CISA gave federal civilian agencies until Oct. 29 to remediate two flaws in the widely used web programming language. Experts said agencies must also determine whether attackers have already exploited the flaws. […]

The agency’s 2030 roadmap calls for stronger operational technology security, intelligence-driven risk decisions, and expanded emergency communications capabilities. […]

Government and industry officials say AI agents need narrowly defined permissions and safeguards outside AI models. They offer differing views on how much human oversight agencies can sustain. […]

The updated directive adds waiver authority, encourages sharing and reuse of AI assets, and prioritizes technology developed or produced in the United States. […]

Attackers could exploit flaws in the widely used web-development language to execute code remotely without authentication. Organizations including OpenAI coordinated a response to the flaws over two months. […]

Acting CISA Director Nick Andersen says upcoming tabletop exercises will help critical infrastructure operators test their ability to recover from cyberattacks and maintain essential services. […]

The agency is expanding access to a frontline-developed communications tool as it works to scale promising technology from a portfolio of more than 14,000 employee-built applications. […]

The forthcoming guidance will draw on CISA assessments of how well critical infrastructure organizations can isolate and recover systems. […]

The bill would direct CISA to assess workforce and resource gaps as lawmakers scrutinize the agency’s capacity to defend federal networks and critical infrastructure. […]

Federal agencies face a Sept. 19 remediation deadline for a maximum-severity authentication bypass that can give remote attackers root-level access. […]

The new guidance offers federal agencies and cloud providers recommendations to protect identity and access tokens from theft, forgery, and misuse. […]

CISA is ramping up staffing and 24/7 support for the new service as officials look to expand governmentwide cyber visibility and give agencies a lower-cost path to modern SIEM capabilities. […]

Andersen said CISA must focus limited resources on the nation’s most consequential cyber risks as the agency moves to rebuild its depleted workforce. […]

DHS’ $10.5 billion savings estimate hinged on IT contract cuts, but GAO found the agency continued spending billions on the same requirements. […]

Lawmakers say reductions at the cybersecurity agency raise concerns about its ability to protect federal networks and critical infrastructure and respond to evolving threats. […]

Federal agencies warn AI-assisted hacking tools are lowering barriers to attacks on industrial control systems used across critical infrastructure. […]

CISA’s new resources outline eight cybersecurity objectives to help K-12 schools and districts strengthen their defenses against growing cyber threats. […]

Cyber agencies warn that Gunra ransomware affiliates are exploiting internet-facing vulnerabilities to steal and encrypt data across critical infrastructure sectors. […]

DHS named 12 companies to a five-year IDIQ contract, which splits hardware and software from comprehensive services. […]

A report from Sen. Gary Peters, D-Mich., alleges ICE collects, retains, and shares information gathered during immigration enforcement operations and protests, raising concerns about privacy and potential effects on First Amendment-protected activity. […]

CISA is warning water utilities to secure internet-exposed systems after recent cyberattacks disrupted operations in multiple states. […]

The bipartisan, bicameral bill would give CISA new tools and funding to help K-12 schools prevent, track, and respond to cyberattacks. […]

After a contractor exposed sensitive credentials in a public GitHub repository earlier this year, CISA is outlining how it responded and the security changes it says are needed to prevent similar incidents. […]

The regulation would require critical infrastructure entities to report major cyber incidents and ransomware payments to the federal cyber defense agency under a 2022 law. […]

The interim final rule establishes training, certification, authorized technology, reporting, privacy, and compliance requirements for counter-UAS operations. […]

The report states that Secret Service employees used personal mobile devices during protective operations because government-issued devices lacked critical security capabilities. […]

The Homeland Security secretary told lawmakers CISA plans to hire about 600 employees after the Senate confirms a new director. […]

The senator is seeking details on CBP’s plans to deploy non-intrusive inspection technology, citing a 2025 GAO report that identified delays and planning gaps. […]

The new guidance aims to help federal civilian agencies move beyond perimeter-based security models and use TIC 3.0 flexibilities to advance zero trust adoption. […]

Warner wants CISA to detail staffing losses, regional vacancies, and cybersecurity service impacts amid workforce reductions and proposed budget cuts. […]