The agency is looking to AI and automation as it plans the next generation of the National Vulnerability Database. […]

The legislation would give EPA new authority to assess cyber risks and require fixes at water utilities while boosting federal cybersecurity funding. […]

Technology policy and AI safety leaders want the government to implement a rules-based process for assessing risks posed by advanced AI systems. Their push comes after OpenAI and Anthropic separately disclosed recent AI security incidents. […]

The bipartisan, bicameral bill would give CISA new tools and funding to help K-12 schools prevent, track, and respond to cyberattacks. […]

The Hugging Face breach is prompting calls from federal officials and lawmakers for stronger AI security and faster cyber defenses. […]

The new AI-powered platform fulfills a key directive in President Trump’s June executive order to strengthen U.S. cyber defenses against emerging AI threats. […]

After a contractor exposed sensitive credentials in a public GitHub repository earlier this year, CISA is outlining how it responded and the security changes it says are needed to prevent similar incidents. […]

While phishing volumes fell globally for a second consecutive year, government organizations saw attacks jump from 92 million to 138 million as threat actors shifted toward high-value targets. […]

The directive expands the NSA’s cybersecurity oversight role and establishes new baseline security requirements for federal national security systems. […]

The July 14 event will bring together leaders from CISA, OMB, GSA, Commerce, and industry to examine how agencies are adapting to rapid technology and policy shifts. […]

Former DISA Director Bob Skinner warned that China’s cyber operations are increasingly focused on positioning for future disruptive attacks against U.S. critical infrastructure. […]

Acting Director Nick Andersen said CISA is accelerating hiring, with 180 tentative offers expected by month’s end and hundreds of new employees slated to join the agency. […]

The bill would restore federal funding for MS-ISAC. Sen. Warner warned that funding cuts left small and rural communities with less access to critical cyber defenses. […]

Industry leaders praise the administration’s AI executive order for pairing innovation with cybersecurity, but say effective implementation and public-private collaboration will determine its success. […]

CISA will hold virtual town hall meetings June 15-18 to gather stakeholder feedback on proposed CIRCIA rules requiring critical infrastructure operators to report cyber incidents within 72 hours and ransomware payments within 24 hours. […]

The updated policy shifts federal agencies toward a risk-based cybersecurity logging strategy focused on real-time threat detection, digital forensics, and more targeted data retention requirements. […]

Sen. Rick Scott has introduced legislation to create a CISA-led federal cyber task force aimed at improving coordination against Chinese hacking threats targeting critical infrastructure. […]

Amid waning federal support for public-private information sharing on cyber threats, telecom firms create a nonprofit to improve cyber resilience across the industry. […]

Federal cybersecurity officials said agencies need to involve CISOs earlier in modernization planning to reduce security risks tied to legacy systems and complex technology integrations. […]

GAO’s new report said privacy-enhancing technologies could help organizations better protect sensitive data and support more secure AI use as cyber threats and data collection increase. […]

Audit finds unresolved cyber vulnerabilities at Air Force critical infrastructure sites are tied to insufficient staffing and lack of communication. […]

Federal auditors found the USDA prioritized AI implementation over security controls, opening the door to data loss and other adverse outcomes.    […]

Federal officials on May 14 said Anthropic’s Claude Mythos tool marks a turning point for government cybersecurity and military operations, warning that advanced AI models will require stronger public-private partnerships to defend against emerging risks. […]

The Department of Justice (DOJ) has sentenced two men to 18 months in prison each after they helped North Korean IT workers obtain U.S.-based jobs by hosting company laptops and enabling remote overseas access.  […]

The Environmental Protection Agency (EPA) needs to address mounting cybersecurity and data management risks, including problems with a key online reporting portal and more than 41,500 terabytes of environmental data, the agency’s watchdog warned Wednesday. […]

Sens. Maggie Hassan, D-N.H., and Jim Banks, R-Ind., are seeking answers from school safety company Navigate360 after a hacker said it compromised the company’s tip line platform and exposed sensitive student data. […]

House Select Committee on China Chair James Moolenaar, R-Mich., launched two new congressional efforts Tuesday to close gaps in China’s access to advanced semiconductors and the equipment required to manufacture them.  […]

The National Institute of Standards and Technology (NIST) is changing how it manages cybersecurity vulnerabilities in its National Vulnerability Database. […]