@NSAGov

National Security Agency/Central Security Service official account, home to America's codemakers and codebreakers. Likes, retweets, and follows ≠ endorsement.

 Fort Meade, MD
nsa.gov/
Joined December 2013
  • Tweets4K
  • Following0
  • Followers1.2M
1.7KMedia
Adversaries may gain access to NSS and DIB network devices through SNMPv1 and SNMPv2c read-write community strings. Keep your networks secure by upgrading to SNMPv3 which includes encryption and authentication. media.defense.gov/2022/Jun/1…
The image shows a comparison of three types of Simple Network Management Protocols (SNMP). SNMPv1 and SNMPv2c are marked with red "X" symbols, indicating disapproval. SNMPv3 is marked with a green check mark, indicating approval.

ALT The image shows a comparison of three types of Simple Network Management Protocols (SNMP). SNMPv1 and SNMPv2c are marked with red "X" symbols, indicating disapproval. SNMPv3 is marked with a green check mark, indicating approval.

19
116
12
410
34,606
Prevent malicious actors from targeting NSS and DIB networks – upgrade to SNMPv3 with encryption and authentication. Details here: media.defense.gov/2022/Jun/1… #CybersecurityAwarenessMonth
An infographic comparing SNMPv1/v2c and SNMPv3. The left side, labeled SNMPv1 & SNMPv2c, highlights clear-text protocol, lack of strong protection, and easy interception of sensitive data. The right side, labeled SNMPv3, emphasizes encryption, stronger authentication, and enhanced network security.

ALT An infographic comparing SNMPv1/v2c and SNMPv3. The left side, labeled SNMPv1 & SNMPv2c, highlights clear-text protocol, lack of strong protection, and easy interception of sensitive data. The right side, labeled SNMPv3, emphasizes encryption, stronger authentication, and enhanced network security.

14
62
3
188
16,703
NSA/CSS retweeted
NSA Cyber
@NSACyberOct 23
PHP security risks remain high and PHP mitigation requires immediate attention. Our guidance is further supported by additional agencies including @CISACyber, @NCSC, @ASDGovAu, and CERT-EU. If you have not reviewed your exposure and applied mitigations, now is the time. Please read the linked resources, follow requisite vendor guidance, assess your environment, and implement mitigations without delay. nsa.gov/Press-Room/Press-Rel…
NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities.

ALT NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities.

41
198
21
605
34,868
Cisco Systems are used worldwide within infrastructure networks and include various password protection types. Brush up on Cisco password best practices to learn which types to use and avoid to better secure NSS and DIB networks against malicious actors. media.defense.gov/2022/Feb/1… #CybersecurityAwarenessMonth
The image displays a table titled "Cisco Password Types." It lists password types from 0 to 9, detailing the ability to crack, vulnerability severity, and NSA recommendation for each. Some types are labeled as "Do not use," while others are "Recommended" or have conditional approval.

ALT The image displays a table titled "Cisco Password Types." It lists password types from 0 to 9, detailing the ability to crack, vulnerability severity, and NSA recommendation for each. Some types are labeled as "Do not use," while others are "Recommended" or have conditional approval.

23
113
13
464
30,674
NSA/CSS retweeted
NSA Cyber
@NSACyberOct 22
UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Rel…

NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities

FORT MEADE, Md. — PHP — short for PHP: Hypertext Preprocessor — works on most major operating systems.  It runs directly on web servers and can be added into HTML to create

nsa.gov
NSA Cyber
@NSACyberOct 21
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
87
932
79
3,867
326,783
NSA/CSS retweeted
NSA Cyber
@NSACyberOct 21
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,303
10,839
2,834
70,334
12,526,610
We recommend Cisco users disable the Smart Install (SMI) auto-loading feature on all NSS and DIB network devices to mitigate exploitation by remote attackers. Have you taken this action? Read more: media.defense.gov/2019/Jul/1… #CybersecurityAwarenessMonth
The image displays a list titled "SMI Mitigation Actions" with a background of a gear and network motif. The list includes: 1) Disable Smart Install auto-loading feature on all network devices. 2) Review Cisco switch configuration files for deviations from documented pre-existing configurations. 3) Implement deny by default strategy at edge firewall devices and ensure TFTP (UDP port 69) and SMI (TCP port 4786) are denied.

ALT The image displays a list titled "SMI Mitigation Actions" with a background of a gear and network motif. The list includes: 1) Disable Smart Install auto-loading feature on all network devices. 2) Review Cisco switch configuration files for deviations from documented pre-existing configurations. 3) Implement deny by default strategy at edge firewall devices and ensure TFTP (UDP port 69) and SMI (TCP port 4786) are denied.

46
748
84
2,905
162,610
Stop Russian compromise of your network devices by hardening your SNMP. We urge NSS and DIB admins to move to SNMPv3 immediately to ensure payloads are authenticated and encrypted. Full hardening guidance here: nsa.gov/Cybersecurity/Cybers…
A slide detailing actions for administrators to mitigate Simple Network Management Protocol (SNMP) issues. It includes the following points: utilize SNMPv3 with authPriv for security, ensure administrative credentials are properly configured with different passwords for authentication and encryption, limit object identifiers to a predefined list, apply Extended Access Control Lists (ACLs) to mitigate unauthorized access, and segregate SNMP traffic to a separate management network.

