Attackers could exploit flaws in the widely used web-development language to execute code remotely without authentication. Organizations including OpenAI coordinated a response to the flaws over two months. […]

Sen. Ron Wyden urges CISA and OMB to require stronger website privacy protections, warning that visits to sensitive federal services could be exposed to foreign adversaries and hackers. […]

Michael Duffy says federal agencies must be proactive to address emerging cyber threats as the CISO Council focuses on resilience and AI integration. […]

The tools were used to scan for vulnerabilities and carry out cyber intrusions targeting critical infrastructure in the U.S. and abroad, including energy companies and airports. […]

The latest arrest follows international efforts to dismantle the hacking group accused of stealing sensitive FBI employee information through a third-party platform. […]

Social Security numbers and military employment information were among the sensitive data exposed in a breach of the Pentagon’s personnel database. […]

The cybercrime group claims it accessed sensitive data on FBI personnel and job applicants, while the bureau says it is still investigating the alleged compromise. […]

The forthcoming guidance will draw on CISA assessments of how well critical infrastructure organizations can isolate and recover systems. […]

The guidance shows how organizations can use tripwires, breadcrumbs, honeytokens, and other decoys to detect malicious activity after attackers gain network access. […]

The new guidance offers federal agencies and cloud providers recommendations to protect identity and access tokens from theft, forgery, and misuse. […]

New incentive pay for top cyber personnel is part of a broader push to build a more specialized, AI-ready workforce. […]

Andrew McClure said the government cannot secure the energy sector alone and urged industry to help accelerate cyber defenses. […]

Lt. Gen. Paul Stanton outlined a shift toward applying established military readiness practices to networks, data, and the personnel who operate them. […]

The White House cyber office will use lessons from the 60-day water cybersecurity pilot to shape similar efforts in additional critical infrastructure sectors. […]

Andersen said CISA must focus limited resources on the nation’s most consequential cyber risks as the agency moves to rebuild its depleted workforce. […]

Federal cyber agencies say China-based AI companies are using large-scale knowledge distillation campaigns to extract capabilities from U.S. frontier models. […]

The White House-led pilot will test a public-private approach to protecting critical water infrastructure from growing cyber threats. […]

Transportation and Agriculture officials are looking beyond AI-driven threats to use advanced models for cyber defense and mission operations. […]

A survey of 273 defense contractors found widespread compliance activity despite the DOD’s suspension of CMMC 2.0 Phase II assessments, but significant readiness gaps remain. […]

A new report finds rising self-reported compliance and cybersecurity spending, but declining confidence that reported scores reflect operational reality. […]

The agency wants to help organizations move beyond annual awareness training and build human considerations into cybersecurity technologies and processes. […]

The program aims to tap private-sector cyber talent and resources, while raising new questions about oversight and the risks facing participating companies. […]

CISA’s new resources outline eight cybersecurity objectives to help K-12 schools and districts strengthen their defenses against growing cyber threats. […]

The agency is looking to AI and automation as it plans the next generation of the National Vulnerability Database. […]

The legislation would give EPA new authority to assess cyber risks and require fixes at water utilities while boosting federal cybersecurity funding. […]

Cyber agencies warn that Gunra ransomware affiliates are exploiting internet-facing vulnerabilities to steal and encrypt data across critical infrastructure sectors. […]

CISA is warning water utilities to secure internet-exposed systems after recent cyberattacks disrupted operations in multiple states. […]

Technology policy and AI safety leaders want the government to implement a rules-based process for assessing risks posed by advanced AI systems. Their push comes after OpenAI and Anthropic separately disclosed recent AI security incidents. […]

New Amazon threat intelligence links four high-profile software supply chain compromises to a single North Korean threat actor. […]

The bipartisan, bicameral bill would give CISA new tools and funding to help K-12 schools prevent, track, and respond to cyberattacks. […]