Research reports
1,224 reports from 387 publishers45 added in the past week
Added Mon 13 Apr
Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks
* Search for indicators of compromise. * Use antivirus software. * Patch all systems. * Prioritize patching known exploited vulnerabilities. * Train users to recognize and report phishing attempts. * Use multi-factor authentication. Note: this advisory uses…
Vulnerabilities
Added Wed 29 Oct 2025
Defending Against Malicious Cyber Activity Originating from Tor
This advisory—written by the Cybersecurity Security and Infrastructure Security Agency (CISA) with contributions from the Federal Bureau of Investigation (FBI)—highlights risks associated with Tor, along with technical details and recommendations for…
Added Sun 17 Aug 2025
Iranian Cyber Actors May Target Vulnerable US Networks and Entities of Interest
Overview The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), the Departmen
Added Wed 23 Apr 2025
aa23-075a-stop-ransomware-lockbit.pdf
#StopRansomware advisories and to learn more about other ransomware threats and no-cost resources. The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing & Analysis…
Ransomware
#StopRansomware: RansomHub Ransomware
To report suspicious or criminal activity related to information found in this joint Cybersecurity Advisory, contact your local FBI field office or CISA’s 24/7 Operations Center at Report@cisa.gov or (888) 282-0870. When available, please include the…
Ransomware
#StopRansomware: Akira Ransomware
To report suspicious or criminal activity related to information found in this joint Cybersecurity Advisory, contact your local FBI field office or CISA’s 24/7 Operations Center at Report@cisa.gov or (888) 282-0870. When available, please include the…
Ransomware
Added Sun 2 Feb 2025
Contec CMS8000 Contains a Backdoor
Introduction The Cybersecurity and Infrastructure Security Agency (CISA) analyzed three versions of firmware for the Contec CMS8000, a patient monitor used by the Healthcare and Public Health sector, and discove
Malware
Added Mon 27 Jan 2025
MAR-10454006.r1.v2.CLEAR
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
MAR-10454006.r5.v1.CLEAR__0.pdf
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
MAR-10454006.r2.v1.CLEAR
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
MAR-10454006.r4.v2.CLEAR_.pdf
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
MAR-10459736.r1.v1.CLEAR_.pdf
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
MAR-10454006.r3.v1.CLEAR
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
Added Fri 1 Nov 2024
aa24-038a_csa_prc_state_sponsored_actors_compromise_us_critical_infrastructure_3.pdf
SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA),
Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure
Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure Summary The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (
Added Thu 20 Jun 2024
Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity
Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity Overview • Immediately change all default passwords of OT devices (including PLCs and HMIs), and use strong, unique passwords. • Limit exposure of OT systems to the internet. • Implement…
Added Wed 24 Apr 2024
PRC State-Sponsored Cyber Activity: Actions for Critical Infrastructure Leaders
SUMMARY This fact sheet provides an overview for executive leaders on the urgent risk posed by People’s Republic of China (PRC) state-sponsored cyber actors known as “Volt Typhoon.” CISA—along with the National Security Agency (NSA), the Federal Bureau of…
State-sponsored
Added Wed 17 Apr 2024
Review of the Summer 2023 Microsoft Exchange Online Intrusion
No excerpt available.
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.