NSA Cyber

This account is verified. Learn more

@NSACyber

We protect our nation’s most sensitive systems against cyber threats. Likes, retweets, and follows ≠ endorsement.

nsa.gov/Cybersecurity/ Joined November 2019

12 Following 215K Followers 518 Posts

Latest posts 5

NSA Cyber @NSACyber 6d

PQC transition also depends on your supply chain’s readiness. We’ve joined @ASDGovAu and @CISAgov to outline questions for procurements, contract renewals, and or vendor assurance processes to prevent residual risk. #supplychain

media.defense.gov/2026/Nov/04/20…

NSA Cyber @NSACyber Oct 23

PHP security risks remain high and PHP mitigation requires immediate attention. Our guidance is further supported by additional agencies including @CISACyber, @NCSC, @ASDGovAu, and CERT-EU. If you have not reviewed your exposure and applied mitigations, now is the time. Please read the linked resources, follow requisite vendor guidance, assess your environment, and implement mitigations without delay. nsa.gov/Press-Room/Pre…

NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities.

NSA Cyber @NSACyber Oct 22

UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Pre…

www.nsa.gov NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities FORT MEADE, Md. — PHP — short for PHP: Hypertext Preprocessor — works on most major operating systems. It runs directly on web servers and can be added into HTML to create

NSA Cyber Verified account @NSACyber Oct 21

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
View quoted post on X

NSA Cyber @NSACyber Oct 21

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

NSA Cyber @NSACyber Oct 20

NSA joined @NIST and @CISACyber in releasing guidelines for managing SI control incidents. Organizations utilizing SI are encouraged to adopt these practices. Read the joint report: media.defense.gov/2026/Oct/16/20…

Text on the image reads: "NSA and Others Release: Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation. Cybersecurity Information Sheet.