National Security Agency/Central Security Service > Press Room > Digital Media Center > Document Gallery

An official website of the United States government

Here's how you know

Official websites use .gov

A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS

A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Clear Search 105 results found.

Protect Operational Technologies and Control Systems against Cyber Attacks

Cybersecurity Advisory on mitigation measures to patch critical vulnerability in Windows servers using DNS server role.

Joint UK/NCSC, NSA, DHS/CISA, CSE advisory on Russian intelligence services (APT29) targeting of COVID-19 virus vaccine research

Info Sheet: Operating on a Compromised Network (July 2014)

This guidance identifies common VPN misconfigurations and vulnerabilities.

This guidance goes deeper, providing device administrators specific implementation instructions and example configurations.

Info Sheet: Detect and Prevent Web Shell Malware (April 2020)

Tech Report: TENS Virtual Machine Guide (June 2020)

Info Sheet: Mitigating Cloud Vulnerabilities (January2020)

Advisory: Patch Critical Cryptographic Vulnerability in Microsoft Windows Clients and Servers

Advisory: Mitigate CVE-2019-19781: Critical Vulnerability in Citrix Application Delivery Controller (ADC) and Citrix Gateway ( January 2020)

Info Sheet: Managing Risk From Transport Layer Security Inspection (December 2019)

JOINT STATEMENT ENSURING SECURITY OF 2020 ELECTIONS

Tech Report: Hardening SIEM Solution (October 2019)

Advisory: Patch Critical Vulnerability In Atlassian Confluence (October 2019)

Advisory: Turla Group Exploits Iranian APT To Expand Coverage Of Victims (October 2019)

Cybersecurity Advisory on mitigating recent virtual private network (VPN) vulnerabilities

Advisory about risk of compromise from continued use of Adobe Flash.

NSA Cybersecurity Information on best practice of continuously hunting for network intrusions.

NSA Cybersecurity Information on best practice of exercising a system recovery plan.