NSA/CSS (@NSAGov) header
NSA/CSS (@NSAGov) profile picture

National Security Agency/Central Security Service official account, home to America's codemakers and codebreakers. Likes, retweets, and follows ≠ endorsement.

Fort Meade, MD
Joined December 2013
Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)
Effective cyber hygiene remains essential for defending networks against advanced persistent threats. This #CyberSecurityAwarenessMonth, we're highlighting immediate actions to reduce risk, such as multi-factor authentication (MFA). Learn more from @US_CYBERCOM. ⬇️
Received a sudden flood of MFA login prompts on your phone? That’s MFA Fatigue, and it’s a trap. Scammers spam your device hoping you’ll tap "Approve" just to stop the buzzing. Deny the request and change your password. #USCYBERCOM #SecuringTheNext250 #CybersecurityAwarenessMonth
19
66
3
357
22,033
Network Device Integrity (NDI) on Cisco IOS Devices” outlines key criteria and configurations commands NSS and DIB administrators may use to more effectively detect and investigate unauthorized access on Cisco IOS systems. Learn more: media.defense.gov/2023/Oct/0…
17
30
2
135
14,088
Adversaries may gain access to NSS and DIB network devices through SNMPv1 and SNMPv2c read-write community strings. Keep your networks secure by upgrading to SNMPv3 which includes encryption and authentication. media.defense.gov/2022/Jun/1…
25
121
13
434
38,186
Prevent malicious actors from targeting NSS and DIB networks – upgrade to SNMPv3 with encryption and authentication. Details here: media.defense.gov/2022/Jun/1… #CybersecurityAwarenessMonth
17
64
3
196
17,810
NSA/CSS retweeted
PHP security risks remain high and PHP mitigation requires immediate attention. Our guidance is further supported by additional agencies including @CISACyber, @NCSC, @ASDGovAu, and CERT-EU. If you have not reviewed your exposure and applied mitigations, now is the time. Please read the linked resources, follow requisite vendor guidance, assess your environment, and implement mitigations without delay. nsa.gov/Press-Room/Press-Rel…
47
203
21
612
36,849
Cisco Systems are used worldwide within infrastructure networks and include various password protection types. Brush up on Cisco password best practices to learn which types to use and avoid to better secure NSS and DIB networks against malicious actors. media.defense.gov/2022/Feb/1… #CybersecurityAwarenessMonth
25
112
13
467
31,314
NSA/CSS retweeted
UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Rel…
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
87
934
79
3,867
329,048
NSA/CSS retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,295
10,834
2,841
70,311
12,605,651
We recommend Cisco users disable the Smart Install (SMI) auto-loading feature on all NSS and DIB network devices to mitigate exploitation by remote attackers. Have you taken this action? Read more: media.defense.gov/2019/Jul/1… #CybersecurityAwarenessMonth
47
747
84
2,900
163,407
Stop Russian compromise of your network devices by hardening your SNMP. We urge NSS and DIB admins to move to SNMPv3 immediately to ensure payloads are authenticated and encrypted. Full hardening guidance here: nsa.gov/Cybersecurity/Cybers…
80
249
30
1,069
93,217
Closing our "25 Years Decoded: NSA & 9/11" series: NSA Deputy Director Tim Kosiba recounts working in a forensic lab on 9/11, the instant shift to protecting families, the rise of Tailored Access Operations (TAO), and his pledge to keep “never again” alive. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
38
57
8
187
29,338
A penultimate look at the series: Penny, a current volunteer historian for NSA’s Center for Cryptologic History (CCH) and former senior executive, shares the instant shift in priorities that turned the morning of terror into a call to action for the NSA. Tune in to hear her experience before the final episode. #25YearsDecoded #NSAstories #WeWillNeverForget
26
53
7
158
21,878
Building on the insights from Dr. Adrian Stanger, NSA’s Senior Cryptographic Authority, at the Billington Cybersecurity Conference, we're highlighting the urgent need for quantum-resistant algorithms to secure the nation’s digital future. Check out the Post-Quantum Cryptography (PQC) Resource Hub: nsa.gov/cybersecurity/post-q…
35
63
14
155
16,928
Email servers remain a top target for adversaries. From Russian state-sponsored phishing to exploitation of unpatched or misconfigured software, the threats are real. For #CybersecurityAwarenessMonth, we’re sharing critical remediations to protect NSS and DIB networks. Secure your servers: nsa.gov/Cybersecurity/Cybers…
39
67
8
266
20,109
Contribution and impact: In our "25 Years Decoded: NSA & 9/11" series, Avi shares his story of contributing to the response. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
21
32
4
115
15,928
Preparedness and remembrance: In our "25 Years Decoded: NSA & 9/11" series, David reminds us to be prepared for future challenges by also remembering the past. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
17
32
6
108
14,103
NSA/CSS retweeted
Integrity Tech has enabled Chinese government-linked threat actors to exploit organizations’ networks globally and exfiltrate critical data. We’ve joined @FBICyberDiv and others to arm organizations with guidance to proactively defend their networks from this threat. nsa.gov/Press-Room/Press-Rel…
19
125
13
264
66,416
NSA/CSS retweeted
NSA recommends implementing #ZeroTrust mitigation principles to enhance security of legacy #OperationalTechnology and prevent catastrophic impacts to U.S. national security, economic security, and public health and safety. Learn more: media.defense.gov/2026/Oct/0…
23
102
15
374
39,396
Highlighting teamwork: Continuing our "25 Years Decoded: NSA & 9/11" series, Farid discusses the importance of teamwork and constant vigilance. Listen to his insights. #25YearsDecoded #NSAstories #WeWillNeverForget
21
35
2
110
15,611
Discover resilience and unity: In our "25 Years Decoded: NSA & 9/11" series, Susan shares her experience of resilience and unity at the NSA during times of crisis. Hear her story. #25YearsDecoded #NSAstories #WeWillNeverForget
25
30
3
108
16,571