CSIAC (@DoD_CSIAC) header
CSIAC (@DoD_CSIAC) profile picture

CSIAC

@DoD_CSIAC

The Cybersecurity & Information Systems Information Analysis Center is a component of the DoW Information Analysis Center enterprise. Interactions ≠ endorsement

 Belcamp, MD
csiac.dtic.mil/
Joined February 2011
  • Tweets5.9K
  • Following3.1K
  • Followers2.4K
1.4KMedia
Photo by CSIAC (@DoD_CSIAC)Photo by CSIAC (@DoD_CSIAC)Photo by CSIAC (@DoD_CSIAC)Photo by CSIAC (@DoD_CSIAC)Photo by CSIAC (@DoD_CSIAC)Photo by CSIAC (@DoD_CSIAC)Photo by CSIAC (@DoD_CSIAC)Photo by CSIAC (@DoD_CSIAC)Photo by CSIAC (@DoD_CSIAC)Photo by CSIAC (@DoD_CSIAC)
Nation-state cyber actors are targeting #CriticalInfrastructure. Having an up-to-date incident response plan can help your org quickly and effectively isolate, contain, eradicate, remediate, and communicate incidents. Get started: cisa.gov/cybersecurity-aware…
Image is split with the left side half showing a gradient of blue and red with digital effects and the right half being white. The "Securing the Next 250" logo is in the bottom right corner. There is a blue and red gradient shield with a clipboard with a hazard symbol inside. The text reads "Next step: level up your defenses. Two New Actions for 2026. Have an Incident Response Plan and Use It! CPG 2.0 1.C. Organizations should develop, maintain, update, and regularly exercise IR plans for common threat scenarios such as ransomware attacks. Ensure drills are realistic and include all relevant stakeholders, such as organizational leadership and legal counsel, in addition to technical personnel. IR plans should be reviewed and drilled on an annual basis at minimum". The CISA logo is in the bottom left corner with text that reads "Cybersecurity Awareness Month October 2026".

ALT Image is split with the left side half showing a gradient of blue and red with digital effects and the right half being white. The "Securing the Next 250" logo is in the bottom right corner. There is a blue and red gradient shield with a clipboard with a hazard symbol inside. The text reads "Next step: level up your defenses. Two New Actions for 2026. Have an Incident Response Plan and Use It! CPG 2.0 1.C. Organizations should develop, maintain, update, and regularly exercise IR plans for common threat scenarios such as ransomware attacks. Ensure drills are realistic and include all relevant stakeholders, such as organizational leadership and legal counsel, in addition to technical personnel. IR plans should be reviewed and drilled on an annual basis at minimum". The CISA logo is in the bottom left corner with text that reads "Cybersecurity Awareness Month October 2026".

11
47
5
133
11,154
CSIAC retweeted
NSA Cyber (@NSACyber) profile picture
NSA Cyber
@NSACyberAug 25
NSA today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. Learn about the threats and appropriate mitigations to reduce risk: nsa.gov/Press-Room/Press-Rel…
The National Security Agency (NSA) today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. The reports — ASIC Best Practices Threat Catalog and the Application Specific Integrated Circuit (ASIC) Level of Assurance 1 (LoA1) Best Practices — explain the threats against ASICs and recommend mitigations to reduce risk.

ALT The National Security Agency (NSA) today released two technical reports addressing threats to application specific integrated circuits (ASICs) during the design and manufacturing process. The reports — ASIC Best Practices Threat Catalog and the Application Specific Integrated Circuit (ASIC) Level of Assurance 1 (LoA1) Best Practices — explain the threats against ASICs and recommend mitigations to reduce risk.

27
88
9
292
26,760
🚨 Iranian-affiliated cyber actors are targeting internet-connected PLCs from Rockwell Automation, Schneider Electric, & Siemens. Disconnect PLCs from the internet & watch for suspicious activity. Read the updated advisory go.dhs.gov/iFo
Image from CISA Cyber (@CISACyber)
4
59
9
124
19,500
⚠️ We issued 5 🆕 and 2 updated public #ICS Advisories. These advisories provide info about current security issues, vulnerabilities, & exploits surrounding ICS. More at cisa.gov/news-events/ics-adv…
3
15
1
24
5,689
We’ve updated Emergency Directive 25-03 in response to cyber threat actors using FIRESTARTER malware to gain persistent remote access & control of Cisco Firepower & Secure Firewall devices. Review the directive & implement the recommended actions. 👉 go.dhs.gov/5Zf
4
30
2
53
6,335
Chinese government-linked cyber threat actors are using covert networks built from compromised SOHO routers, IoT, & smart devices to carry out malicious activity. We urge all orgs to review our advisory for TTPs, IOCs, & mitigations against this threat. 🔗 go.dhs.gov/5Z3
Image from CISA Cyber (@CISACyber)
10
92
11
199
30,973
⚠️ We issued 10 🆕 and two updated public #ICS Advisories. These advisories provide info about current security issues, vulnerabilities, & exploits surrounding ICS. More at cisa.gov/news-events/ics-adv…
18
2
32
8,465
⚠️ We issued 3 🆕 and 2 updated public #ICS Advisories. These advisories provide info about current security issues, vulnerabilities, & exploits surrounding ICS. More at cisa.gov/news-events/ics-adv…
2
17
1
36
6,303
OpenEoX is an OASIS OPEN international standard for exchanging product lifecycle information, such as End-of-Support, across software and hardware industries. Learn about the benefits and urgent need for orgs to adopt OpenEoX: go.dhs.gov/irZ
Blog image with a red and blue gradient header. Text reads: "The End is Just the Beginning of Better Security: Enhanced Vulnerability Management with OpenEoX." A speech bubble labeled "BLOG" is in the top right. The CISA logo is at the bottom right.

