NSA
US signals intelligence and cybersecurity agency within the Department of Defense.
The NSA put its name to advisory AA26-281A on 8 October 2026, one of ten agencies from seven countries to call a Beijing contractor an enabler of Chinese state hacking. It was the NSA's latest joint public attribution of 2026.
Last refreshed: 12 October 2026 · Appears in 1 active topic
Why is the NSA putting its name to advisories about Chinese and Russian hackers?
Timeline for NSA
Co-signed joint advisory AA26-281A
Cybersecurity: Threats and Defences: Ten agencies name Beijing firm in hacksCo-published joint advisory AA26-204A
Cybersecurity: Threats and Defences: Zimbra preview leaks mail to RussiaMentioned in: FIRESTARTER implant survives every Cisco firewall patch
Cybersecurity: Threats and DefencesSixteen cyber agencies name Flax Typhoon network
Cybersecurity: Threats and DefencesBackground
The National Security Agency is the US signals intelligence and cybersecurity agency, a Department of Defense body founded on 4 November 1952 and based at Fort Meade, Maryland. Its staff is estimated at about 32,000. It co-leads the UKUSA Agreement, the basis of the Five Eyes intelligence alliance, and runs the Cybersecurity Collaboration Center as its public-facing channel to industry.
Gen Joshua Rudd won Senate confirmation on 10 March 2026 as NSA director and, in the same dual-hatted POST, commander of US Cyber Command. His arrival ended almost a year of acting leadership that began when Gen Timothy Haugh was removed in April 2025.
The agency's most visible output in 2026 has been co-signed attribution. Besides the April and October advisories on Chinese covert networks, the NSA was listed first among the agencies behind AA26-204A in July, which accused the Russian state-supported group LAUNDRY BEAR of exploiting Zimbra webmail to read victims' email. Those NSA-backed documents matter because they move classified intelligence into the open as specific actors, vulnerabilities and remedies that defenders outside government can act on.
NSA keeps exposing China's hacking contractors
For the NSA, the October advisory closed a loop opened in the spring. On 23 April the agency was one of sixteen national signatories to guidance on China-linked covert networks built from hijacked home routers, which conceded that published indicators of compromise go stale almost as fast as defenders can share them. That document already named Integrity Technology Group alongside Flax Typhoon.
On 8 October the NSA sealed AA26-281A together with the FBI, CISA and seven allied agencies, this time describing the Beijing company as a commercial supplier of tools and infrastructure for state-linked intrusions. Each NSA release converts material the agency gathers in secret into names, flaws and fixes that private network owners can use.
What did the NSA say about Chinese cyber operations in April 2026?
Is the NSA part of Five Eyes?
Who is the director of the NSA?
What is advisory AA26-281A?
