Joint Cybersecurity Advisory Chinese Government-Link Cyber Threat Actors Combine Automated and Hands-On Hacking Tools to Steal Sensitive Data

CISA, FBI, and Partners Publish Joint Advisory on Chinese Government-Linked Threat Actors Using Automated and Hands-On Hacking Tools to Target Networks Worldwide

Shares tactics, techniques and procedures, indicators of compromise, and mitigations for a Chinese-gov linked threat group enabled by Integrity Technology Group targeting organizations worldwide to exfiltrate data and maintain persistence.

Read the Advisory
Cybersecurity and Infrastructure Security Agency. 2026 Election Infrastructure Security Plan. Securing the Next 250.

Just released!

Our 2026 Election Infrastructure Security Plan provides information about available no-cost, voluntary services for securing our election infrastructure. Learn how CISA helps election partners strengthen resilience and protect public confidence in the voting process.

 

Learn More
Securing the Next 250 with CISA logo in the corner next to "Cybersecurity Awareness Month"

It's Cybersecurity Awareness Month

This October, commit to having better cybersecurity in your organization to protect customers, communities and critical infrastructure.

View CISA's CAM Resources
Images of various critical infrastructure facilities including a nuclear plant, oil rig, wind and solar farm, and water plant all linked by an electric shield to represent cybersecurity at critical infrastructure facilities. The image reads: "Fact Sheet: Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators" and the CISA and FBI logos are in the upper right-hand corner.

CISA and FBI Release Fact Sheet for Critical Infrastructure Organizations Working With Third-Party ICS Integrators to Reduce Risk

This fact sheet describes how critical infrastructure operators can work with third-party industrial control systems (ICS) integrators to define secure practices and frameworks that enable service delivery while protecting the operational environment

Read the Factsheet
A 3-D figure composed of blue, green, and purple-hued cubes that seem to be floating in and out of the figure. Reads CVE in the upper left-hand corner and has the CISA logo in the upper right. The bottom reads: "Guidance: CVE Program: Establishing a Quality Era Framework."

CISA Releases White Paper on the Four Dimensions of Quality for the CVE Program

Trusted vulnerability data is the bedrock of risk-informed decision-making. This white paper details how the Common Vulnerabilities and Exposures (CVE) Program is advancing quality to keep vulnerability data consistent, reliable and actionable.

Read the Paper
Reads "National Insider Threat Awareness Month September 2026" next to a badge shape filled with images of 5 faceless people standing below icons of a building, a lock, a badge, an explosion, an eye, a camera with flash, a police badge, a human head with lighting bolt in the mind, a bomb, a bug, and an exclamation mark denoting a warning. All icons are meant to represent potential threats.

Strengthen your security

Stay vigilant. Join CISA’s National Insider Threat Awareness Month events, use our resources, and take steps to strengthen your insider threat program.

Learn More

News Updates

View More News

Latest Operational Information

View All Alerts & Advisories Subscribe to Updates

How can we help?

All Audiences
Main St, street sign

Find Help Locally

Contact your Region

Assist Visits

Protected Critical Infrastructure Information

IT professional working at computers

Industry

Secure by Design

Information Sharing: A Vital Resource

PCII Program modernized

Joint Cyber Defense Collaborative expands

A small business worker making a transaction with a customer

Small and Medium Businesses

Cyber guidance for small businesses

Supplementing passwords

Doing business with CISA

Teenager boy and classmates in high school computer class

Educational Institutions

School Safety

Cybersecurity for K-12

K-12 School Security Product Suite

Protecting Our Future: Partnering to Safeguard K-12 Organizations from Cybersecurity Threats

All Audiences

JCDC unifies cyber defenders from organizations worldwide. This team proactively gathers, analyzes, and shares actionable cyber risk information to enable synchronized, holistic cybersecurity planning, cyber defense, and response.

JCDC

StopRansomware.gov is the U.S. Government's official one-stop location for resources to tackle ransomware more effectively.

STOPRANSOMWARE

SAFECOM works to improve emergency communications interoperability across local, regional, tribal, state, territorial, international borders, and with federal government entities.

SAFECOM

Additional CISA Resources

abstract cyber space

CISA Resources & Tools

CISA offers an array of free resources and tools, such as technical assistance, exercises, cybersecurity assessments, free training, and more.

Image of an event with speaker and participants

CISA Events

CISA hosts and participates in events throughout the year to engage stakeholders, seek research partners, and communicate with the public to help protect the homeland.

Image

CISA Services Catalog

A single resource that provides you with access to information on services across CISA’s mission areas.

Employees pictured during training session

CISA Training

As part of our continuing mission to reduce cybersecurity and physical security risk, CISA provides a robust offering of cybersecurity and critical infrastructure training opportunities.