Homepage | CISA

Current Activity

Friday, April 3, 2020

Mozilla Patches Critical Vulnerabilities in Firefox, Firefox ESR

Thursday, April 2, 2020

FBI Releases Guidance on Defending Against VTC Hijacking and Zoom-bombing

Wednesday, April 1, 2020

MS-ISAC Releases Advisory on DrayTek Devices

Wednesday, April 1, 2020

Google Releases Security Updates for Chrome

Report Incidents

Report Phishing

Report Malware

Report Vulnerabilities

Share Indicators

Contact US-CERT

Recent Vulnerabilities

3/30

VU#962085

Versiant LYNX Customer Service Portal is vulnerable to stored cross-site scripting

3/30

VU#944837

Vertiv Avocent UMG-4000 vulnerable to command injection and cross-site scripting vulnerabilities

3/24

VU#354840

Microsoft Windows Type 1 font parsing remote code execution vulnerabilities

3/23

VU#872016

Microsoft SMBv3 compression remote code execution vulnerability

3/23

VU#782301

pppd vulnerable to buffer overflow due to a flaw in EAP packet processing

3/20

VU#425163

Machine learning classifiers trained via gradient descent are vulnerable to arbitrary misclassification attack

National Cyber Awareness System

Current Activity

Provides up-to-date information about high-impact security activity affecting the community at large.

Alerts

Timely information about current security issues, vulnerabilities, and exploits.

Bulletins

Weekly summaries of new vulnerabilities along with patch information.

Analysis Reports

Provide in-depth analysis on a new or evolving cyber threat.

Announcements

North Korean Malicious Cyber Activity

On February 14, 2020, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD), released six new Malware Analysis Reports (MARs) and an updated MAR on malware used by the North Korean government. The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/northkorea.

HIDDEN COBRA – North Korean Malicious Cyber Activity

On October 31, 2019, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD) identified a Trojan malware variant—referred to as HOPLIGHT—used by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://www.us-cert.gov/HiddenCobra.