Cybersecurity and Infrastructure Security Agency

Strong infrastructure depends on strong partnerships. This week, CISA’s Stakeholder Engagement Division joined the U.S. Trade and Development Agency (USTDA) to engage with government and business leaders from Jordan on critical infrastructure security, including protecting water and wastewater systems. The discussions highlighted the importance of international collaboration in addressing evolving cyber threats and strengthening resilience. CISA is proud to maintain a longstanding partnership with Jordan’s National Cyber Security Center (NCSCJO), including a cooperation agreement signed in 2024, to advance our shared cybersecurity goals. Learn more about our work in this sector: https://go.dhs.gov/4xw

Join us Oct 21 for a live Q&A on building a career in cybersecurity. Moderator Christine Serrano Glassner, Chief External Affairs Officer, will be joined by Bobby Thompson, Acting Associate Director for Threat Hunting, and Karen Wetzel, National Institute of Standards and Technology (NIST) Director of NICE and NICE Framework, to discuss skills, career paths, and training resources. Bring your questions: https://lnkd.in/gv4Ut9vN

The Cybersecurity and Infrastructure Security Agency’s cybersecurity division is readying federal agencies and critical infrastructure for a world where artificial intelligence helps attackers accelerate vulnerabilities and exposes long-running cyber hygiene challenges. CISA’s recent binding operational directive on vulnerability management, for instance, pushes federal agencies to quickly patch high-priority cyber bugs. The directive sets a deadline of three days to patch the highest risk vulnerabilities. But Christopher Butera, acting executive assistant director for cybersecurity at CISA, said that three-day window is just a start. “We’re hoping that they will patch these closer to 24-hour timeframes for some of these publicly exposed critical vulnerabilities,” Butera said during Cyber Leaders Exchange 2026. Check out Butera’s full discussion with Federal News Network’s Justin Doubleday now! https://lnkd.in/ex-ZJASi. #governmenttechnology #cybersecurity #CISO #ITmodernization #cyberAI

After disaster strikes, scammers often strike too. Be cautious of: ✅ Emails, texts, or social media messages related to severe weather events ✅ Unsolicited requests for donations or personal information ✅ Links or attachments from unknown or unverified sources ✅ Guidance that does not come from trusted organizations or local officials Before taking action, verify information through reputable sources such as FEMA, Ready.gov, and official government channels. Staying alert can help protect both your personal information and your community. Learn more go.dhs.gov/wtN

October is National Cyber Security Awareness Month: What happens when your EHR is unavailable, a medical or IT device cannot connect, or a suspicious message lands in the middle of a busy shift? Clinicians do not need to become cybersecurity experts, but they do need to know what to recognize, what to report, and how to keep care moving safely when technology is disrupted. HSCC’s Cybersecurity for the Clinician training series gives clinicians a practical introduction in 48 minutes. Cyber resilience starts with people who know the right thing to do when something looks wrong. Stream on Youtube or download for your personal or enterprise use our free "Cybersecurity for the Clinician" video series - https://lnkd.in/g7a6awTC Because Cyber Safety is Patient Safety #CyberSafetyisPatientSafety #HealthcareCybersecurity #Cybersecurity #Healthcare #PatientSafety

🚨 We added the Ivanti Connect Secure authentication bypass vulnerability, CVE-2026-104935, to our Known Exploited Vulnerabilities (KEV) Catalog after observing active exploitation. This zero-day vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands, potentially enabling credential theft and data exfiltration. It affects Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior.   CISA urges impacted organizations to immediately update to the latest version and review Ivanti’s security advisory and upgrade guidance. Organizations that suspect compromise should conduct network and memory forensics and follow Ivanti’s recovery procedures.   Review our Alert for detection, remediation, and recovery recommendations. 👉 https://go.dhs.gov/5Kc

What if the most important security action happens before an incident ever occurs? During the Center for Domestic Preparedness Law Enforcement Theme Training Week, CISA’s Office for Bombing Prevention delivered training focused on identifying hostile surveillance, recognizing pre-attack indicators, and strengthening surveillance detection capabilities. 🚔🔍 By helping participants spot suspicious behaviors and potential threats early, we're empowering security professionals with the skills needed to prevent incidents before they happen. Explore available training and resources: https://lnkd.in/eYByHMvG