Federal agencies face a Sept. 19 remediation deadline for a maximum-severity authentication bypass that can give remote attackers root-level access. […]

The new guidance offers federal agencies and cloud providers recommendations to protect identity and access tokens from theft, forgery, and misuse. […]

CISA is ramping up staffing and 24/7 support for the new service as officials look to expand governmentwide cyber visibility and give agencies a lower-cost path to modern SIEM capabilities. […]

Andersen said CISA must focus limited resources on the nation’s most consequential cyber risks as the agency moves to rebuild its depleted workforce. […]

DHS’ $10.5 billion savings estimate hinged on IT contract cuts, but GAO found the agency continued spending billions on the same requirements. […]

Lawmakers say reductions at the cybersecurity agency raise concerns about its ability to protect federal networks and critical infrastructure and respond to evolving threats. […]

Federal agencies warn AI-assisted hacking tools are lowering barriers to attacks on industrial control systems used across critical infrastructure. […]

CISA’s new resources outline eight cybersecurity objectives to help K-12 schools and districts strengthen their defenses against growing cyber threats. […]

Cyber agencies warn that Gunra ransomware affiliates are exploiting internet-facing vulnerabilities to steal and encrypt data across critical infrastructure sectors. […]

DHS named 12 companies to a five-year IDIQ contract, which splits hardware and software from comprehensive services. […]

A report from Sen. Gary Peters, D-Mich., alleges ICE collects, retains, and shares information gathered during immigration enforcement operations and protests, raising concerns about privacy and potential effects on First Amendment-protected activity. […]

CISA is warning water utilities to secure internet-exposed systems after recent cyberattacks disrupted operations in multiple states. […]

The bipartisan, bicameral bill would give CISA new tools and funding to help K-12 schools prevent, track, and respond to cyberattacks. […]

After a contractor exposed sensitive credentials in a public GitHub repository earlier this year, CISA is outlining how it responded and the security changes it says are needed to prevent similar incidents. […]

The regulation would require critical infrastructure entities to report major cyber incidents and ransomware payments to the federal cyber defense agency under a 2022 law. […]

The interim final rule establishes training, certification, authorized technology, reporting, privacy, and compliance requirements for counter-UAS operations. […]

The report states that Secret Service employees used personal mobile devices during protective operations because government-issued devices lacked critical security capabilities. […]

The Homeland Security secretary told lawmakers CISA plans to hire about 600 employees after the Senate confirms a new director. […]

The senator is seeking details on CBP’s plans to deploy non-intrusive inspection technology, citing a 2025 GAO report that identified delays and planning gaps. […]

The new guidance aims to help federal civilian agencies move beyond perimeter-based security models and use TIC 3.0 flexibilities to advance zero trust adoption. […]

Warner wants CISA to detail staffing losses, regional vacancies, and cybersecurity service impacts amid workforce reductions and proposed budget cuts. […]

AWS is the first vendor to receive a contract under the Cumulus cloud services vehicle. Microsoft, Google Cloud, and Oracle will receive separate contracts later this year. […]

CISA’s new directive sets tiered remediation timelines for federal agencies, including a three-day deadline for the highest-risk vulnerabilities. […]

Program manager Matt House says the agency has completed efforts to help federal agencies deploy endpoint detection and response tools, marking a key milestone for the CDM Program. […]

Sanjeev “Sonny” Bhagowalia said CBP plans to move all 276 applications to the cloud by January 2028 as part of a broader technology strategy that also includes AI, quantum readiness, and cybersecurity modernization. […]

Acting Director Nick Andersen said CISA is accelerating hiring, with 180 tentative offers expected by month’s end and hundreds of new employees slated to join the agency. […]

The agency plans to unveil federal AI platform access, binding operational directives, and broader cybersecurity reforms following this week’s AI executive order. […]

CISA will hold virtual town hall meetings June 15-18 to gather stakeholder feedback on proposed CIRCIA rules requiring critical infrastructure operators to report cyber incidents within 72 hours and ransomware payments within 24 hours. […]

CISA is exploring a new intergovernmental working group to help government and industry jointly address evolving cyber risks to critical infrastructure. […]

CISA is expanding its vulnerability disclosure efforts with a new online submission tool designed to accelerate reporting of known exploited cyber flaws. […]