NSA/CSS (@NSAGov) header
NSA/CSS (@NSAGov) profile picture

NSA/CSS

@NSAGov

National Security Agency/Central Security Service official account, home to America's codemakers and codebreakers. Likes, retweets, and follows ≠ endorsement.

 Fort Meade, MD
nsa.gov/
Joined December 2013
  • Tweets4K
  • Following0
  • Followers1.2M
1.7KMedia
Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)Photo by NSA/CSS (@NSAGov)
Cybersecurity is a team sport. As we wrap up #CybersecurityAwarenessMonth, remember: protecting our networks isn't just IT’s responsibility—it’s everyone’s. Let’s stay resilient together. #CyberAware #NSA #NationalSecurity
16
69
10
306
16,569
Adversaries are increasingly using super intelligence (SI) to scale cyber exploitation. This #CybersecurityAwarenessMonth, we urge NSA and DIB organizations to recognize deepfake tradecraft and techniques. Check out @US_CYBERCOM's tips in the post below.
U.S. Cyber Command (@US_CYBERCOM) profile pictureU.S. Cyber Command
@US_CYBERCOMOct 29
Would you spot a deepfake of your boss? With just 3 seconds of audio, scammers can clone voices to bypass security. This #CybersecurityAwarenessMonth, remember these tips: Hang up. Call back on an official channel. Never bypass verification protocols. #USCYBERCOM #BeCyberSmart
Image from U.S. Cyber Command (@US_CYBERCOM)
37
173
17
601
33,170
David Imbordino, Director of NSA’s Cybersecurity Directorate, spoke at the Billington Cybersecurity Summit on how SI is transforming intelligence and defense. Read our guidance to harden NSS and DIB networks against modern SI threats: nsa.gov/Press-Room/Press-Rel…
David Imbordino at the 2026 Billington Cybersecurity Summit.

ALT David Imbordino at the 2026 Billington Cybersecurity Summit.

16
31
4
117
8,915
Effective cyber hygiene remains essential for defending networks against advanced persistent threats. This #CyberSecurityAwarenessMonth, we're highlighting immediate actions to reduce risk, such as multi-factor authentication (MFA). Learn more from @US_CYBERCOM. ⬇️
U.S. Cyber Command (@US_CYBERCOM) profile pictureU.S. Cyber Command
@US_CYBERCOMOct 27
Received a sudden flood of MFA login prompts on your phone? That’s MFA Fatigue, and it’s a trap. Scammers spam your device hoping you’ll tap "Approve" just to stop the buzzing. Deny the request and change your password. #USCYBERCOM #SecuringTheNext250 #CybersecurityAwarenessMonth
Image from U.S. Cyber Command (@US_CYBERCOM)
25
87
5
463
28,083
Network Device Integrity (NDI) on Cisco IOS Devices” outlines key criteria and configurations commands NSS and DIB administrators may use to more effectively detect and investigate unauthorized access on Cisco IOS systems. Learn more: media.defense.gov/2023/Oct/0…
"Detect Unauthorized Access on Cisco IOS Systems" featuring various security-related terms including Software Management, Physical Access, Interface Changes, and more.

ALT "Detect Unauthorized Access on Cisco IOS Systems" featuring various security-related terms including Software Management, Physical Access, Interface Changes, and more.

17
30
2
138
14,439
Adversaries may gain access to NSS and DIB network devices through SNMPv1 and SNMPv2c read-write community strings. Keep your networks secure by upgrading to SNMPv3 which includes encryption and authentication. media.defense.gov/2022/Jun/1…
The image shows a comparison of three types of Simple Network Management Protocols (SNMP). SNMPv1 and SNMPv2c are marked with red "X" symbols, indicating disapproval. SNMPv3 is marked with a green check mark, indicating approval.

ALT The image shows a comparison of three types of Simple Network Management Protocols (SNMP). SNMPv1 and SNMPv2c are marked with red "X" symbols, indicating disapproval. SNMPv3 is marked with a green check mark, indicating approval.

25
121
13
436
38,469
Prevent malicious actors from targeting NSS and DIB networks – upgrade to SNMPv3 with encryption and authentication. Details here: media.defense.gov/2022/Jun/1… #CybersecurityAwarenessMonth
An infographic comparing SNMPv1/v2c and SNMPv3. The left side, labeled SNMPv1 & SNMPv2c, highlights clear-text protocol, lack of strong protection, and easy interception of sensitive data. The right side, labeled SNMPv3, emphasizes encryption, stronger authentication, and enhanced network security.

ALT An infographic comparing SNMPv1/v2c and SNMPv3. The left side, labeled SNMPv1 & SNMPv2c, highlights clear-text protocol, lack of strong protection, and easy interception of sensitive data. The right side, labeled SNMPv3, emphasizes encryption, stronger authentication, and enhanced network security.

17
64
3
198
17,995
NSA/CSS retweeted
NSA Cyber (@NSACyber) profile picture
NSA Cyber
@NSACyberOct 23
PHP security risks remain high and PHP mitigation requires immediate attention. Our guidance is further supported by additional agencies including @CISACyber, @NCSC, @ASDGovAu, and CERT-EU. If you have not reviewed your exposure and applied mitigations, now is the time. Please read the linked resources, follow requisite vendor guidance, assess your environment, and implement mitigations without delay. nsa.gov/Press-Room/Press-Rel…
NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities.

ALT NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities.

