Thrilled that Dave Luber takes the reins today as the new CSD Director! (this is the last NSA post from Rob J, so when the picture changes, don't think he's tweeting about himself. 😄)

Thanks to Rob Joyce for his exceptional leadership of NSA Cyber over the last few years! I’m honored to take on this role as the new Director of Cybersecurity at NSA. Cyber is a team sport – I’m looking forward to working with partners across the community. - DPL

Malicious cyber actors have improved their capabilities to infiltrate networks and gain access to sensitive data. Make sure you’re following best practices by reading our guidance.

We’ve been doing a lot of work on AI and have some takeaways. Take a minute to read our new report on best practices for secure system deployment and maintenance.

Looking forward to attending RSA - let me know what's a "can't miss" for this year. If you're attending, join me on May 8 @ 9:40am PT for "State of the Hack 2024: NSA's Perspectives" as we dive into the latest hot topics in cyber.

We highly recommend OT administrators implement these mitigations, especially changing any default passwords, to improve their cybersecurity posture and reduce their system’s vulnerability to this type of targeting.

Walk down memory lane - I used the Rainbow books when I started in 1987. Check them out at @nsagov's booth 960 in Moscone South at #rsac 2024. National Cryptologic Museum

Partnerships will be the key to securing the future of cybersecurity. Great discussion with Jen Easterly Jen Easterly🛡️, Kevin Mandia & Dave DeWalt at the @NightDragon Innovation Summit.

It’s critically important that government and industry work together on securing AI systems. Honored to have been a part of this important discussion with Brad Medairy at Billington Cyber AI this week.

Many thanks to NCSC UK for hosting #CYBERUK24! This is what we mean when we talk about how important it is to build partnerships in the competition phase - together, we'll be ready for crisis or conflict should it arise.

Our new Zero Trust guidance helps organizations disrupt malicious cyber activity by applying granular access control and visibility to applications and workloads in the environment. Make sure your systems are protected.

Our latest CSI centers on the visibility and analytics aspect of ZT model, emphasizing the significance of comprehensively observing data characteristics and events within an enterprise-wide environment.

APT 40 is a known cyber actor group that continues to practice cyber espionage and evolve its tradecraft to target government networks. Read our advisory with Australian Signals Directorate and others to make sure you’re ready to counter future targeting.

We’ve seen positive and far-reaching application of DoD’s Zero Trust framework by implementing our guidance to strengthen defenses. Our final pillar report focuses on automation and orchestration to improve threat response times and capabilities – take a minute to check it out.

When proper cybersecurity mitigations are enacted, DPRK attempts to advance its military and nuclear programs hit a hard stop. Read the joint guidance to keep the DPRK away from sensitive information in these sectors and beyond.

Secure standards are national security. We need to work together early, often, and with shared goals in order to create standards that uphold the values of transparency, security, and endurance in our rapidly evolving technological world.

More complex techniques pervade today’s cyber environment. Implementing and maintaining an effective event logging solution improves the security and resilience of systems with increased network visibility and reduced response times. Read our guidance and protect your networks.

You have to assume that a breach will occur. Leveraging Zero Trust principles helps alert you to an actor's presence and limits their ability to move within your network. Thanks to Billington Cyber for the opportunity to speak at yesterday's panel.

Talking all things cyber with my good friend and colleague LtGen Jerry Carter. This is from our episode of NSA's new podcast called "No Such Podcast." Check it out on YouTube or wherever you get your podcasts - there's more cyber content coming this season.

Organizations should take immediate action to secure data and mitigate harms from Russian military cyber intrusions. NSA is committed to continue providing cyber threat intelligence and mitigation recommendations. Read the latest joint guidance now and protect your networks.