National Security Agency

NSA joins the Federal Bureau of Investigation others in releasing the joint Cybersecurity Advisory, “#StopRansomware: Gunra Ransomware,” to describe how the ransomware-as-a-service program is targeting government, critical infrastructure, and other organizations worldwide. The actors leverage a double-extortion model, both encrypting data and threatening to sell exfiltrated data if the ransom is not paid. Victims span organizations in the Americas, Europe, Middle East, Africa, and Asia-Pacific. Impacted sectors include healthcare and public health, financial services and insurance, critical manufacturing and construction, transportation systems and logistics, government services and facilities, utilities, academia, media and communications, retail, and professional and nonprofit services. System administers and other cyber defenders are advised to implement the recommended mitigations and validate their security controls. In the event of a potential compromise, the advisory also outlines recommended incident response procedures. Learn more: https://lnkd.in/g6dDewG4

Serving with patriotism and purpose, NSA is proud to join in the celebration of 250 years of American history. The Declaration of Independence embodies the fundamental ideals of democracy and individual rights, and America’s enduring, pioneering spirit remains a cornerstone of national strength. NSA honors the principles and values that have guided the Nation for 250 years and continue to define the mission today. The President’s latest National Security Strategy: https://lnkd.in/dQHPt-tq describes how the courage, willpower, and patriotism of the American people aid us in accomplishing this country’s goals. Here’s to the next 250 years of defending the nation and securing the future. #America250

Happy 236th Birthday to the United States Coast Guard! Since August 4, 1790, the USCG has been an indispensable pillar of our maritime safety and national defense. As fellow members of the national security community, NSA is proud to stand alongside you in protecting our nation's interests at home and abroad. Thank you for your unwavering vigilance. Semper Paratus! #USCGBirthday #NationalSecurity #SemperParatus #AlwaysReady

We collaborated with the Cybersecurity and Infrastructure Security Agency (CISA) to release the 2026 Minimum Elements for a Software Bill of Materials (SBOM). The Cybersecurity Information Sheet builds upon the foundational principles established in the Minimum Elements for a SBOM published by the National Telecommunications and Information Administration (NTIA) in 2021. This comprehensive update reflects current advancements and empowers organizations to demand more transparency in their supply chain and software components. Below are a few major and minor updates: Major Updates: • SBOM Author: Clarifies the entity generating the SBOM, distinct from the Component Producer, to avoid ambiguity. • Component Identifiers: Standardizes the use of identifiers like Common Platform Enumeration (CPE) and Package-URL (PURL) to support automated analysis and correlation with vulnerability databases. • Coverage: Ensures comprehensive listing of all components, including transitive dependencies, to facilitate risk-based decisions and improve vulnerability management. Minor Updates: • SBOM Timestamp: Adheres to RFC 9557 for date and time recording, ensuring consistent and machine-readable timestamps. • Component Name: Allows for multiple entries to capture alternate names, enhancing clarity and identification. • Component Dependency Relationship: Reflects relationships between components and supports the capability to build dependency graphs, essential for understanding software dependencies and potential vulnerabilities. For more details on the updates, read the full report: https://lnkd.in/gFybQ5WE

NSA, in collaboration with its partners, has released a new Cybersecurity Advisory regarding a phishing campaign conducted by Russian state-supported cyber actors targeting the Zimbra Collaboration Suite (ZCS). The threat group, known as LAUNDRY BEAR, is utilizing a view-based exploit to exfiltrate sensitive communications and email directories from U.S. and allied government and commercial networks. All organizations using ZCS are urged to: ·        Review the joint CSA for detailed indicators of compromise ·        Update vulnerable software immediately ·        Implement other recommended mitigations to minimize risk posed by this campaign and other similar activities. Collaboration is key to defending shared infrastructure. #NSA #Cybersecurity #Zimbra #NationalSecurity #Collaboration #RussianCyberActors #ZCS Read the full advisory here: https://lnkd.in/egGcf2Aj

