vulnerabilities

3/24

VU#354840

Microsoft Windows Type 1 font parsing remote code execution vulnerabilities

3/23

VU#872016

Microsoft SMBv3 compression remote code execution vulnerability

3/23

VU#782301

pppd vulnerable to buffer overflow due to a flaw in EAP packet processing

3/20

VU#425163

Machine learning classifiers trained via gradient descent are vulnerable to arbitrary misclassification attack

National Cyber Awareness System

Current Activity

Provides up-to-date information about high-impact security activity affecting the community at large.

Alerts

Timely information about current security issues, vulnerabilities, and exploits.

Bulletins

Weekly summaries of new vulnerabilities along with patch information.

Analysis Reports

Provide in-depth analysis on a new or evolving cyber threat.

Announcements

North Korean Malicious Cyber Activity

On February 14, 2020, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD), released six new Malware Analysis Reports (MARs) and an updated MAR on malware used by the North Korean government. The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/northkorea.

HIDDEN COBRA – North Korean Malicious Cyber Activity

On October 31, 2019, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD) identified a Trojan malware variant—referred to as HOPLIGHT—used by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/HiddenCobra.