In response to recent well-publicized threat actor campaigns that exploited OS command injection defects in network edge devices, we published this alert urging software manufacturers to employ Secure by Design practices.  

APT40 has repeatedly targeted Australian networks as well as government and private sector networks in the region, and the threat they pose to our networks is ongoing.

CISA published a blog on the agency’s work across the federal government to secure Open Source Software (OSS) since it held its first Summit on OSS Security

This guide helps election officials apply OPSEC principles to election processes.

CISA released its Resilience Assessment Resource Matrix - an update to the agency’s Marine Transportation System Resilience Assessment Guide. 

The Toolkit provides a powerful means of increasing risk awareness, identifying risk mitigation solutions, and encouraging systems-level thinking and long-term planning.