The FBI and CISA warn that election and campaign officials may face phishing and smishing aimed at stealing credentials or sensitive data, including attacks using convincing AI-generated messages and deepfakes. They recommend phishing-resistant MFA and other security措施.
The FBI warns that threats against election workers can endanger individuals and the electoral process. It urges people to report threats to a local FBI field office or submit an electronic tip, with screenshots and relevant names, dates, and locations if available.
The FBI warns that scammers may exploit the 2026 U.S. midterm election through fake campaign investments and PACs, undelivered merchandise, voter-registration phishing, and AI impersonation to steal money or personal information.
The FBI says North Korean IT workers are using more facilitators, stolen identities, and threats to infiltrate companies. It recommends layered identity checks and gives individuals and businesses steps to spot and report the activity.
DHS, CISA, FBI and EAC guidance for the 2026 election cycle recommends limiting and auditing access, strengthening vendor oversight and chain of custody, training staff, monitoring anomalies, and establishing procedures to assess and respond to insider threats.
A joint government advisory, based on FBI investigations, describes China-linked actors using scanning, password attacks, XSS, VPNs and scripts to access networks and steal emails and credentials. It recommends patching, MFA and other defenses.
An FBI and Secret Service advisory describes a global campaign using reused or leaked credentials to compromise exposed Fortinet gateways, with possible administrator lockouts and ransomware access. It recommends credential resets, MFA, and restricted management access.
An FBI and CISA fact sheet advises critical infrastructure operators on assessing and reducing risks from third-party ICS integrators, citing a 2025 intrusion at an industrial automation company where actors prepared about 800 files for presumed exfiltration.
A multi-agency advisory says North Korean WaterPlum actors used fake job interviews and malicious code to infect 30,000+ devices, target crypto wallets, and steal funds. It also describes North Korean IT-worker schemes and offers mitigation steps.