Cybersecurity and Infrastructure Security Agency

We partnered with Brenntag and the Kanawha-Putnam County Emergency Planning Committee (KPCEPC) to host the West Virginia Chemical Tabletop Exercise, bringing together federal and industry partners to work through a simulated, high-consequence incident to examine security protocols and enhance facility resilience. Together, we evaluated critical operational elements by testing information sharing between public and private entities, operational communication protocols, and environmental and community response. The exercise reinforced the value of ongoing cooperation to safeguard critical infrastructure. Learn more: cisa.gov/chemical-sector

Phishing attacks threaten our future. Teach your team to recognize and report suspicious emails—protecting the next 250 years starts today. Have an incident response plan ready for when threats strike. Learn more: https://lnkd.in/etEDBUak #SecuringTheNext250

We are committed to protecting this vital national interest through close collaboration with election partners to strengthen resilience and protect public confidence in the voting process. Dive into our 2026 Election Infrastructure Security Plan: go.dhs.gov/5aB

Chinese government-linked threat actors enabled by the Integrity Technology Group are using a unique combination of large-scale botnets, virtual private network (VPN) infrastructure, living off the land techniques, and repositories of computer network exploitation tools to exfiltrate sensitive data from organizations worldwide—including multiple U.S. #CriticalInfrastructure sectors, law enforcement agencies, education and religious organizations. These threat actors exploit vulnerabilities using automated scanning tools, cross-site scripting attacks, and password spraying while establishing persistence through VPN software and using scripts to steal emails and credentials. We’ve released a joint advisory with the FBI Cyber Division, National Security Agency, and international partners detailing this threat activity and providing network defenders with detection and mitigation guidance along with a full list of the common vulnerabilities and exposures (CVEs) these threat actors have successfully exploited. Take the following actions immediately to protect your organization: 1️⃣ Disable unused services and ports 2️⃣ Sanitize user input in web applications 3️⃣ Implement identity, credential, and access management policies and require multi-factor authentication. Read the full advisory here 👉 go.dhs.gov/5zS

#K12 districts can strengthen cyber defenses by taking steps like: ✅Protecting login credentials of students & staff ✅Performing, verifying & testing backups ✅Creating & exercising a cyber incident response plan Learn more: go.dhs.gov/5Dh #CybersecurityAwarenessMonth

Watch Acting Director Nick Anderson talk about cybersecurity challenges, collaboration, and cyber threat campaigns with Australian Signals Directorate's Stephanie Crowe on McCrary Institute for Cyber & Critical Infrastructure Security's Cyber Focus Podcast with Frank Cilluffo.

Join us in celebrating our partner National Cyber Security Centre in commemorating their 10th anniversary. We are thankful for their collaboration and commitment to keep our nations secure, connected, and resilient.

📢 Government entities: Get a .gov domain for added security and public trust. Only legitimate government agencies can use a .gov email address. Check your eligibility and learn more: get.gov #CybersecurityAwarenessMonth

There are many paths for students and recent graduates to begin their careers at CISA. Our internships offer hands on, mission-driven experience where early career talent builds technical skills while helping protect the homeland from cyber and physical threats. Join a team of public servants using their expertise every day to safeguard the nation’s critical infrastructure. Learn more: https://go.dhs.gov/5bY