We joined Cybersecurity and Infrastructure Security Agency, JPCERT/CC, and Nationaal Cyber Security Centrum (NCSC-NL) in releasing the guidance on implementing a coordinated vulnerability disclosure (CVD) program to provide best practices for software manufacturers and online service providers to engage with external security researchers.   An effective CVD program includes well-defined processes for: 1. Triage and Assessment: Review vulnerability reports to assess whether they pose a risk to the product and its end users. Use risk assessment systems to help prioritize reports. 2. Developing Fixes: If a reported vulnerability requires a fix, remediate accordingly and share mitigations, fixes, or patch details with the researcher for validation. 3. Assigning Common Vulnerabilities and Exposure (CVE) IDs: Assign CVE IDs for discovered vulnerabilities, whether identified internally or externally. Suppliers are encouraged to become CVE numbering authorities (CNAs). 4. Ensuring Accuracy: Include sufficient and accurate details in CVE records to give customers and the public insight into the true nature of vulnerability and its associated risks. 5. Developing Communications: Publicly release information on vulnerabilities, severity scores, and mitigation steps to customers in an unrestricted location on the supplier's website. 6. Release Vulnerability Details: Determine a timeline for public disclosure in conjunction with the researcher or intermediary, including issuance of the CVE record and other public statements. To learn more about CVD programs and how they can help your suppliers, read the full report: https://lnkd.in/epkaFHXw

NSA and partners released a new joint Cybersecurity Advisory “Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting.” The advisory warns that Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit vulnerable, poorly configured networks worldwide, specifically targeting critical infrastructure sectors, including: - Defense Industrial Base - Energy - Financial Services - Healthcare - Government Facilities - Communications Basic router hygiene is one of the most effective ways to deter Russian state-sponsored actors. To protect your organization, we urge network defenders to prioritize these mitigations: - Implement Simple Network Management Protocol v3 (SNMPv3) - Use strong, unique passwords - Disable Cisco Smart Install - Block the Trivial File Transfer Protocol (TFTP), Smart Install (SMI), and SNMP protocols at the firewall - Upgrade software and firmware images to patch vulnerabilities Building on a previous Federal Bureau of Investigation (FBI) alert, this guidance addresses a decade-long pattern of Russian FSB Center 16 cyber activity and provides tactics, techniques, and procedures to counter this ongoing threat. #cybersecurityadvisory #cybersecurity #NSA #criticalinfrastructure #networksecurity

For 250 years, the United States has relied on the courage and willpower of its people to overcome adversity. Today, NSA provides critical insights and strategic advantages through foreign signals intelligence and cybersecurity to safeguard the nation from emerging threats. We are proud to provide the information advantage necessary to protect this country’s allies and democratic way of life. #America250 #HappyIndependenceDay

The Laboratory for Physical Sciences at the National Security Agency, in partnership with the U.S. Army DEVCOM Army Research Laboratory, is postured to support the President’s Executive Order on Quantum Computing. To advance this vision, we are officially launching the Quantum Ecosystem Advancement, Growth & Leadership (QuantumEAGLe) initiative. "Our new QuantumEAGLe initiative represents an expansion of our quantum computing efforts, focusing on engaging with industry, enabling commercial roadmaps, advancing U.S. supply chain needs, developing algorithmic applications, and overcoming fundamental research challenges. Together, we are committed to bolstering the U.S. quantum industry and ensuring our nation leads in this critical technology." Read the full press release: https://lnkd.in/dYnC32uF

A strong close to #TechNetCyber. Daniel McCormack, Chief Operations Officer of NSA’s Cybersecurity Directorate, discussed the evolving cyber landscape, the technologies shaping the future, and the importance of partnerships in strengthening our collective defense. Thank you to everyone who joined the conversation and engaged with us throughout the week. #CyberDefense #Cybersecurity #NationalSecurity