CISA 2030: Defend, Harden, Prevail establishes the Cybersecurity and Infrastructure Security Agency's strategic vision for strengthening national cyber defense, prioritizing critical infrastructure security, and mobilizing resilience across the nation.

Download Full Strategy
Red and blue swooping lines accent the edges of the graphic accompanied by three photos of CISA employees working in various indoor and outdoor settings

CISA 2030: Defend. Harden. Prevail.

CISA's new strategy outlines a clear roadmap to strengthen national cyber defense, prioritize the security of critical infrastructure, and mobilize resilience across the nation in an increasingly complex threat environment.

view strategy
Critical vulnerabilities in PHP require immediate patching

CISA RELEASES ALERT ON CRITICAL PHP VULNERABILITIES

Organizations should update PHP to address two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, known as “php2shell,” which allow unauthenticated remote code execution on PHP systems serving web requests.

full alert
Reads "STOP RANSOMWARE" in the left-hand corner next to a honeycomb shape with locks in each comb. The right-hand side reads "#STOPRANSOMWARE SAFEPAY RANSOMWARE" with CISA and partner logos

CISA, FBI, USSS and International Partners Release Joint Cybersecurity Advisory on SafePay Ransomware

Provides technical details, detection and response guidance, and mitigations for the highly active SafePay ransomware group targeting vulnerable edge devices and internet-exposed systems in businesses and critical infrastructure worldwide. 

Read the Advisory
Reads "Joint Cybersecurity Information: Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation" over a stylized image of a motherboard with hologram symbols of a lock and shield and other data points hovering above to represent cyber security strategies. Includes NIST, NSA, and CISA logos in the corner.

NIST, NSA and CISA Release Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation

New joint product outlines ten voluntary practices aligned with cyber incident response best practices to help organizations that train and evaluate super intelligence (SI) agents manage SI control incidents.  

Read the Guidance
Joint Cybersecurity Advisory Chinese Government-Link Cyber Threat Actors Combine Automated and Hands-On Hacking Tools to Steal Sensitive Data

CISA, FBI, and Partners Publish Joint Advisory on Chinese Government-Linked Threat Actors Using Automated and Hands-On Hacking Tools to Target Networks Worldwide

Shares tactics, techniques and procedures, indicators of compromise, and mitigations for a Chinese-gov linked threat group enabled by Integrity Technology Group targeting organizations worldwide to exfiltrate data and maintain persistence.

Read the Advisory
Securing the Next 250 with CISA logo in the corner next to "Cybersecurity Awareness Month"

It's Cybersecurity Awareness Month

This October, commit to having better cybersecurity in your organization to protect customers, communities and critical infrastructure.

View CISA's CAM Resources

News Updates

View More News

Latest Operational Information

View All Alerts & Advisories Subscribe to Updates

How can we help?

All Audiences
Main St, street sign

Find Help Locally

Contact your Region

Assist Visits

Protected Critical Infrastructure Information

IT professional working at computers

Industry

Secure by Design

Information Sharing: A Vital Resource

PCII Program modernized

Joint Cyber Defense Collaborative expands

A small business worker making a transaction with a customer

Small and Medium Businesses

Cyber guidance for small businesses

Supplementing passwords

Doing business with CISA

Teenager boy and classmates in high school computer class

Educational Institutions

School Safety

Cybersecurity for K-12

K-12 School Security Product Suite

Protecting Our Future: Partnering to Safeguard K-12 Organizations from Cybersecurity Threats

All Audiences

JCDC unifies cyber defenders from organizations worldwide. This team proactively gathers, analyzes, and shares actionable cyber risk information to enable synchronized, holistic cybersecurity planning, cyber defense, and response.

JCDC

StopRansomware.gov is the U.S. Government's official one-stop location for resources to tackle ransomware more effectively.

STOPRANSOMWARE

SAFECOM works to improve emergency communications interoperability across local, regional, tribal, state, territorial, international borders, and with federal government entities.

SAFECOM

Additional CISA Resources

abstract cyber space

CISA Resources & Tools

CISA offers an array of free resources and tools, such as technical assistance, exercises, cybersecurity assessments, free training, and more.

Image of an event with speaker and participants

CISA Events

CISA hosts and participates in events throughout the year to engage stakeholders, seek research partners, and communicate with the public to help protect the homeland.

Image

CISA Services Catalog

A single resource that provides you with access to information on services across CISA’s mission areas.

Employees pictured during training session

CISA Training

As part of our continuing mission to reduce cybersecurity and physical security risk, CISA provides a robust offering of cybersecurity and critical infrastructure training opportunities.