NSA Cybersecurity Advisories & Guidance


NSA leverages its elite technical capability to develop advisories and mitigations on evolving cybersecurity threats.

Browse or search our repository of advisories, info sheets, tech reports, and operational risk notices listed below. Some resources have access requirements.

For a subset of cybersecurity products focused on telework and general network security for end users, view our Telework and Mobile Security Guidance page.

To read our complete series on protecting DoD microelectronics from adversary influence, view our DoD Microelectronics Guidance page.
 

ImageTitlePublication Date
CTR: DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 2CTR: DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 22/27/2023
CTR: DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 3CTR: DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 36/29/2023
CTR: Joint Guidance: Identifying and Mitigating Living Off the Land TechniquesCTR: Joint Guidance: Identifying and Mitigating Living Off the Land Techniques2/7/2024
CTR: Network Infrastructure Security Guide (October 2023 Update)CTR: Network Infrastructure Security Guide (October 2023 Update)6/15/2022
CTR: UEFI Secure Boot Customization (March 2023 Update)CTR: UEFI Secure Boot Customization (March 2023 Update)3/20/2023
AUTHENTICATION_MECHANISMS_CSA_EXEC_U_OO_198854_20.PDFCybersecurity Advisory: (Abridged) Detecting Abuse of Authentication Mechanisms (December 2020)12/17/2020
AUTHENTICATION_MECHANISMS_CSA_U_OO_198854_20.PDFCybersecurity Advisory: (Full) Detecting Abuse of Authentication Mechanisms (December 2020)12/17/2020
CSA_CHINESE_EXPLOIT_VULNERABILITIES_UOO179811.PDFCybersecurity Advisory: Chinese State-Sponsored Actors Exploit Publicly Known Vulnerabilities (October 2020)10/20/2020
ADVISORY FURTHER TTPS ASSOCIATED WITH SVR CYBER ACTORS.PDFCybersecurity Advisory: Further TTPs associated with SVR cyber actors5/7/2021
DDD-200730-216-040.PDFCybersecurity Advisory: Mitigate the GRUB2 BootHole Vulnerability7/30/2020
CSA_DROVORUB_RUSSIAN_GRU_MALWARE_AUG_2020.PDFCybersecurity Advisory: Russian GRU 85th GTsSS Deploys Previously Undisclosed Drovorub Malware8/13/2020
CSA_VMWARE ACCESS_U_OO_195076_20.PDFCybersecurity Advisory: Russian State-Sponsored Actors Exploiting Vulnerability in VMware Workspace ONE Access Using Compromised Credentials (December 2020)12/7/2020
ESF: 5G Network Slicing: Security Considerations for Design, Deployment, and MaintenanceESF: 5G Network Slicing: Security Considerations for Design, Deployment, and Maintenance7/17/2023
ESF: Identity and Access Management Educational AidESF: Identity and Access Management Educational Aid3/21/2023
ESF: Identity and Access Management Educational Aid Talking PointsESF: Identity and Access Management Educational Aid Talking Points3/21/2023
Page 10 of 16

Additional Documents

Some guidance is protected and requires use of a DoD Common Access Card (CAC) to access. Visit https://cyber.mil/nsa/cybersecurity-advisories-and-technical-guidance/ to access the following and other protected documents:

  • Avoid Dangers of Wildcard TLS Certificates and the ALPACA Technique (FOUO version)
  • Protecting VSAT Communications
  • Quantum Security of Symmetric Cryptography and Hash Functions: A Review
  • Securing AWS S3
  • Security Considerations for Office 365 Government Customers