Search Results

The default setting for search results displays All Content. If you prefer to see recent content only, please adjust the date filter.

169 Results Found

Russian State-Sponsored Actors Exploiting Vulnerability in VMware® Workspace ONE Access Using Compromised Credentials

Russian state-sponsored malicious cyber actors are exploiting a vulnerability in VMware® Access and VMware Identity Manager products, allowing the actors access to protected data and abusing federated authentication. VMware released a patch for the Command Injection Vulnerability captured in CVE-2020-4006 on December 3rd 2020. NSA encourages National Security System (NSS), Department of Defense (DoD), and Defense Industrial Base (DIB) network administrators to prioritize mitigation of the vulnerability on affected servers.
Public

FBI Cybersecurity Advisory TLP White: Russian GRU 85th GTsSS Deploys Previously Undisclosed Drovorub Malware

The Russian General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center (GTsSS), military unit 26165, is deploying previously undisclosed malware for Linux® systems, called D
Member

Understanding and Mitigating Russian State-Sponsored Cyber Threats to U.S. Critical Infrastructure

This joint Cybersecurity Advisory (CSA)—authored by the Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and National Security Agency (NSA)—provides an overview of Russian state-sponsored cyber operations; commonly observed tactics, techniques, and procedures (TTPs); detection actions; incident response guidance; and mitigations.
Public

HC3 TLP White Alert: Hardening Remote Access VPN Amplify Alert - October 1, 2021

The NSA and CISA issued a joint information sheet providing guidance on hardening Virtual Private Networks (VPNs) services.
Public

HC3-TLP White: Conti Ransomware Amplify Alert September 30, 2021

Conti is a ransomware group that has aggressively targeted healthcare organizations since it was first observed in 2019. Conti ransomware attacks have targeted healthcare industry, major corporations and government agencies, particularly those in North America.
Public

Executive Order 14028 Improving the Nation’s Cybersecurity May 12, 2021

Executive Order 14028 Improving the Nation’s Cybersecurity May 12, 2021
Member

DHS - TLP Green Report: Ransomware Attacks to Increase - June 24, 2021

It has been assessed that ransomware attacks targeting US networks are likely to increase in the near and long term because cybercriminals have developed effective business models to increase their financial gain, likelihood for operational success, and anonymity.