NSA News & Highlights

April 20, 2022

CISA, FBI, NSA, and International Partners Issue Advisory on Demonstrated Threats and Capabilities of Russian State-Sponsored and Cyber Criminal Actors

WASHINGTON – The United States and allied cybersecurity authorities issued a joint Cybersecurity Advisory today on the increased threat of Russian cyber groups targeting critical infrastructure that could impact organizations both within and beyond the Ukraine region. The Cybersecurity and Infrastructure Security Agency (CISA) authored “Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure” in partnership with the Federal Bureau of Investigation (FBI), National Security Agency (NSA), Australian Cyber Security Centre (ACSC), Canadian Centre for Cyber Security (CCCS), National Cyber Security Centre New Zealand (NZ NCSC), and the United Kingdom’s National Cyber Security Centre (NCSC-UK) and National Crime Agency (NCA), and with contributions from industry members of CISA’s Joint Cyber Defense Collaborative.

April 13, 2022

NSA’s Centers of Academic Excellence students give Florida a peek at the Nation’s future cybersecurity workforce

Over the course of three days, over 200 students from NSA’s Centers of Academic Excellence in Cybersecurity (NCAE-C) designated schools and USCYBERCOM’s Academic Engagement Network tested the security of a fictional port. Armed with fictitious threat intelligence, students identified solutions and overcame obstacles as they either attacked or defend parts of a Fort Lauderdale port carrying U.S. government defense weapons.

April 13, 2022

NSA partners with DOE, CISA, and FBI to release advisory on APT Cyber Tools Targeting ICS/SCADA devices

FORT MEADE, Md. — The Department of Energy (DOE), along with the Cybersecurity and Infrastructure Agency (CISA), the National Security Agency (NSA), and the Federal Bureau of Investigation (FBI), issued a joint cybersecurity advisory, “APT Cyber Tools Targeting ICS/SCADA Devices,” to warn that certain advanced persistent threat (APT) actors have the capability to gain full system access to multiple industrial control system/supervisory control and data acquisition (ICS/SCADA) devices.

March 23, 2022

American Spy Machine From WWII Featured by National Cryptologic Museum Ahead of Reopening

Nicknamed American Dragon, the cryptologic device was constructed by the Signal Security Agency (SSA) in 1944 to assist the British Colossus — a set of computers created by British codebreakers largely to break the German’s Schlusselzusatz SZ-40 Cipher machine.

March 21, 2022

NSA provides expertise at Hack the Port 22

A team of NSA cybersecurity practitioners will join over 150 students participating in HackThePort22, hosted by the Maryland Initiative for Security Innovation (MISI) and inspired by US Cyber Command, in Fort Lauderdale, Fla. from March 21-25, 2022.

March 15, 2022

NSA, CISA release Kubernetes Hardening Guidance

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) released a Cybersecurity Technical Report, “Kubernetes Hardening Guidance,” today. This report details threats to Kubernetes environments and provides configuration guidance to minimize risk.

March 8, 2022

Cybersecurity Speaker Series: Ghidra — Beyond the Code

The National Security Agency (NSA) Cybersecurity Collaboration Center released the fourth video in its Cybersecurity Speaker Series today, focusing on Ghidra, NSA’s open source reverse engineering tool. The Speaker Series highlights subject matter experts at NSA sharing insights, lessons, and contributions of their work in cybersecurity.

March 1, 2022

NSA Details Network Infrastructure Best Practices

The National Security Agency (NSA) released the “Network Infrastructure Security Guidance” Cybersecurity Technical Report today. The report captures best practices based on the depth and breadth of experience in supporting customers and responding to threats. 

Feb. 18, 2022

Georgia Institute of Technology wins the 2021 NSA Codebreaker Challenge

Today, the National Security Agency announced Georgia Institute of Technology, University of North Georgia and Oregon State University as the first, second and third place winners of the 2021 NSA Codebreaker Challenge (CBC). CBC is an annual cryptanalysis and reverse engineering challenge that is open to students at U.S.-based academic institutions. Each year the challenge offers students a realistic, NSA mission-centric scenario that typifies the work that NSA performs daily in its role defending of the Nation.

Feb. 17, 2022

NSA Publishes Best Practices for Selecting Cisco Password Types

The National Security Agency published guidance today to help administrators secure network infrastructure devices and their credentials. The “Cisco Password Types: Best Practices” Cybersecurity Information Sheet analyzes Cisco’s wide variety of password encryption and hashing schemes to secure passwords stored in configuration files. NSA provides recommendations based on each password type and best practices to help administrators secure sensitive credentials.