A release of DHS personnel records and a GSA watchdog report highlight risks to sensitive government information, from employee safety to internal data access controls. […]

In this podcast, John Sapp, Chainguard’s field chief information security officer, will explore what the changing open source security landscape means for teams designing and delivering federal systems. […]

“Water is what kept me up at night,” said Philip Stupak, a former assistant national cyber director, at ISC2 Security Congress 2026. Small water districts are particularly vulnerable to attack – and increasingly critical to national security. […]

Cybersecurity progress and large data stores prepare U.S. Customs and Border Protection to face threats, but an integrated common operating picture is needed, said Ryan Riccucci. […]

AI is accelerating vulnerability discovery, but CISA’s Jay Gazlay says agencies must prioritize remediation based on proven threats, internet exposure, and asset visibility. […]

Government and industry officials say AI agents need narrowly defined permissions and safeguards outside AI models. They offer differing views on how much human oversight agencies can sustain. […]

Attackers could exploit flaws in the widely used web-development language to execute code remotely without authentication. Organizations including OpenAI coordinated a response to the flaws over two months. […]

Sen. Ron Wyden urges CISA and OMB to require stronger website privacy protections, warning that visits to sensitive federal services could be exposed to foreign adversaries and hackers. […]

Michael Duffy says federal agencies must be proactive to address emerging cyber threats as the CISO Council focuses on resilience and AI integration. […]

The tools were used to scan for vulnerabilities and carry out cyber intrusions targeting critical infrastructure in the U.S. and abroad, including energy companies and airports. […]

The latest arrest follows international efforts to dismantle the hacking group accused of stealing sensitive FBI employee information through a third-party platform. […]

Social Security numbers and military employment information were among the sensitive data exposed in a breach of the Pentagon’s personnel database. […]

The cybercrime group claims it accessed sensitive data on FBI personnel and job applicants, while the bureau says it is still investigating the alleged compromise. […]

The forthcoming guidance will draw on CISA assessments of how well critical infrastructure organizations can isolate and recover systems. […]

The guidance shows how organizations can use tripwires, breadcrumbs, honeytokens, and other decoys to detect malicious activity after attackers gain network access. […]

The new guidance offers federal agencies and cloud providers recommendations to protect identity and access tokens from theft, forgery, and misuse. […]

New incentive pay for top cyber personnel is part of a broader push to build a more specialized, AI-ready workforce. […]

Andrew McClure said the government cannot secure the energy sector alone and urged industry to help accelerate cyber defenses. […]

Lt. Gen. Paul Stanton outlined a shift toward applying established military readiness practices to networks, data, and the personnel who operate them. […]

The White House cyber office will use lessons from the 60-day water cybersecurity pilot to shape similar efforts in additional critical infrastructure sectors. […]

Andersen said CISA must focus limited resources on the nation’s most consequential cyber risks as the agency moves to rebuild its depleted workforce. […]

Federal cyber agencies say China-based AI companies are using large-scale knowledge distillation campaigns to extract capabilities from U.S. frontier models. […]

The White House-led pilot will test a public-private approach to protecting critical water infrastructure from growing cyber threats. […]

Transportation and Agriculture officials are looking beyond AI-driven threats to use advanced models for cyber defense and mission operations. […]

A survey of 273 defense contractors found widespread compliance activity despite the DOD’s suspension of CMMC 2.0 Phase II assessments, but significant readiness gaps remain. […]

A new report finds rising self-reported compliance and cybersecurity spending, but declining confidence that reported scores reflect operational reality. […]

The agency wants to help organizations move beyond annual awareness training and build human considerations into cybersecurity technologies and processes. […]

The program aims to tap private-sector cyber talent and resources, while raising new questions about oversight and the risks facing participating companies. […]

CISA’s new resources outline eight cybersecurity objectives to help K-12 schools and districts strengthen their defenses against growing cyber threats. […]

The agency is looking to AI and automation as it plans the next generation of the National Vulnerability Database. […]