49
208
21
620
37,358
Cisco Systems are used worldwide within infrastructure networks and include various password protection types. Brush up on Cisco password best practices to learn which types to use and avoid to better secure NSS and DIB networks against malicious actors. media.defense.gov/2022/Feb/1… #CybersecurityAwarenessMonth
The image displays a table titled "Cisco Password Types." It lists password types from 0 to 9, detailing the ability to crack, vulnerability severity, and NSA recommendation for each. Some types are labeled as "Do not use," while others are "Recommended" or have conditional approval.

ALT The image displays a table titled "Cisco Password Types." It lists password types from 0 to 9, detailing the ability to crack, vulnerability severity, and NSA recommendation for each. Some types are labeled as "Do not use," while others are "Recommended" or have conditional approval.

25
112
13
468
31,459
NSA/CSS retweeted
NSA Cyber (@NSACyber) profile picture
NSA Cyber
@NSACyberOct 22
UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Rel…
NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities

NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities

FORT MEADE, Md. — PHP — short for PHP: Hypertext Preprocessor — works on most major operating systems.  It runs directly on web servers and can be added into HTML to create

nsa.gov
NSA Cyber (@NSACyber) profile pictureNSA Cyber
@NSACyberOct 21
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
87
936
79
3,877
329,487
NSA/CSS retweeted
NSA Cyber (@NSACyber) profile picture
NSA Cyber
@NSACyberOct 21
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,295
10,830
2,842
70,283
12,622,032
We recommend Cisco users disable the Smart Install (SMI) auto-loading feature on all NSS and DIB network devices to mitigate exploitation by remote attackers. Have you taken this action? Read more: media.defense.gov/2019/Jul/1… #CybersecurityAwarenessMonth
The image displays a list titled "SMI Mitigation Actions" with a background of a gear and network motif. The list includes: 1) Disable Smart Install auto-loading feature on all network devices. 2) Review Cisco switch configuration files for deviations from documented pre-existing configurations. 3) Implement deny by default strategy at edge firewall devices and ensure TFTP (UDP port 69) and SMI (TCP port 4786) are denied.

ALT The image displays a list titled "SMI Mitigation Actions" with a background of a gear and network motif. The list includes: 1) Disable Smart Install auto-loading feature on all network devices. 2) Review Cisco switch configuration files for deviations from documented pre-existing configurations. 3) Implement deny by default strategy at edge firewall devices and ensure TFTP (UDP port 69) and SMI (TCP port 4786) are denied.

47
747
84
2,899
163,657
Stop Russian compromise of your network devices by hardening your SNMP. We urge NSS and DIB admins to move to SNMPv3 immediately to ensure payloads are authenticated and encrypted. Full hardening guidance here: nsa.gov/Cybersecurity/Cybers…
A slide detailing actions for administrators to mitigate Simple Network Management Protocol (SNMP) issues. It includes the following points: utilize SNMPv3 with authPriv for security, ensure administrative credentials are properly configured with different passwords for authentication and encryption, limit object identifiers to a predefined list, apply Extended Access Control Lists (ACLs) to mitigate unauthorized access, and segregate SNMP traffic to a separate management network.

ALT A slide detailing actions for administrators to mitigate Simple Network Management Protocol (SNMP) issues. It includes the following points: utilize SNMPv3 with authPriv for security, ensure administrative credentials are properly configured with different passwords for authentication and encryption, limit object identifiers to a predefined list, apply Extended Access Control Lists (ACLs) to mitigate unauthorized access, and segregate SNMP traffic to a separate management network.

80
251
30
1,072
94,162
Closing our "25 Years Decoded: NSA & 9/11" series: NSA Deputy Director Tim Kosiba recounts working in a forensic lab on 9/11, the instant shift to protecting families, the rise of Tailored Access Operations (TAO), and his pledge to keep “never again” alive. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
39
57
9
190
29,402
A penultimate look at the series: Penny, a current volunteer historian for NSA’s Center for Cryptologic History (CCH) and former senior executive, shares the instant shift in priorities that turned the morning of terror into a call to action for the NSA. Tune in to hear her experience before the final episode. #25YearsDecoded #NSAstories #WeWillNeverForget
26
54
7
159
21,930
Building on the insights from Dr. Adrian Stanger, NSA’s Senior Cryptographic Authority, at the Billington Cybersecurity Conference, we're highlighting the urgent need for quantum-resistant algorithms to secure the nation’s digital future. Check out the Post-Quantum Cryptography (PQC) Resource Hub: nsa.gov/cybersecurity/post-q…
A panel of five people talking at the 2026 Billington Cybersecurity Conference.

ALT A panel of five people talking at the 2026 Billington Cybersecurity Conference.

35
63
14
155
16,973
Email servers remain a top target for adversaries. From Russian state-sponsored phishing to exploitation of unpatched or misconfigured software, the threats are real. For #CybersecurityAwarenessMonth, we’re sharing critical remediations to protect NSS and DIB networks. Secure your servers: nsa.gov/Cybersecurity/Cybers…
A digital graphic shows a laptop with a glowing envelope being hooked. The National Security Agency logo is in the upper left corner. The text reads, "Securing your email is a fundamental step in protecting your organization's data.

ALT A digital graphic shows a laptop with a glowing envelope being hooked. The National Security Agency logo is in the upper left corner. The text reads, "Securing your email is a fundamental step in protecting your organization's data.

39
67
8
267
20,157
Contribution and impact: In our "25 Years Decoded: NSA & 9/11" series, Avi shares his story of contributing to the response. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
21
32
4
117
15,965
Preparedness and remembrance: In our "25 Years Decoded: NSA & 9/11" series, David reminds us to be prepared for future challenges by also remembering the past. Learn more. #25YearsDecoded #NSAstories #WeWillNeverForget
17
32
6
110
14,132
Load more