@NSAGov

National Security Agency/Central Security Service official account, home to America's codemakers and codebreakers. Likes, retweets, and follows ≠ endorsement.

 Fort Meade, MD
nsa.gov/
Joined December 2013
  • Tweets4K
  • Following0
  • Followers1.2M
1.7KMedia
NSA/CSS retweeted
NSA Cyber
@NSACyber6h
UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Rel…

NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities

FORT MEADE, Md. — PHP — short for PHP: Hypertext Preprocessor — works on most major operating systems.  It runs directly on web servers and can be added into HTML to create

nsa.gov
NSA Cyber
@NSACyber17h
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
56
641
49
2,800
197,893
NSA/CSS retweeted
NSA Cyber
@NSACyber17h
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,113
9,426
2,454
62,608
9,970,425
NSA/CSS retweeted
NSA Cyber
@NSACyberOct 8
Integrity Tech has enabled Chinese government-linked threat actors to exploit organizations’ networks globally and exfiltrate critical data. We’ve joined @FBICyberDiv and others to arm organizations with guidance to proactively defend their networks from this threat. nsa.gov/Press-Room/Press-Rel…
"NSA joins FBI and others in releasing: Chinese government-linked cyber threat actors combine automated and hands-on hacking tools to steal sensitive data. Cybersecurity advisory.

ALT "NSA joins FBI and others in releasing: Chinese government-linked cyber threat actors combine automated and hands-on hacking tools to steal sensitive data. Cybersecurity advisory.

19
121
10
246
57,611
NSA/CSS retweeted
NSA Cyber
@NSACyberOct 8
NSA recommends implementing #ZeroTrust mitigation principles to enhance security of legacy #OperationalTechnology and prevent catastrophic impacts to U.S. national security, economic security, and public health and safety. Learn more: media.defense.gov/2026/Oct/0…
On the left side, text reads, "NSA Releases: Hardening Department of War (DOW) Critical Operational Technology (OT) Environments with Zero Trust (ZT) Principles." Below, it says, "Cybersecurity Information Sheet." The NSA logo is displayed in the top left corner.

ALT On the left side, text reads, "NSA Releases: Hardening Department of War (DOW) Critical Operational Technology (OT) Environments with Zero Trust (ZT) Principles." Below, it says, "Cybersecurity Information Sheet." The NSA logo is displayed in the top left corner.

22
102
15
368
34,895
NSA/CSS retweeted
NSA Cyber
@NSACyberSep 8
China-based AI companies are illicitly distilling U.S. frontier AI capabilities. Read NSA’s new report, co-sealed with @FBI, @CISAgov, highlighting AI knowledge distillation, TTPs used, and recommended mitigations: media.defense.gov/2026/Sep/0…
97
274
75
829
189,038
NSA/CSS retweeted
NSA Cyber
@NSACyberAug 25
NSA today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. Learn about the threats and appropriate mitigations to reduce risk: nsa.gov/Press-Room/Press-Rel…
The National Security Agency (NSA) today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. The reports — ASIC Best Practices Threat Catalog and the Application Specific Integrated Circuit (ASIC) Level of Assurance 1 (LoA1) Best Practices — explain the threats against ASICs and recommend mitigations to reduce risk.

ALT The National Security Agency (NSA) today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. The reports — ASIC Best Practices Threat Catalog and the Application Specific Integrated Circuit (ASIC) Level of Assurance 1 (LoA1) Best Practices — explain the threats against ASICs and recommend mitigations to reduce risk.

