CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security
CISA unveiled CISA 2030: Defend, Harden, Prevail to strengthen national cyber defense and critical infrastructure security amid rising threats.
SOURCE ARCHIVE · ORIGINAL LINKS INCLUDED
CISA unveiled CISA 2030: Defend, Harden, Prevail to strengthen national cyber defense and critical infrastructure security amid rising threats.
CISA, FBI, and partners issued a joint advisory warning of the SafePay ransomware group, active in 2026, targeting critical infrastructure sectors globally with tactics to steal data and encrypt systems.
U.S. and international agencies warn a China-based cybersecurity firm enables global attacks on critical infrastructure via botnets, VPNs and edge devices, urging network defenders to implement mitigations.
CISA launched Cybersecurity Awareness Month with the theme 'Securing the Next 250,' urging critical infrastructure owners to adopt foundational cybersecurity practices and the 3Rs: Reduce, Replace, Recover.
CISA released a whitepaper outlining a framework to transition the CVE Program from its Growth Era to a Quality Era, emphasizing maturation and global collaboration.
CISA concluded Cyber Storm X, a four-day national cybersecurity exercise involving 2,000 participants from public and private sectors to test responses to a simulated nation-state cyberattack on critical infrastructure.
CISA released guidance to help critical infrastructure operators deploy decoy systems that detect and disrupt cyber intrusions, improving defenses against sophisticated attacks.
CISA and NIST released guidelines to protect federal cloud identity systems from token theft and forgery, addressing rising attacks on SSO and API access mechanisms.
CISA released an updated Insider Threat Mitigation Guide to help organizations address evolving insider threats, including those linked to hybrid work and AI, with practical mitigation steps.
U.S. cybersecurity agencies warn Chinese AI firms are using illicit knowledge distillation to extract proprietary U.S. AI models, accelerating their development at the expense of American innovation.
CISA released an advisory detailing red team assessments at two critical infrastructure organizations, highlighting differences in detection and response capabilities to inform cybersecurity improvements across sectors.
CISA released the Logging Reference Architecture to help federal agencies meet OMB logging requirements by November 2026, improving network monitoring and cyber defense through structured logging standards.
CISA released a K-12 Cybersecurity Foundations Resource Package to help schools and districts address rising cyber threats with cost-effective, actionable guidance.
U.S. agencies and South Korea’s police issued a joint advisory warning of the Gunra ransomware threat to critical infrastructure sectors, citing double extortion tactics and specific CVEs used for initial access.
CISA released guidance for federal agencies on securely using and contributing to open source software, aligning with recent executive orders to strengthen software supply chain security.
CISA and partners released updated 2026 Minimum Elements for a Software Bill of Materials (SBOM), expanding guidance to cover all software types and incorporating feedback from over 90 public comments.
CISA and allied agencies released joint guidance to help critical infrastructure operators isolate vital operational technology systems during cyber incidents or geopolitical crises.
U.S. agencies warn of Russian state-backed hackers exploiting a zero-click flaw in Zimbra Collaboration Suite to steal email data from Western organizations, including government and defense entities.
U.S. agencies updated a joint advisory warning of Iranian-affiliated cyber actors targeting industrial control systems, including Rockwell Automation, Schneider Electric, and Siemens PLCs, across critical infrastructure...
CISA and international partners released guidance to help software makers and online services collaborate with security researchers through structured vulnerability disclosure programs.
CISA and partners issued a joint advisory warning that Russian state-sponsored actors are targeting vulnerable networking devices in critical infrastructure sectors worldwide, urging immediate mitigation steps.
CISA launched ANCHOR-CI, a new advisory framework to enhance public-private collaboration on securing critical infrastructure against evolving threats.