The Latest
-
R. Eskalis/NIST. Retrieved from NIST.
Industry to NIST: Keep agentic AI standards flexible and voluntary
The business community said security guidance should reflect the nascency and diversity of the field.
-
Michael Gruber via Getty Images
US entities face heightened cyber risk related to Iran war
The military campaign against Iran is putting local governments, critical infrastructure providers and major U.S. companies at heightened risk of disruptive attacks.
-
Eric Geller/Cybersecurity Dive
Trump administration will test infrastructure cybersecurity approaches in pilot program
The government can’t rely on a “universal solution” to the challenges facing vital services, a top White House official said.
-
Retrieved from GAO.
Conflicting definitions and timelines cause cybersecurity regulation morass, industry reps say
A recent Government Accountability Office report highlights businesses’ frustrations with the way the government currently oversees cybersecurity.
-
Majid Saeedi/ via Getty Images
State-linked actors targeted US networks in lead-up to Iran war
Researchers found backdoors installed on U.S. company networks in the weeks prior to the U.S. and Israeli bombing campaign.
-
Andrew Harnik via Getty Images
Trump’s new cybersecurity strategy makes promises but lacks details
In a document released Friday, the administration vowed to increase the government’s use of AI for rapid cyber defense.
-
Getty Images
Nearly half of exploited zero-day flaws target enterprise-grade technology
A report by Google Threat Intelligence Group warns that AI will be used to speed and scale attacks in 2026.
-
Alex Wong via Getty Images
HHS adds cybersecurity guidance to healthcare sector self-assessment tool
Organizations can now use the online platform to test their readiness for digital security crises.
-
Retrieved from Senate Homeland Security Committee.
Plankey’s nomination as CISA director now in jeopardy
News that Sean Plankey has left his post at DHS comes amid rising risks to U.S. critical infrastructure from Iran-linked hackers and worries over a weakened CISA.
Updated March 5, 2026 -
Getty Images
Microsoft, Europol disrupt global phishing platform Tycoon 2FA
The service helped cybercriminals bypass multifactor authentication and led to business email compromise and ransomware.
-
Courtesy of CrowdStrike
CrowdStrike reports record quarter amid investor concerns about AI impact
CEO George Kurtz told investors the cybersecurity firm is well positioned to compete against legacy providers.
-
Getty Images
Iran-nexus hackers target flaws in surveillance cameras
The threat activity echoes prior exploitation during the Israeli war with Hamas, a precursor to attacks against critical sectors in the U.S.
Updated March 6, 2026 -
Majid Saeedi via Getty Images
Pro-Russia actors team with Iran-linked hackers in attacks
The groups formed a loose alliance in recent days, targeting critical infrastructure in the Middle East and the U.S.
Updated March 3, 2026 -
Getty Images
Ransomware is now less about malware and more about impersonation
Stolen passwords have replaced infectious code as the most common tactic in major breaches, Cloudflare said.
-
Majid Saeedi via Getty Images
Iran-linked hackers raise threat level against US, allies
Security researchers warn that hacktivists and state-linked groups are using DDoS, phishing and other tactics against critical infrastructure.
Updated March 2, 2026 -
Getty Images
Deep DiveHow Microsoft, partners are tackling ‘huge, huge task’ of making security software safer
The technology giant and third-party security vendors are plotting an ambitious overhaul of how their products interoperate.
-
Getty Images
University of Mississippi Medical Center reopens clinics after ransomware attack
The academic medical center’s clinics can once again access patient records and are resuming normal operations more than a week after the attack.
Updated March 2, 2026 -
Heather Diehl via Getty Images
Trump administration removes controversial acting CISA director
The new agency chief, Nick Andersen, has significantly more senior cybersecurity leadership experience, which has given some demoralized employees hope.
Updated Feb. 27, 2026 -
Getty Images
‘Resurge’ malware can remain undetected on devices
CISA previously issued an alert about attacks that exploited a vulnerability in Ivanti Connect Secure.
Updated Feb. 27, 2026 -
Getty Images
UFP Technologies investigating cyberattack that impacted company data
The medical device maker warned of short-term shipment delays, but does not see a material impact.
-
peshkov via Getty Images
AI accelerates lateral movement in cyberattacks
New research paints a grim picture of how the technology is making cyberattacks faster and easier for threat actors.
-
Getty Images
Software vulnerabilities are being weaponized faster than ever
A report by VulnCheck shows threat groups are exploiting a small percentage of critical flaws well before security teams can mitigate.
-
Getty Images
CISA orders agencies to patch Cisco devices now under attack
The vulnerabilities, scored as critical, affect the company’s software-defined wide-area networking (SD-WAN) systems.
-
Kevin Frayer via Getty Images
China-linked hackers breached dozens of telecoms, government agencies
The cyberattacks used a clever technique: malware that hid in plain sight on Google Sheets.
-
Matt Kapko/Cybersecurity Dive
Threat groups move at record speeds, as AI helps scale attacks
A report by CrowdStrike shows cybercrime groups are outpacing security teams and increasingly abusing legitimate tools.