26
88
9
294
25,491
NSA/CSS retweeted
NSA Cyber
@NSACyberAug 20
NSA and others releases guidance on applying prevention tactics to strengthen defense of U.S-based programmable logic controllers being targeted by cyber actors using AI. Learn more: media.defense.gov/2026/Aug/1… #cybersecurity #AI
51
134
15
468
72,038
NSA/CSS retweeted
NSA Cyber
@NSACyberAug 10
NSA joins the @FBI and others in releasing a joint Cybersecurity Advisory, “#StopRansomware: Gunra Ransomware,” as an ongoing effort to publish information about various ransomware variants and threat actors. Learn more: media.defense.gov/2026/Aug/1…
31
34
1
68
11,549
NSA/CSS retweeted
NSA Cyber
@NSACyberJul 29
Learn how your organization can leverage SBOMs to drive security decisions about your software systems in this updated report: 2026 Minimum Elements for a Software Bill of Materials (SBOM). media.defense.gov/2026/Jul/2…
28
39
1
70
10,103
NSA/CSS retweeted
NSA Cyber
@NSACyberJul 23
Russian state-supported actors are targeting Zimbra Collaboration Suite users to exfiltrate sensitive communications and email directories. Reduce the risk of being a target. Read the full Cybersecurity Advisory for IOCs and recommended mitigations: media.defense.gov/2026/Jul/2…
13
39
2
41
9,243
NSA/CSS retweeted
NSA Cyber
@NSACyberJul 16
A well-defined CVD program enhances a supplier's ability to engage with security researchers and efficiently address vulnerabilities. Read the report to learn more about CVD programs and how they can help you address security vulnerabilities. media.defense.gov/2026/Jul/1…
15
35
1
47
11,472
NSA/CSS retweeted
NSA Cyber
@NSACyberJul 13
Russian cyber actors are targeting critical infrastructure networks worldwide. Follow the latest Cybersecurity Advisory from NSA and partners to harden your routers: media.defense.gov/2026/Jul/0… #cybersecurity
21
73
3
110
15,576
The cyber domain is a battlefield—and America’s warfighters are leading the way. The warriors of @US_CYBERCOM and @NSAGov are relentlessly strengthening our national defense and protecting our Nation every single day.
351
932
31
5,508
147,499
The warfighters of @US_CYBERCOM & @NSAGov ensure America is never in a fair fight. It was an honor to witness their innovative and unwavering commitment to defend our Republic.
222
501
16
2,841
130,513
NSA/CSS retweeted
NSA Cyber
@NSACyberMay 28
NSA’s ZIG webpage is now live! We are providing accessible resources for enhancing enterprise cybersecurity with Zero Trust. To learn more, visit the ZIG webpage. nsa.gov/Cybersecurity/ZIG/
39
131
21
464
116,244
Session 10: The Deputies Meeting — Priorities for Cyber and National Defense LIVE from @NSAGov's Darren Turner: When it comes to the tools that we're actively using, it's a strong partnership between the open sector and the government. We are testing things out in a rapid manner — regarding resources, I do believe we are on the right path. With @ENERGY's @AlexFitzDC and @forgepointcap's @andrewjmcclure. @MasonNatSec | @NSI_CTC | #NCIF2026
10
16
1
29
11,851
NSA/CSS retweeted
NSA Cyber
@NSACyberMay 21
NSA is releasing security design considerations for AI-driven automation leveraging MCP which, while simplifying the integration of diverse capabilities into powerful agent workflows, requires caution. Learn more: nsa.gov/Portals/75/documents…
69
247
32
887
113,797
NSA/CSS retweeted
NSA Cyber
@NSACyberMay 1
Better understand agentic AI systems and mitigate the cybersecurity risks using a new guide we authored with @ASDGovAu and others. View the joint report. #Cybersecurity #AgenticAI media.defense.gov/2026/Apr/3…
63
224
16
730
92,436
NSA/CSS retweeted
NSA Cyber
@NSACyberApr 23
NSA joins the @NCSC and others in releasing joint guidance detailing multiple China-nexus threat actors who are using dynamic, external covert networks of botnets to facilitate malicious cyber activity strategically at scale. Read the report today! media.defense.gov/2026/Apr/2…
53
113
6
285
31,246
Iran-affiliated cyber actors are targeting operational technology devices across US critical infrastructure, including programmable logic controllers (PLCs). These attacks have led to diminished PLC functionality, manipulation of display data and, in some cases, operational disruption and financial loss. The @FBI, @CISAGov, @NSAgov, @EPA, @ENERGY and @US_CYBERCOM are urging US organizations—especially municipalities and those in the water and energy sectors—to review the tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) detailed in this advisory. Applying the recommended mitigations will reduce the risk of compromise: ic3.gov/CSA/2026/260407.pdf
Joint cybersecurity advisory warns of Iranian-affiliated hackers targeting programmable logic controllers in US critical infrastructure.

ALT Joint cybersecurity advisory warns of Iranian-affiliated hackers targeting programmable logic controllers in US critical infrastructure.

121
619
83
1,310
224,862
Load more