“Water is what kept me up at night,” said Philip Stupak, a former assistant national cyber director, at ISC2 Security Congress 2026. Small water districts are particularly vulnerable to attack – and increasingly critical to national security. […]

Illumio’s Gary Barlet says AI-generated disinformation and vulnerabilities in interconnected election systems create growing security challenges. He said stronger safeguards, faster AI-enabled content validation, and more federal support for state and local election officials are needed. […]

Cybersecurity progress and large data stores prepare U.S. Customs and Border Protection to face threats, but an integrated common operating picture is needed, said Ryan Riccucci. […]

AI is accelerating vulnerability discovery, but CISA’s Jay Gazlay says agencies must prioritize remediation based on proven threats, internet exposure, and asset visibility. […]

In a new report, NIST details how agencies should replace quantum-vulnerable cryptography, and reinforces deadlines for high-value assets, high-impact systems, and other sensitive systems. […]

CISA gave federal civilian agencies until Oct. 29 to remediate two flaws in the widely used web programming language. Experts said agencies must also determine whether attackers have already exploited the flaws. […]

The agency’s 2030 roadmap calls for stronger operational technology security, intelligence-driven risk decisions, and expanded emergency communications capabilities. […]

The new DevSecOps platform aims to cut software security evaluations from months to minutes. The Army plans broad industry access through Login.gov. […]

The AI Cyber Defense Act would direct NIST to work with the private sector to develop guidance on AI model protection and standards for defensive uses of AI. […]

Government and industry officials say AI agents need narrowly defined permissions and safeguards outside AI models. They offer differing views on how much human oversight agencies can sustain. […]

Attackers could exploit flaws in the widely used web-development language to execute code remotely without authentication. Organizations including OpenAI coordinated a response to the flaws over two months. […]

Industry leaders say stronger AI oversight must be matched by resilient operations as federal agencies adopt more powerful systems. […]

Redspin’s third annual DIB cyber survey finds most respondents are continuing toward Level 2 certification or have already achieved it, while cybersecurity spending largely remains unchanged. […]

The guidance shows how organizations can use tripwires, breadcrumbs, honeytokens, and other decoys to detect malicious activity after attackers gain network access. […]

The White House-led pilot will test a public-private approach to protecting critical water infrastructure from growing cyber threats. […]

A survey of 273 defense contractors found widespread compliance activity despite the DOD’s suspension of CMMC 2.0 Phase II assessments, but significant readiness gaps remain. […]

Federal agencies warn AI-assisted hacking tools are lowering barriers to attacks on industrial control systems used across critical infrastructure. […]

A new report finds rising self-reported compliance and cybersecurity spending, but declining confidence that reported scores reflect operational reality. […]

The agency wants to help organizations move beyond annual awareness training and build human considerations into cybersecurity technologies and processes. […]

CISA’s new resources outline eight cybersecurity objectives to help K-12 schools and districts strengthen their defenses against growing cyber threats. […]

The agency is looking to AI and automation as it plans the next generation of the National Vulnerability Database. […]

The legislation would give EPA new authority to assess cyber risks and require fixes at water utilities while boosting federal cybersecurity funding. […]

Technology policy and AI safety leaders want the government to implement a rules-based process for assessing risks posed by advanced AI systems. Their push comes after OpenAI and Anthropic separately disclosed recent AI security incidents. […]

The bipartisan, bicameral bill would give CISA new tools and funding to help K-12 schools prevent, track, and respond to cyberattacks. […]

The Hugging Face breach is prompting calls from federal officials and lawmakers for stronger AI security and faster cyber defenses. […]

The new AI-powered platform fulfills a key directive in President Trump’s June executive order to strengthen U.S. cyber defenses against emerging AI threats. […]

After a contractor exposed sensitive credentials in a public GitHub repository earlier this year, CISA is outlining how it responded and the security changes it says are needed to prevent similar incidents. […]

While phishing volumes fell globally for a second consecutive year, government organizations saw attacks jump from 92 million to 138 million as threat actors shifted toward high-value targets. […]