News & Events

Featured Articles

View More Articles

CISA to Highlight Agency’s Top Priorities to Secure America at 16th Annual Billington CyberSecurity Summit

SEP 08, 2025 | PRESS RELEASE

CISA will Showcase Top Cyber Leadership, Operational Collaboration and Innovation at Annual Government-Industry Summit.

CISA, NSA and 19 International Partners Release Shared Vision of Software Bill of Materials for Cybersecurity Guide

SEP 03, 2025 | PRESS RELEASE

CISA, NSA, and 19 international partners release a shared vision of Software Bill of Materials (SBOM) highlighting the importance of SBOM in securing global supply chains & enhancing software resilience worldwide.

CISA Announces Nicholas Andersen as New Executive Assistant Director for Cybersecurity

SEP 02, 2025 | PRESS RELEASE

CISA Announces Nicholas Andersen as New Executive Assistant Director for Cybersecurity.

CISA and Partners Providing Real-Time Incident Response to Cyber Attack on State of Nevada

AUG 27, 2025 | PRESS RELEASE

CISA and its public and private sector partners are working closely with officials in Nevada as they respond to an August 24th cyber-attack targeting the state and impacting essential services.

Alerts & Directives

View More Advisories

ED 25-02: Mitigate Microsoft Exchange Vulnerability

CISA issued Emergency Directive (ED) 25-02 in response to a newly disclosed vulnerability affecting Microsoft Exchange hybrid-joined configurations.

ED 24-02: Mitigating the Significant Risk from Nation-State Compromise of Microsoft Corporate Email System

This Emergency Directive requires agencies to analyze the content of exfiltrated emails, reset compromised credentials, and take additional steps to ensure authentication tools for privileged Microsoft Azure accounts are secure.

BOD 25-01: Implementing Secure Practices for Cloud Services

This Directive complements existing federal resources for cloud security, including the Federal Risk and Authorization Management Program (FedRAMP), relevant NIST guidance, and the CISA Trusted Internet Connections (TIC) 3.0 Cloud Use Case.

BOD 23-02: Mitigating the Risk from Internet-Exposed Management Interfaces

This Directive requires agencies to take steps to reduce the attack surface created by insecure or misconfigured management interfaces across certain classes of devices.

Upcoming Events

View All Events

SEP

ISC Facility Security Committee Seminar - Regions 8, 9 & 10

SEMINAR | VIRTUAL/ONLINE

This seminar for Regions 8, 9, and 10 will walk through FSC procedures and responsibilities, discuss key updates to the Risk Management Process Standard and provide your committee with the resources to have an effective and compliant FSC.

SEP

Media Inquiries

Please direct media inquiries to CISAMedia@cisa.dhs.gov or call 703-235-2010.