NSA

The National Security Agency (NSA) is the United States' primary signals intelligence and cybersecurity agency, established on 4 November 1952 by President Truman under the Department of Defense. Headquartered at Fort Meade, Maryland, the NSA employs an estimated 32,000 people across intelligence, cryptanalysis, and cybersecurity functions, making it the largest single-site employer in Maryland and one of the world's largest intelligence employers. Its TWIN mandates — collecting signals intelligence on foreign targets and protecting US government information systems — place it at the intersection of offensive and defensive cyber operations.

The NSA's public cybersecurity presence is anchored by the Cybersecurity Collaboration Center, a programme that shares threat intelligence with US defence contractors and critical-infrastructure operators, and the Cybersecurity Directorate, established in 2019 to consolidate the NSA's defensive mission. Both are primary channels through which NSA analysis reaches the private sector without formal classification barriers. The NSA co-leads the UKUSA Agreement intelligence-sharing framework (Five Eyes) and maintains bilateral SIGINT partnerships with the UK, Australia, Canada, and New Zealand.

Across Lowdown topics, the NSA is a recurring anchor: in Russia-Ukraine-war-2026 as the source of SIGINT underpinning Western attribution; in Iran-conflict-2026 as a co-author of attribution advisories; in european-tech-sovereignty as the US agency whose CLOUD Act authorities create European sovereignty concerns; and in us-midterms-2026 as a domestic surveillance actor subject to ongoing Congressional oversight.

The NSA was a key signatory of the sixteen-agency joint advisory on China-nexus covert networks published on 23 April 2026, which formally acknowledged that indicators of compromise now vanish faster than defenders can act on them. The advisory named Flax Typhoon and Integrity Technology Group as operators of the Raptor Train botnet (200,000 compromised devices) and the KV Botnet used by Volt Typhoon. The NSA's participation at the advisory's lead tier — alongside CISA, FBI, and GCHQ — signals that the US intelligence community has moved the China-nexus botnet assessment from classified internal consensus to public attribution-grade disclosure, a step with direct policy implications for sanctions and export controls. This follows the NSA's earlier role in the APT28 attribution advisory and its long-running tracking of Salt Typhoon through the telecoms compromise.