The technology is speeding investigations, but human skills and agency partnerships remain essential. […]

CISA’s updated reporting form aims to improve cyber threat detection as a long-awaited rule requiring critical infrastructure organizations to report major incidents remains under White House review. […]

The cybersecurity executive would fill a post that has lacked a Senate-confirmed leader since January 2025. […]

A joint federal warning urges operators to secure refrigeration controls as European authorities document attacks and U.S. military freezer outages remain under investigation. […]

The former HHS official brings more than two decades of experience in critical infrastructure protection, emergency preparedness, and cybersecurity response to his new role. […]

Cybersecurity progress and large data stores prepare U.S. Customs and Border Protection to face threats, but an integrated common operating picture is needed, said Ryan Riccucci. […]

CISA gave federal civilian agencies until Oct. 29 to remediate two flaws in the widely used web programming language. Experts said agencies must also determine whether attackers have already exploited the flaws. […]

The agency’s 2030 roadmap calls for stronger operational technology security, intelligence-driven risk decisions, and expanded emergency communications capabilities. […]

Government and industry officials say AI agents need narrowly defined permissions and safeguards outside AI models. They offer differing views on how much human oversight agencies can sustain. […]

The updated directive adds waiver authority, encourages sharing and reuse of AI assets, and prioritizes technology developed or produced in the United States. […]

Attackers could exploit flaws in the widely used web-development language to execute code remotely without authentication. Organizations including OpenAI coordinated a response to the flaws over two months. […]

Acting CISA Director Nick Andersen says upcoming tabletop exercises will help critical infrastructure operators test their ability to recover from cyberattacks and maintain essential services. […]

The agency is expanding access to a frontline-developed communications tool as it works to scale promising technology from a portfolio of more than 14,000 employee-built applications. […]

The forthcoming guidance will draw on CISA assessments of how well critical infrastructure organizations can isolate and recover systems. […]

The bill would direct CISA to assess workforce and resource gaps as lawmakers scrutinize the agency’s capacity to defend federal networks and critical infrastructure. […]

Federal agencies face a Sept. 19 remediation deadline for a maximum-severity authentication bypass that can give remote attackers root-level access. […]

The new guidance offers federal agencies and cloud providers recommendations to protect identity and access tokens from theft, forgery, and misuse. […]

CISA is ramping up staffing and 24/7 support for the new service as officials look to expand governmentwide cyber visibility and give agencies a lower-cost path to modern SIEM capabilities. […]

Andersen said CISA must focus limited resources on the nation’s most consequential cyber risks as the agency moves to rebuild its depleted workforce. […]

DHS’ $10.5 billion savings estimate hinged on IT contract cuts, but GAO found the agency continued spending billions on the same requirements. […]

Lawmakers say reductions at the cybersecurity agency raise concerns about its ability to protect federal networks and critical infrastructure and respond to evolving threats. […]

Federal agencies warn AI-assisted hacking tools are lowering barriers to attacks on industrial control systems used across critical infrastructure. […]

CISA’s new resources outline eight cybersecurity objectives to help K-12 schools and districts strengthen their defenses against growing cyber threats. […]

Cyber agencies warn that Gunra ransomware affiliates are exploiting internet-facing vulnerabilities to steal and encrypt data across critical infrastructure sectors. […]

DHS named 12 companies to a five-year IDIQ contract, which splits hardware and software from comprehensive services. […]

A report from Sen. Gary Peters, D-Mich., alleges ICE collects, retains, and shares information gathered during immigration enforcement operations and protests, raising concerns about privacy and potential effects on First Amendment-protected activity. […]

CISA is warning water utilities to secure internet-exposed systems after recent cyberattacks disrupted operations in multiple states. […]

The bipartisan, bicameral bill would give CISA new tools and funding to help K-12 schools prevent, track, and respond to cyberattacks. […]

After a contractor exposed sensitive credentials in a public GitHub repository earlier this year, CISA is outlining how it responded and the security changes it says are needed to prevent similar incidents. […]

The regulation would require critical infrastructure entities to report major cyber incidents and ransomware payments to the federal cyber defense agency under a 2022 law. […]