NSA/CSS (@NSAGov) header
NSA/CSS (@NSAGov) profile picture

National Security Agency/Central Security Service official account, home to America's codemakers and codebreakers. Likes, retweets, and follows ≠ endorsement.

Fort Meade, MD
Joined December 2013
Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)
Adversaries are increasingly using super intelligence (SI) to scale cyber exploitation. This #CybersecurityAwarenessMonth, we urge NSA and DIB organizations to recognize deepfake tradecraft and techniques. Check out @US_CYBERCOM's tips in the post below.
Would you spot a deepfake of your boss? With just 3 seconds of audio, scammers can clone voices to bypass security. This #CybersecurityAwarenessMonth, remember these tips: Hang up. Call back on an official channel. Never bypass verification protocols. #USCYBERCOM #BeCyberSmart
31
165
17
563
29,993
David Imbordino, Director of NSA’s Cybersecurity Directorate, spoke at the Billington Cybersecurity Summit on how SI is transforming intelligence and defense. Read our guidance to harden NSS and DIB networks against modern SI threats: nsa.gov/Press-Room/Press-Rel…
16
31
4
112
8,506
Effective cyber hygiene remains essential for defending networks against advanced persistent threats. This #CyberSecurityAwarenessMonth, we're highlighting immediate actions to reduce risk, such as multi-factor authentication (MFA). Learn more from @US_CYBERCOM. ⬇️
Received a sudden flood of MFA login prompts on your phone? That’s MFA Fatigue, and it’s a trap. Scammers spam your device hoping you’ll tap "Approve" just to stop the buzzing. Deny the request and change your password. #USCYBERCOM #SecuringTheNext250 #CybersecurityAwarenessMonth
24
87
5
459
27,865
Network Device Integrity (NDI) on Cisco IOS Devices” outlines key criteria and configurations commands NSS and DIB administrators may use to more effectively detect and investigate unauthorized access on Cisco IOS systems. Learn more: media.defense.gov/2023/Oct/0…
17
30
2
136
14,369
Adversaries may gain access to NSS and DIB network devices through SNMPv1 and SNMPv2c read-write community strings. Keep your networks secure by upgrading to SNMPv3 which includes encryption and authentication. media.defense.gov/2022/Jun/1…
25
121
13
436
38,416
Prevent malicious actors from targeting NSS and DIB networks – upgrade to SNMPv3 with encryption and authentication. Details here: media.defense.gov/2022/Jun/1… #CybersecurityAwarenessMonth
17
64
3
196
17,960
NSA/CSS retweeted
PHP security risks remain high and PHP mitigation requires immediate attention. Our guidance is further supported by additional agencies including @CISACyber, @NCSC, @ASDGovAu, and CERT-EU. If you have not reviewed your exposure and applied mitigations, now is the time. Please read the linked resources, follow requisite vendor guidance, assess your environment, and implement mitigations without delay. nsa.gov/Press-Room/Press-Rel…
48
207
21
617
37,227
Cisco Systems are used worldwide within infrastructure networks and include various password protection types. Brush up on Cisco password best practices to learn which types to use and avoid to better secure NSS and DIB networks against malicious actors. media.defense.gov/2022/Feb/1… #CybersecurityAwarenessMonth
25
112
13
467
31,441
NSA/CSS retweeted
UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Rel…
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
87
936
79
3,872
329,354
NSA/CSS retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,296
10,832
2,842
70,318
12,618,312
We recommend Cisco users disable the Smart Install (SMI) auto-loading feature on all NSS and DIB network devices to mitigate exploitation by remote attackers. Have you taken this action? Read more: media.defense.gov/2019/Jul/1… #CybersecurityAwarenessMonth
47
746
84
2,898
163,612
Stop Russian compromise of your network devices by hardening your SNMP. We urge NSS and DIB admins to move to SNMPv3 immediately to ensure payloads are authenticated and encrypted. Full hardening guidance here: nsa.gov/Cybersecurity/Cybers…
80
251
30
1,071
94,093
Closing our "25 Years Decoded: NSA & 9/11" series: NSA Deputy Director Tim Kosiba recounts working in a forensic lab on 9/11, the instant shift to protecting families, the rise of Tailored Access Operations (TAO), and his pledge to keep “never again” alive. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
39
57
9
188
29,389
A penultimate look at the series: Penny, a current volunteer historian for NSA’s Center for Cryptologic History (CCH) and former senior executive, shares the instant shift in priorities that turned the morning of terror into a call to action for the NSA. Tune in to hear her experience before the final episode. #25YearsDecoded #NSAstories #WeWillNeverForget
26
54
7
158
21,920
Building on the insights from Dr. Adrian Stanger, NSA’s Senior Cryptographic Authority, at the Billington Cybersecurity Conference, we're highlighting the urgent need for quantum-resistant algorithms to secure the nation’s digital future. Check out the Post-Quantum Cryptography (PQC) Resource Hub: nsa.gov/cybersecurity/post-q…
35
63
14
155
16,966
Email servers remain a top target for adversaries. From Russian state-sponsored phishing to exploitation of unpatched or misconfigured software, the threats are real. For #CybersecurityAwarenessMonth, we’re sharing critical remediations to protect NSS and DIB networks. Secure your servers: nsa.gov/Cybersecurity/Cybers…
39
67
8
267
20,151
Contribution and impact: In our "25 Years Decoded: NSA & 9/11" series, Avi shares his story of contributing to the response. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
21
32
4
116
15,956
Preparedness and remembrance: In our "25 Years Decoded: NSA & 9/11" series, David reminds us to be prepared for future challenges by also remembering the past. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
17
32
6
109
14,125
NSA/CSS retweeted
Integrity Tech has enabled Chinese government-linked threat actors to exploit organizations’ networks globally and exfiltrate critical data. We’ve joined @FBICyberDiv and others to arm organizations with guidance to proactively defend their networks from this threat. nsa.gov/Press-Room/Press-Rel…
19
125
13
265
66,485