Internet Security

Since the introduction of multi-user computer systems, user authentication has primarily relied on the use of usernames and passwords. To strengthen the authentication process, Multi-Factor Authentication (MFA) requires the user to present multiple elements in different categories, or “factors,” as part of an authentication attempt. These factors are something you have, something you know, and something you are.

I am proud to share the 2023–2025 CISA Strategic Plan, the first comprehensive Strategic Plan since CISA was established as an agency in 2018. The strategic plan represents a forward-leaning, unified approach to achieving our vision of ensuring secure and resilient critical infrastructure for the American people.

Reducing your organization’s cyber risks requires a holistic approach - similar to the approach you would take to address other operational risks. As with other risks, cyber risks can threaten. Managing cyber risks requires building a culture of cyber readiness.

These cybersecurity authorities—herein referred to as “authoring organizations”—are aware that communities may seek cost-savings and quality-of-life improvements through the digital transformation of infrastructure to create “smart cities".

The spying that took place between the USSR and the United States during the cold war era pales in comparison to the spying and covert operations that are taking place now. Of course, the USSR is no more, but the ideology has lingered in the minds of those who were once members of it. Vladimir Putin, the president of Russia, is a cold warrior; he has made it quite clear that the cold war is , in fact, not over, it just looks very different now.

The internet can be a fearful and frightening place, especially when we hear about things like online identity theft. As scary as they may seem, there are some simple steps that anyone can take to protect ourselves from those dangers. This audiobook will explain what those threats are, and what you can use to guard against being a victim. It’s all broken down in simple terms you can understand. Once you have a basic understanding of how the pieces fit together, you can then protect yourself from danger.

The world of cryptocurrency is full of promise, but it also comes with its share of risks. Unbreakable Crypto, part of the Instant Crypto Mini Guides series, equips you with the tools to spot scams, avoid traps, and protect your assets with confidence. In just 30 minutes, this guide provides actionable steps to secure your investments and develop a defensive mindset for navigating the crypto space.

BlackLotus is a recently publicized malware product garnering significant attention within tech media. Similar to 2020’s BootHole (CVE-2020-10713), BlackLotus takes advantage of a boot loader flaw—specifically CVE-2022-21894 Secure Boot bypass known as “Baton Drop”—to take control of an endpoint from the earliest phase of software boot.

Remote access software and tools comprise a broad array of capabilities used to maintain and improve IT, operational technology (OT), and industrial control systems (ICS) services; they allow a proactive and flexible approach for organizations to remotely oversee networks, computers, and other devices.

Determine how much of your organization’s operations are dependent on IT. Consider how much your organization relies on information technology to conduct business and make it a part of your culture to plan for contingencies in the event of a cyber incident. Identify and prioritize your organization’s critical assets and the associated impacts to operations if an incident were to occur.

Die Internetseite Silk Road vertreibt Cannabis, Kokain und Amphetamine. Die Webseite ist Teil des sogenannten Darknets, also eines weitläufigen Bereichs des Internets, das nicht jedem unbedarften Nutzer zugänglich ist. Denn viele Darknet-Seiten sind nur für eingeladene Mitglieder oder über eine spezielle Technik erreichbar: TOR.

Don't be a victim! Malicious cyber actors may leverage your home network to gain access to personal, private, and confidential information. Help protect yourself, your family, and your work by practicing cybersecurity-aware behaviors, observing some basic configuration guidelines, and implementing the following mitigations on your home network.