CISA and UK NCSC Unveil Joint Guidelines for Secure AI System Development

CISA and UK NCSC Unveil Joint Guidelines for Secure AI System Development 11/26/2023 07:00 AM EST Today, in a landmark collaboration, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the UK National Cyber Security Centre (NCSC) are proud to announce the release of the Guidelines for Secure AI System Development. Co-sealed by 23 domestic …

CISA, FBI, MS-ISAC, and ASD’s ACSC Release Advisory on LockBit Affiliates Exploiting Citrix Bleed

CISA, FBI, MS-ISAC, and ASD’s ACSC Release Advisory on LockBit Affiliates Exploiting Citrix Bleed 11/21/2023 12:00 PM EST Today, the Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Multi-State Information Sharing & Analysis Center (MS-ISAC), and Australian Signals Directorate’s Australian Cyber Security Center (ASD’s ACSC) released a joint Cybersecurity Advisory (CSA), #StopRansomware: …

FBI and CISA Release Advisory on Scattered Spider Group

FBI and CISA Release Advisory on Scattered Spider Group 11/16/2023 11:00 AM EST Today, the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) released a joint Cybersecurity Advisory (CSA) on Scattered Spider—a cybercriminal group targeting commercial facilities sectors and subsectors. The advisory provides tactics, techniques, and procedures (TTPs) obtained through …

CISA Releases Roadmap for Artificial Intelligence Adoption

Today, CISA released its Roadmap for Artificial Intelligence—in alignment with White House Executive Order 14110: Safe, Secure, And Trustworthy Development and Use of Artificial Intelligence—to outline a comprehensive set of actions CISA will take along five lines of effort: Responsibly use AI to support our mission. Assure AI systems. Protect critical infrastructure from malicious use …

CISA Releases Update to Royal Ransomware Advisory

CISA Releases Update to Royal Ransomware Advisory 11/13/2023 02:00 PM EST Today, the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) released an update to joint Cybersecurity Advisory (CSA) #StopRansomware: Royal Ransomware. The updated advisory provides network defenders with additional information on tactics, techniques, and procedures (TTPs) and indicators of compromise …

CISA Releases Update to Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells

CISA Releases Update to Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells 09/06/2023 05:00 PM EDT The Cybersecurity and Infrastructure Security Agency (CISA) has released an update to a previously published Cybersecurity Advisory (CSA), Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells. The CSA—originally released to warn network defenders of critical infrastructure organizations about threat …

CISA and FBI Publish Joint Advisory on QakBot Infrastructure

CISA and FBI Publish Joint Advisory on QakBot Infrastructure 08/30/2023 03:00 PM EDT Today, the Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) released a joint Cybersecurity Advisory (CSA), Identification and Disruption of QakBot Infrastructure, to help organizations detect and protect against newly identified QakBot-related activity and malware. QakBot—also known as …

FBI and CISA Publish a PSA on Malicious Cyber Activity Against Election Infrastructure

FBI and CISA Publish a PSA on Malicious Cyber Activity Against Election Infrastructure 10/05/2022 09:21 AM EDT Original release date: October 5, 2022 The Federal Bureau of Investigation (FBI) and CISA have published a joint public service announcement that: Assesses malicious cyber activity aiming to compromise election infrastructure is unlikely to result in large-scale disruptions or prevent voting. …

ICS GovDelivery Email Topics

At the Cybersecurity and Infrastructure Agency (CISA), we are vigilant about finding innovative ways to get you the most actionable cyber threat information when you need it most. CISA has made improvements to email notifications. Our subscriber content lists have been updated. The previous Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) advisory topics have …

Cisco Releases Security Updates for Enterprise NFV Infrastructure Software

Cisco Releases Security Updates for Enterprise NFV Infrastructure Software 05/05/2022 11:00 AM EDT Original release date: May 5, 2022 Cisco has released security updates to address multiple vulnerabilities in Enterprise NFV Infrastructure Software. An attacker could exploit these vulnerabilities to take control of an affected system.   CISA encourages users and administrators to review Cisco …