The NCSA delegation led by Director General Bledar Kazia held discussions with CISA representatives regarding the expansion of operational cooperation and the exchange of information concerning cyber threats.

The meeting also addressed coordination in incident management and response, as well as the strengthening of institutional capacities through specialized training, joint exercises and the exchange of expertise.

NCSA expressed its appreciation for the partnership with CISA and the ongoing support from the United States, reaffirming its commitment to deepening cooperation and developing joint initiatives.

According to NCSA, these initiatives aim to strengthen the country’s cybersecurity and resilience, while enhancing its ability to prevent and address threats to critical infrastructure. /e.i/r.e/p.s./

On the list of federal agencies are the Department of Homeland Security, the Department of the Treasury and the Federal Trade Commission.

CISA declined to identify which of the agencies on the list was compromised, but it confirmed that Iranian hackers sponsored by Iran’s Islamic Revolutionary Guard Corps carried out the offensive cyber operation.

Threat actors exploited a server vulnerability by compromising Active Directory and moving laterally in the network in order to steal credentials to expand their operations. They bypassed the federal agency’s security safeguards by disabling Windows Defender and implemented various custom codes to have persistence and access in the future.

They are the same threat actors who conducted destructive cyber attack against Albania and used more or less the same methods and tools.//a.i/