ALT A slide detailing actions for administrators to mitigate Simple Network Management Protocol (SNMP) issues. It includes the following points: utilize SNMPv3 with authPriv for security, ensure administrative credentials are properly configured with different passwords for authentication and encryption, limit object identifiers to a predefined list, apply Extended Access Control Lists (ACLs) to mitigate unauthorized access, and segregate SNMP traffic to a separate management network.

80
249
30
1,071
92,742
Closing our "25 Years Decoded: NSA & 9/11" series: NSA Deputy Director Tim Kosiba recounts working in a forensic lab on 9/11, the instant shift to protecting families, the rise of Tailored Access Operations (TAO), and his pledge to keep “never again” alive. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
38
56
8
185
29,120
A penultimate look at the series: Penny, a current volunteer historian for NSA’s Center for Cryptologic History (CCH) and former senior executive, shares the instant shift in priorities that turned the morning of terror into a call to action for the NSA. Tune in to hear her experience before the final episode. #25YearsDecoded #NSAstories #WeWillNeverForget
26
53
7
154
21,698
Building on the insights from Dr. Adrian Stanger, NSA’s Senior Cryptographic Authority, at the Billington Cybersecurity Conference, we're highlighting the urgent need for quantum-resistant algorithms to secure the nation’s digital future. Check out the Post-Quantum Cryptography (PQC) Resource Hub: nsa.gov/cybersecurity/post-q…
A panel of five people talking at the 2026 Billington Cybersecurity Conference.

ALT A panel of five people talking at the 2026 Billington Cybersecurity Conference.

35
63
14
153
16,777
Email servers remain a top target for adversaries. From Russian state-sponsored phishing to exploitation of unpatched or misconfigured software, the threats are real. For #CybersecurityAwarenessMonth, we’re sharing critical remediations to protect NSS and DIB networks. Secure your servers: nsa.gov/Cybersecurity/Cybers…
A digital graphic shows a laptop with a glowing envelope being hooked. The National Security Agency logo is in the upper left corner. The text reads, "Securing your email is a fundamental step in protecting your organization's data.

ALT A digital graphic shows a laptop with a glowing envelope being hooked. The National Security Agency logo is in the upper left corner. The text reads, "Securing your email is a fundamental step in protecting your organization's data.

39
67
8
265
19,984
Contribution and impact: In our "25 Years Decoded: NSA & 9/11" series, Avi shares his story of contributing to the response. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
21
32
4
112
15,845
Preparedness and remembrance: In our "25 Years Decoded: NSA & 9/11" series, David reminds us to be prepared for future challenges by also remembering the past. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
17
32
5
106
14,001
NSA/CSS retweeted
NSA Cyber
@NSACyberOct 8
Integrity Tech has enabled Chinese government-linked threat actors to exploit organizations’ networks globally and exfiltrate critical data. We’ve joined @FBICyberDiv and others to arm organizations with guidance to proactively defend their networks from this threat. nsa.gov/Press-Room/Press-Rel…
"NSA joins FBI and others in releasing: Chinese government-linked cyber threat actors combine automated and hands-on hacking tools to steal sensitive data. Cybersecurity advisory.

ALT "NSA joins FBI and others in releasing: Chinese government-linked cyber threat actors combine automated and hands-on hacking tools to steal sensitive data. Cybersecurity advisory.

19
125
13
264
66,099
NSA/CSS retweeted
NSA Cyber
@NSACyberOct 8
NSA recommends implementing #ZeroTrust mitigation principles to enhance security of legacy #OperationalTechnology and prevent catastrophic impacts to U.S. national security, economic security, and public health and safety. Learn more: media.defense.gov/2026/Oct/0…
On the left side, text reads, "NSA Releases: Hardening Department of War (DOW) Critical Operational Technology (OT) Environments with Zero Trust (ZT) Principles." Below, it says, "Cybersecurity Information Sheet." The NSA logo is displayed in the top left corner.

ALT On the left side, text reads, "NSA Releases: Hardening Department of War (DOW) Critical Operational Technology (OT) Environments with Zero Trust (ZT) Principles." Below, it says, "Cybersecurity Information Sheet." The NSA logo is displayed in the top left corner.

22
102
15
373
39,214
Highlighting teamwork: Continuing our "25 Years Decoded: NSA & 9/11" series, Farid discusses the importance of teamwork and constant vigilance. Listen to his insights. #25YearsDecoded #NSAstories #WeWillNeverForget
21
36
2
108
15,548
Discover resilience and unity: In our "25 Years Decoded: NSA & 9/11" series, Susan shares her experience of resilience and unity at the NSA during times of crisis. Hear her story. #25YearsDecoded #NSAstories #WeWillNeverForget
25
30
3
105
16,519
Explore a pivotal moment in history: An NSA analyst reflects on the unity and rapid evolution of our capabilities post-9/11. Listen to their story. #25YearsDecoded #NSAstories #WeWillNeverForget
45
50
7
183
26,634
NSA is taking proactive steps to protect national security systems from quantum computing threats. Key initiatives include the launch of the Post-Quantum Cryptography Resources Hub, collaboration on standards and guidelines, raising awareness and education, and partnering with industry and academia. Learn more: nsa.gov/cybersecurity/post-q…
The image features a stylized design with the text "Post-Quantum Cryptography Resource Hub" and "Now Live" on a dark background. A logo resembling the letters "PQC" is on the left, and the NSA seal is in the lower right corner.

ALT The image features a stylized design with the text "Post-Quantum Cryptography Resource Hub" and "Now Live" on a dark background. A logo resembling the letters "PQC" is on the left, and the NSA seal is in the lower right corner.

82
202
35
737
48,072
Load more