ALT Blog image with a red and blue gradient header. Text reads: "The End is Just the Beginning of Better Security: Enhanced Vulnerability Management with OpenEoX." A speech bubble labeled "BLOG" is in the top right. The CISA logo is at the bottom right.

23
25
41
8,482
🚨🚨🚨
CISA Cyber (@CISACyber) profile pictureCISA Cyber
@CISACyberFeb 5
🚨 Just Released: Binding Operational Directive 26-02 focuses on mitigating risks from end-of-support edge devices. We urge all orgs to review and implement the recommended actions immediately to protect your network. 👉 go.dhs.gov/iDR
16
31
4,438
🚨Cyber threat actors are leveraging commercial spyware targeting mobile messaging apps. They are using sophisticated techniques, like zero-click exploits, to gain access & compromise devices. Learn more: go.dhs.gov/ihQ
Graphic featuring a Cybersecurity and Infrastructure Security Agency (CISA) alert about spyware targeting users of messaging applications. The image includes a warning symbol, a smartphone displaying chat notifications, and icons representing digital threats.

ALT Graphic featuring a Cybersecurity and Infrastructure Security Agency (CISA) alert about spyware targeting users of messaging applications. The image includes a warning symbol, a smartphone displaying chat notifications, and icons representing digital threats.

3
52
7
127
19,531
⚠️ @CISAgov issued 5️⃣ NEW public #ICS Advisories. These advisories provide info about current security issues, vulnerabilities, & exploits surrounding ICS. More at go.dhs.gov/ihP
Image from CISA Cyber (@CISACyber)
1
17
1
25
8,233
🛡️ We added Gladinet CentreStack and Triofox vulnerability CVE-2025-11371 & CWP vulnerability CVE-2025-48703 to our Known Exploited Vulnerabilities Catalog. Visit go.dhs.gov/Z3Q & apply mitigations to protect your org from cyberattacks. #Cybersecurity #InfoSec
Image from CISA Cyber (@CISACyber)
2
13
1
35
9,416
⚠️ @CISAgov issued 5️⃣ new & 3️⃣ updated public #ICS Advisories. These advisories provide info about current security issues, vulnerabilities, & exploits surrounding ICS. More at go.dhs.gov/ink
Image from CISA Cyber (@CISACyber)
10
22
7,041
🚨 Nation-state threat actors have compromised F5’s systems & downloaded portions of its BIG-IP source code—posing serious risk to FCEB agencies. Follow the guidance in Emergency Directive 26-01 immediately to protect systems from potential exploits. 🔗 go.dhs.gov/isY
8
44
9
82
14,639
🛡️ We added 5️⃣vulnerabilities to our Known Exploited Vulnerabilities Catalog. Visit go.dhs.gov/Z3Q & apply mitigations to protect your org from cyberattacks. #Cybersecurity #InfoSec
6
17
36
7,206
🚨 Cyber threat actors are exploiting newly identified zero-day vulnerabilities in Cisco Adaptive Security Appliances via web services, posing significant risk. Federal agencies must act immediately and follow the guidance in Emergency Directive 25-03. 🔗 go.dhs.gov/iAK
Image from CISA Cyber (@CISACyber)
7
111
12
222
35,568
📢 Our Malware Analysis Report details malicious listeners for Ivanti Endpoint Manager Mobile. These listeners enable unauthorized access, code injection, & data exfiltration. Review the report for detection & mitigation info 👉cisa.gov/news-events/analysi…
Image from CISA Cyber (@CISACyber)
5
47
2
146
21,202
On June 6, 1944, Allied forces stormed the beaches of Normandy, France, changing the course of history. Their courage serves as a reminder of the price of freedom. Let us never forget their heroism and sacrifice. defense.gov/Multimedia/Exper…
D-Day graphic.

ALT D-Day graphic.

921
7,829
517
29,265
1,149,595
We analyzed #Contec CMS8000 firmware, a patient monitor used in the #HPH sector, and discovered an embedded backdoor with a hard-coded IP address, introducing risk to patient safety with possible improper responses to patient vital signs. Learn more 👉 bit.ly/40RGmMe
Image from CISA Cyber (@CISACyber)
5
20
4
36
11,994
Load more