NSA - Security Ticks

What 2024 taught us about security vulnerabilties

BitSight, Black Duck, Checkmarx, CISA, cybersecurity, FBI, Fortinet, NCSC, News, NSA, report, Skybox Security, survey, Tenable, Veracode, vulnerability / SecurityTicks

What 2024 taught us about security vulnerabilties 2025-01-14 at 06:03 By Help Net Security From zero-day exploits to weaknesses in widely used software and hardware, the vulnerabilities uncovered last year underscore threat actors’ tactics and the critical gaps in organizational defenses. This roundup showcases the standout findings from 2024’s cybersecurity reports, highlighting critical risks and […]

React to this headline:

What 2024 taught us about security vulnerabilties Read More »

Australia’s ACSC and ASD Team Up with CISA, NSA, FBI, and International Allies to Protect Communications Infrastructure

ACSC, ASD, CISA, FBI, hardening guidance, NSA, secure by design, vulnerability / SecurityTicks

Australia’s ACSC and ASD Team Up with CISA, NSA, FBI, and International Allies to Protect Communications Infrastructure 2024-12-04 at 16:18 By Cyble Overview A coalition of cybersecurity agencies, including the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), the Federal Bureau of Investigation (FBI), Australia’s Australian Signals Directorate (ASD), the Australian Cyber

React to this headline:

Australia’s ACSC and ASD Team Up with CISA, NSA, FBI, and International Allies to Protect Communications Infrastructure Read More »

Zero-days dominate top frequently exploited vulnerabilities

0-day, CISA, Don't miss, FBI, Hot stuff, NCSC, News, NSA, report, Tenable, vulnerability / SecurityTicks

Zero-days dominate top frequently exploited vulnerabilities 2024-11-14 at 07:03 By Mirko Zorz A joint report by leading cybersecurity agencies from the U.S., UK, Canada, Australia, and New Zealand has identified the most commonly exploited vulnerabilities of 2023. Zero-day vulnerabilities on the rise The advisory highlights that malicious cyber actors increasingly targeted zero-day vulnerabilities, posing significant

React to this headline:

Zero-days dominate top frequently exploited vulnerabilities Read More »

Ghidra: Open-source software reverse engineering framework

cybersecurity, Don't miss, GitHub, Government, Hot stuff, News, NSA, open source, software / SecurityTicks

Ghidra: Open-source software reverse engineering framework 2024-06-17 at 07:01 By Help Net Security Ghidra, a cutting-edge open-source software reverse engineering (SRE) framework, is a product of the National Security Agency (NSA) Research Directorate. The framework features high-end software analysis tools, enabling users to analyze compiled code across various platforms, including Windows, macOS, and Linux. Ghidra’s

React to this headline:

Ghidra: Open-source software reverse engineering framework Read More »

NSA Appoints Dave Luber as Cybersecurity Director

appointed, Government, NSA / SecurityTicks

NSA Appoints Dave Luber as Cybersecurity Director 2024-04-08 at 13:32 By Eduard Kovacs US National Security Agency appoints Dave Luber as its new cybersecurity director following the retirement of Rob Joyce. The post NSA Appoints Dave Luber as Cybersecurity Director appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

NSA Appoints Dave Luber as Cybersecurity Director Read More »

APT29 revamps its techniques to breach cloud environments

APT, CISA, cloud security, cybercrime, Don't miss, FBI, Hot stuff, NCSC, News, NSA, threat / SecurityTicks

APT29 revamps its techniques to breach cloud environments 2024-02-27 at 14:16 By Helga Labus Russian threat actors APT29 are changing their techniques and expanding their targets to access cloud environments, members of the Five Eyes intelligence alliance have warned. About APT29 APT29 (aka Midnight Blizzard, aka Cozy Bear) is a cyber espionage group believed to

React to this headline:

APT29 revamps its techniques to breach cloud environments Read More »

