MAR-10459736.r1.v1 WHIRLPOOL Backdoor | CISA
Bulletins RSS - National Cyber Awareness System

MAR-10459736.r1.v1 WHIRLPOOL Backdoor | CISA

   Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
People’s Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection | CISA
Bulletins RSS - National Cyber Awareness System

People’s Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection | CISA

Summary The United States and international cybersecurity authorities are issuing this joint Cybersecurity Advisory (CSA) to highlight a recently discovered cluster of activity of interest associated with a People’s Republic...
Malicious Actors Exploit CVE-2023-27350 in PaperCut MF and NG | CISA
Bulletins RSS - National Cyber Awareness System

Malicious Actors Exploit CVE-2023-27350 in PaperCut MF and NG | CISA

SUMMARY The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint Cybersecurity Advisory (CSA) in response to the active exploitation of CVE-2023-27350. This...
MAR-10435108-1.v1 ICONICSTEALER | CISA
Bulletins RSS - National Cyber Awareness System

MAR-10435108-1.v1 ICONICSTEALER | CISA

Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein....
APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers | CISA
Bulletins RSS - National Cyber Awareness System

APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers | CISA

APT28 accesses poorly maintained Cisco routers and deploys malware on unpatched devices using CVE-2017-6742. Overview and Context The UK National Cyber Security Centre (NCSC), the US National Security Agency (NSA),...
#StopRansomware: LockBit 3.0 | CISA
Bulletins RSS - National Cyber Awareness System

#StopRansomware: LockBit 3.0 | CISA

SUMMARY Note: this joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail ransomware variants and ransomware threat actors. These #StopRansomware...
Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server | CISA
Bulletins RSS - National Cyber Awareness System

Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server | CISA

SUMMARY From November 2022 through early January 2023, the Cybersecurity and Infrastructure Security Agency (CISA) and authoring organizations identified the presence of indicators of compromise (IOCs) at a federal civilian...
#StopRansomware: Royal Ransomware | CISA
Bulletins RSS - National Cyber Awareness System

#StopRansomware: Royal Ransomware | CISA

SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These...
#StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities | CISA
Bulletins RSS - National Cyber Awareness System

#StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities | CISA

SUMMARY Note: This Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and various ransomware threat actors. These...
ESXiArgs Ransomware Virtual Machine Recovery Guidance | CISA
Bulletins RSS - National Cyber Awareness System

ESXiArgs Ransomware Virtual Machine Recovery Guidance | CISA

Summary The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) are releasing this joint Cybersecurity Advisory (CSA) in response to the ongoing ransomware campaign, known...
Protecting Against Malicious Use of Remote Monitoring and Management Software | CISA
Bulletins RSS - National Cyber Awareness System

Protecting Against Malicious Use of Remote Monitoring and Management Software | CISA

Summary The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Multi-State Information Sharing and Analysis Center (MS-ISAC) (hereafter referred to as the “authoring organizations”) are releasing this...
Ongoing Cyber Threats to U.S. Water and Wastewater Systems
Bulletins RSS - National Cyber Awareness System

Ongoing Cyber Threats to U.S. Water and Wastewater Systems

Original release date: October 14, 2021 | Last revised: October 25, 2021SummaryImmediate Actions WWS Facilities Can Take Now to Protect Against Malicious Cyber Activity • Do not click on suspicious...
Conti Ransomware
Bulletins RSS - National Cyber Awareness System

Conti Ransomware

Original release date: September 22, 2021 | Last revised: September 29, 2021SummaryImmediate Actions You Can Take Now to Protect Against Conti Ransomware • Use multi-factor authentication. • Segment and segregate...
APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus
Bulletins RSS - National Cyber Awareness System

APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus

Original release date: September 16, 2021 | Last revised: November 22, 2021SummaryThis Joint Cybersecurity Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework, Version 8. See the...
Ransomware Awareness for Holidays and Weekends
Bulletins RSS - National Cyber Awareness System

Ransomware Awareness for Holidays and Weekends

Original release date: August 31, 2021 | Last revised: September 2, 2021SummaryImmediate Actions You Can Take Now to Protect Against Ransomware • Make an offline backup of your data. •...
BadAlloc Vulnerability Affecting BlackBerry QNX RTOS
Bulletins RSS - National Cyber Awareness System

BadAlloc Vulnerability Affecting BlackBerry QNX RTOS

Original release date: August 17, 2021 | Last revised: August 23, 2021SummaryOn August 17, 2021, BlackBerry publicly disclosed that its QNX Real Time Operating System (RTOS) is affected by a...