Could you spot the warning signs?
Join CISA Live on June 23 at 2:00 p.m. ET for Smart, Safe, and Aware: Personal Safety Tips for Everyone. Hear from experts to improve awareness, recognize threats, and take simple steps to help keep yourself, your family, and your community safe.
CISA Issues Binding Operational Directive 26-04: Prioritizing Security Updates Based on Risk
CISAβs new Directive requires federal agencies to rapidly remediate high-risk vulnerabilities, provides flexibility for lower-risk issues, and is supported by comprehensive implementation guidance.
CISA and Partners Release Fact Sheet on Securing Automatic Tank Gauge Systems
Cyber threat actors are compromising internet-exposed automatic tank gauge systems in U.S. critical infrastructure and modifying them through command execution. This fact sheet outlines TTPs, highlights risks, and provides immediate mitigations.
CISA Issues Alert on Software Supply Chain Intrusions Targeting Developer Ecosystems
Supply chain compromises are targeting developer environments, including GitHub and Nx Console. Threat actors are abusing enterprise, cloud, and DevOps tools to gain unauthorized access and exfiltrate sensitive data.
CISA Announces Revised Town Hall Schedule to Engage with Stakeholders on Cyber Incident Reporting for Critical Infrastructure
We're hosting a series of virtual town halls to gather input on CIRCIA rulemaking.
CISAβ―Releases New Known Exploited Vulnerability Nomination Form
The new KEV Nomination Form streamlines how organizations and researchers report exploited vulnerabilities that meet the requirements for the KEV catalog.
News Updates
Latest Operational Information
Rockwell Automation FLEX I/O EtherNet/IP Adapters
Rockwell Automation RSLinx
Rockwell Automation CompactLogix
Rockwell Automation FactoryTalk Analytics PavilionX
Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP
How can we help?
All AudiencesJCDC unifies cyber defenders from organizations worldwide. This team proactively gathers, analyzes, and shares actionable cyber risk information to enable synchronized, holistic cybersecurity planning, cyber defense, and response.
StopRansomware.gov is the U.S. Government's official one-stop location for resources to tackle ransomware more effectively.
SAFECOM works to improve emergency communications interoperability across local, regional, tribal, state, territorial, international borders, and with federal government entities.
Additional CISA Resources
CISA Resources & Tools
CISA offers an array of free resources and tools, such as technical assistance, exercises, cybersecurity assessments, free training, and more.
CISA Events
CISA hosts and participates in events throughout the year to engage stakeholders, seek research partners, and communicate with the public to help protect the homeland.
CISA Services Catalog
A single resource that provides you with access to information on services across CISAβs mission areas.
CISA Training
As part of our continuing mission to reduce cybersecurity and physical security risk, CISA provides a robust offering of cybersecurity and critical infrastructure training opportunities.