NSA Announces Retirement of Cybersecurity Director Rob Joyce

Government, NSA / SecurityTicks

NSA Announces Retirement of Cybersecurity Director Rob Joyce 2024-02-21 at 13:46 By Eduard Kovacs NSA says Rob Joyce is retiring as cybersecurity director and will be replaced by David Luber, the current deputy director of cybersecurity. The post NSA Announces Retirement of Cybersecurity Director Rob Joyce appeared first on SecurityWeek. This article is an excerpt

React to this headline:

NSA Announces Retirement of Cybersecurity Director Rob Joyce Read More »

General Timothy Haugh Takes Lead of NSA and Cyber Command

Cybercom, Cyberwarfare, Featured, Government, NSA / SecurityTicks

General Timothy Haugh Takes Lead of NSA and Cyber Command 2024-02-05 at 01:49 By Mike Lennon General Timothy D. Haugh assumed command of NSA and USCYBERCOM on February 2, 2024, taking over the role from General Paul M. Nakasone. The post General Timothy Haugh Takes Lead of NSA and Cyber Command appeared first on SecurityWeek.

React to this headline:

General Timothy Haugh Takes Lead of NSA and Cyber Command Read More »

NSA Blocked 10 Billion Connections to Malicious and Suspicious Domains

Malware & Threats, NSA / SecurityTicks

NSA Blocked 10 Billion Connections to Malicious and Suspicious Domains 20/12/2023 at 18:32 By Ionut Arghire The National Security Agency has published a new yearly report detailing its cybersecurity efforts throughout 2023. The post NSA Blocked 10 Billion Connections to Malicious and Suspicious Domains appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

NSA Blocked 10 Billion Connections to Malicious and Suspicious Domains Read More »

NSA Issues Guidance on Incorporating SBOMs to Improve Cybersecurity

Application Security, NSA, SBOM, Supply Chain Security, Uncategorized / SecurityTicks

NSA Issues Guidance on Incorporating SBOMs to Improve Cybersecurity 18/12/2023 at 17:16 By Ionut Arghire NSA has published guidance to help organizations incorporate SBOM to mitigate supply chain risks. The post NSA Issues Guidance on Incorporating SBOMs to Improve Cybersecurity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

NSA Issues Guidance on Incorporating SBOMs to Improve Cybersecurity Read More »

Modeling organizations’ defensive mechanisms with MITRE D3FEND

CISO, collaboration, Compliance, cybersecurity, Don't miss, Features, framework, Hot stuff, MITRE, News, NSA, opinion, security ROI, security standard, standards, strategy / SecurityTicks

Modeling organizations’ defensive mechanisms with MITRE D3FEND 15/11/2023 at 09:02 By Mirko Zorz Funded by the National Security Agency, MITRE’s D3FEND framework is helping to provide standardization, specificity, and repeatability needed by cybersecurity engineers. As the framework moves from the beta version to version 1.0 in 2024, we asked D3FEND creator Peter Kaloroumakis how D3FEND

React to this headline:

Modeling organizations’ defensive mechanisms with MITRE D3FEND Read More »

Security in the impending age of quantum computers

attacks, cybersecurity, Don't miss, Encryption, Expert analysis, Expert corner, Government, Hot stuff, News, NIST, NSA, opinion, public-key cryptography, Quantinuum, quantum computing, standards, strategy / SecurityTicks

Security in the impending age of quantum computers 09/11/2023 at 09:02 By Help Net Security Quantum computing is poised to be one of the most important technologies of the 21st century. With global governments having collectively pledged more than $38 billion in public funds for quantum technologies and $2.1 billion of new private capital flowing

React to this headline:

Security in the impending age of quantum computers Read More »

Former British Cyberespionage Agency Employee Gets Life in Prison for Stabbing an American Spy

GCHQ, NSA, Tracking & Law Enforcement / SecurityTicks

Former British Cyberespionage Agency Employee Gets Life in Prison for Stabbing an American Spy 01/11/2023 at 14:16 By Associated Press Former British cyberespionage agency employee was sentenced in a London court for attempted murder, will have to serve at least 13 years in prison. The post Former British Cyberespionage Agency Employee Gets Life in Prison

React to this headline:

Former British Cyberespionage Agency Employee Gets Life in Prison for Stabbing an American Spy Read More »

