Alerts

Summary Actions to take today to mitigate cyber threats from ransomware:• Prioritize remediating known exploited vulnerabilities.• Train users to recognize and report phishing attempts.• Enable and enforce multifactor authentication. Note: this joint Cybersecurity Advisory (CSA) […]

Actions to take today:• Install fixed builds, updating all affected VMware Horizon and UAG systems to the latest versions. If updates or workarounds were not promptly applied following VMware’s release of updates for Log4Shell in […]

Best Practices• Apply patches as soon as possible• Disable unnecessary ports and protocols• Replace end-of-life infrastructure• Implement a centralized patch management system This joint Cybersecurity Advisory describes the ways in which People’s Republic of China […]

Actions to take today to mitigate cyber threats from ransomware:• Prioritize patching known exploited vulnerabilities.• Train users to recognize and report phishing attempts.• Enforce multifactor authentication. The Federal Bureau of Investigation (FBI), the Cybersecurity and […]

The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this Cybersecurity Advisory (CSA) to warn organizations that malicious cyber actors, likely advanced persistent threat (APT) actors, are exploiting CVE-2022-22954 and CVE-2022-22960 separately and in combination. […]

Actions for administrators to take today:• Do not expose management interfaces to the internet.• Enforce multi-factor authentication.• Consider using CISA’s Cyber Hygiene Services. The Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing […]

Best Practices to Protect Your Systems:• Control access.• Harden Credentials.• Establish centralized log management.• Use antivirus solutions.• Employ detection tools.• Operate services exposed on internet-accessible hosts with secure configurations.• Keep software updated. Cyber actors routinely […]

Tactical actions for MSPs and their customers to take today:• Identify and disable accounts that are no longer in use.• Enforce MFA on MSP accounts that access the customer environment and monitor for unexplained failed […]

This joint Cybersecurity Advisory (CSA) was coauthored by cybersecurity authorities of the United States, Australia, Canada, New Zealand, and the United Kingdom: the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau […]

Russian State-Sponsored Cyber Operations Russian state-sponsored cyber actors have demonstrated capabilities to compromise IT networks; develop mechanisms to maintain long-term, persistent access to IT networks; exfiltrate sensitive data from IT and operational technology (OT) networks; […]