The GSA OIG CIO and CAIO says AI is changing too quickly for static security reviews. He called for ongoing governance and shared responsibility across agencies. […]

After a contractor exposed sensitive credentials in a public GitHub repository earlier this year, CISA is outlining how it responded and the security changes it says are needed to prevent similar incidents. […]

The 12-month paid cyber apprenticeship pilot accepts applications through July 17 and offers skills-based pathways into civilian cyber roles. […]

The CLEAR Act would require DHS to report to Congress within 180 days on what it needs to fix gaps in the department’s event logging. […]

While phishing volumes fell globally for a second consecutive year, government organizations saw attacks jump from 92 million to 138 million as threat actors shifted toward high-value targets. […]

The directive expands the NSA’s cybersecurity oversight role and establishes new baseline security requirements for federal national security systems. […]

CISA’s new directive sets tiered remediation timelines for federal agencies, including a three-day deadline for the highest-risk vulnerabilities. […]

Former DISA Director Bob Skinner warned that China’s cyber operations are increasingly focused on positioning for future disruptive attacks against U.S. critical infrastructure. […]

The bill would restore federal funding for MS-ISAC. Sen. Warner warned that funding cuts left small and rural communities with less access to critical cyber defenses. […]

Cyber capabilities are now embedded in military planning, critical infrastructure protection, and combat operations, reflecting a fundamental shift in how the U.S. military prepares for future conflicts. […]

The agency plans to unveil federal AI platform access, binding operational directives, and broader cybersecurity reforms following this week’s AI executive order. […]

Defense cyber policy chief says CYBERCOM’s force-generation overhaul is designed to support any future organizational structure, including a standalone cyber service. […]

DISA is preparing new ICAM and Thunderdome acquisition efforts as the Pentagon expands zero trust capabilities for military users, contractors, and allied partners. […]

Daniel Austin says cybersecurity efforts are hindered by disconnects between operators and IT professionals and calls for closer collaboration and terrain-based policy development. […]

CISA will hold virtual town hall meetings June 15-18 to gather stakeholder feedback on proposed CIRCIA rules requiring critical infrastructure operators to report cyber incidents within 72 hours and ransomware payments within 24 hours. […]

The updated policy shifts federal agencies toward a risk-based cybersecurity logging strategy focused on real-time threat detection, digital forensics, and more targeted data retention requirements. […]

Sen. Rick Scott has introduced legislation to create a CISA-led federal cyber task force aimed at improving coordination against Chinese hacking threats targeting critical infrastructure. […]

State technology officials warn that expiring federal support and cuts to cybersecurity programs could weaken local defenses against growing cyber threats. […]

CISA is expanding its vulnerability disclosure efforts with a new online submission tool designed to accelerate reporting of known exploited cyber flaws. […]

Lawmakers warn that cuts to CISA could leave critical infrastructure and local governments exposed as AI-powered cyber threats become faster and harder to stop. […]

Amid waning federal support for public-private information sharing on cyber threats, telecom firms create a nonprofit to improve cyber resilience across the industry. […]

Federal cybersecurity officials said agencies need to involve CISOs earlier in modernization planning to reduce security risks tied to legacy systems and complex technology integrations. […]

GAO’s new report said privacy-enhancing technologies could help organizations better protect sensitive data and support more secure AI use as cyber threats and data collection increase. […]

A contractor reportedly exposed CISA and DHS credentials on a public GitHub repository. The lapse comes amid internal upheaval at CISA and threats against U.S. critical infrastructure. […]

A GAO review of six departments found most did not identify banned Chinese telecom equipment on their networks, but limited visibility into federal supply chains hinders efforts to find risky devices. […]

Audit finds unresolved cyber vulnerabilities at Air Force critical infrastructure sites are tied to insufficient staffing and lack of communication. […]

Lawmakers are pushing the Defense Department to create formal recovery time objectives and data restoration plans to strengthen resilience against cyberattacks. […]

A group of 35 lawmakers is pressing the White House to prepare for a surge of AI-generated vulnerability disclosures following Anthropic’s Mythos announcement. […]

Federal officials on May 14 said Anthropic’s Claude Mythos tool marks a turning point for government cybersecurity and military operations, warning that advanced AI models will require stronger public-private partnerships to defend against emerging risks. […]

House Homeland Security Committee Chairman Andrew Garbarino, R-N. Y., is seeking a briefing from Instructure Holdings, Inc., after two cyberattacks this month against the company’s Canvas platform disrupted schools and universities nationwide – and just as Instructure reported reaching a deal with hackers to protect stolen data. […]