Advanced ‘StripedFly’ Malware With 1 Million Infections Shows Similarities to NSA-Linked Tools

Featured, Malware, Malware & Threats, NSA / SecurityTicks

Advanced ‘StripedFly’ Malware With 1 Million Infections Shows Similarities to NSA-Linked Tools 27/10/2023 at 17:47 By Ionut Arghire The StripedFly malware has APT-like capabilities, but remained unnoticed for five years, posing as a cryptocurrency miner. The post Advanced ‘StripedFly’ Malware With 1 Million Infections Shows Similarities to NSA-Linked Tools appeared first on SecurityWeek. This article

React to this headline:

Advanced ‘StripedFly’ Malware With 1 Million Infections Shows Similarities to NSA-Linked Tools Read More »

NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics

ICS, ICS/OT, NSA, OT / SecurityTicks

NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics 17/10/2023 at 14:16 By Ionut Arghire NSA has released Elitewolf, a repository of intrusion detection signatures and analytics for OT environments. The post NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics Read More »

ELITEWOLF: NSA’s repository of signatures and analytics to secure OT

cybersecurity, GitHub, Government, ICS/SCADA, News, NSA / SecurityTicks

ELITEWOLF: NSA’s repository of signatures and analytics to secure OT 17/10/2023 at 05:02 By Help Net Security Cyber entities continue to show a persistent interest in targeting critical infrastructure by taking advantage of vulnerable OT assets. To counter this threat, NSA has released a repository for OT Intrusion Detection Signatures and Analytics to the NSA

React to this headline:

ELITEWOLF: NSA’s repository of signatures and analytics to secure OT Read More »

Securing GitHub Actions for a safer DevOps pipeline

CISA, Cloud, cloud security, credentials, cybersecurity, DevOps, Don't miss, Features, GitHub, Hot stuff, Kubernetes, monitoring, News, NSA, open source, opinion, StepSecurity / SecurityTicks

Securing GitHub Actions for a safer DevOps pipeline 02/10/2023 at 07:32 By Mirko Zorz GitHub Actions provides a platform for continuous integration and continuous delivery (CI/CD), enabling your build, test, and deployment process automation. It allows you to establish workflows that build and test each pull request in your repository and deploy approved pull requests

React to this headline:

Securing GitHub Actions for a safer DevOps pipeline Read More »

National Security Agency is Starting an Artificial Intelligence Security Center

AI, artificial inteligence, Artificial Intelligence, Featured, NSA / SecurityTicks

National Security Agency is Starting an Artificial Intelligence Security Center 29/09/2023 at 18:02 By Associated Press The NSA is starting an artificial intelligence security center — a crucial mission as AI capabilities are increasingly acquired, developed and integrated into U.S. defense and intelligence systems. The post National Security Agency is Starting an Artificial Intelligence Security

React to this headline:

National Security Agency is Starting an Artificial Intelligence Security Center Read More »

Nic Carter doubles down on theory Bitcoin was invented by NSA

Bitcoin, BTC, conspiracy, Nic Carter, NSA, Satoshi Nakamoto / SecurityTicks

Nic Carter doubles down on theory Bitcoin was invented by NSA 22/09/2023 at 09:02 By Cointelegraph By Martin Young The decade-old “NSA created Bitcoin” theory has again made the rounds on social media, with one Bitcoin advocate adding more weight to his ongoing theory. This article is an excerpt from Cointelegraph.com News View Original Source

React to this headline:

Nic Carter doubles down on theory Bitcoin was invented by NSA Read More »

Cash-Strapped IronNet Faces Bankruptcy Options

Government, IronNet, Network Security, NSA, SPAC, Threat Intelligence / SecurityTicks

Cash-Strapped IronNet Faces Bankruptcy Options 06/09/2023 at 22:46 By Ryan Naraine It appears to be the end of the road for IronNet, the once-promising network security play founded by former NSA director General Keith Alexander. The post Cash-Strapped IronNet Faces Bankruptcy Options appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Cash-Strapped IronNet Faces Bankruptcy Options Read More »