An official website of the United States government Here's how you know Enter Search Terms(s): CISA.gov Services Report CertMain Menu Alerts and Tips Resources Industrial Control Systems || Current Activity Wednesday, November 24, 2021 CISA Releases Capacity Enhancement Guides to Enhance Mobile Device Cybersecurity for Consumers and Organizations Wednesday, November 24, 2021 VMware Releases Security Updates Monday, November 22, 2021 Reminder for Critical Infrastructure to Stay Vigilant Against Threats During Holidays and Weekends Friday, November 19, 2021 Updated: APT Exploitation of ManageEngine ADSelfService Plus Vulnerability View Current Activities Report Incidents Report Phishing Report Malware Report Vulnerabilities Share Indicators Contact US-CERT Recent Vulnerabilities 11/9 VU#999008 Compilers permit Unicode control and homoglyph characters 10/7 VU#914124 Arcadyan-based routers and modems vulnerable to authentication bypass 10/5 VU#883754 Salesforce DX command line interface (CLI) does not adequately protect sfdxurl credentials 10/5 VU#405600 Microsoft Windows Active Directory Certificate Services can allow for AD compromise via PetitPotam NTLM relay attacks 9/14 VU#131152 Microsoft Windows Print Spooler Point and Print allows installation of arbitrary queue-specific files 9/1 VU#799380 Devices supporting Bluetooth Core and Mesh Specifications are vulnerable to impersonation attacks and AuthValue disclosure Other Resources: National Vulnerability Database View Vulnerability Notes National Cyber Awareness System Current Activity Provides up-to-date information about high-impact security activity affecting the community at large. Alerts Timely information about current security issues, vulnerabilities, and exploits. Bulletins Weekly summaries of new vulnerabilities along with patch information. Analysis Reports Provide in-depth analysis on a new or evolving cyber threat. Announcements North Korean Malicious Cyber Activity: AppleJeus On February 17, 2021, CISA, the Federal Bureau of Investigation, and the Department of the Treasury identified malware and other indicators of compromise used by the North Korean government to facilitate the theft of cryptocurrency—referred to by the U.S. Government as “AppleJeus.” The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information, visit https://us-cert.cisa.gov/northkorea. Ransomware Activity Targeting the Healthcare and Public Health Sector On October 28, 2020, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the U.S. Department of Health and Human Services (HHS) released a joint cybersecurity advisory on current ransomware activity and how to prevent and respond to ransomware attacks. View Announcements Contact Us (888)282-0870 Send us email(link sends email) Download PGP/GPG keys Submit website feedback Subscribe to Alerts Receive security alerts, tips, and other updates. Enter your email address HSIN Report Home Site Map FAQ Contact Us Traffic Light Protocol PCII Accountability Disclaimer Privacy Policy FOIA No Fear Act AccessibilityPlain WritingPlug-ins Inspector General The White House USA.gov CISA is part of the Department of Homeland Security