Letting businesses help the government deter cybercrime will benefit all Americans, Sean Cairncross said.

Customers need to check systems for compromise prior to patching, because the security upgrade may not fully resolve an infected system.

Representatives of three critical infrastructure sectors identified the conflicting and redundant rules that they said made their jobs much more difficult.

Security teams received urgent calls to disconnect servers before authorities confirmed critical zero-day flaws.

The firm had received information from law enforcement of a possible attack.

Security vetting tools and processes weren’t designed with obscure AI services in mind, according to TrendAI.

Hackers linked to high-profile cybercrime groups have used voice-phishing tactics to trick workers into giving up credentials in recent attacks.

Companies in the experimentation stage were less likely than established users to deploy advanced AI-powered defenses, a new survey found.

The prime minister rebuked the company for its slow response and warned that AI poses significant risks that need to be further addressed.

The Google subsidiary invited all infrastructure operators to apply for its free scanning service.

The potentially serious breach highlights the supply chain risks facing even the most sophisticated organizations.

Many companies still aren’t preparing thoroughly enough to face a hack, the insurance firm Travelers said in a new report.

More than one-third of organizations consider cyber risk as the top obstacle to growth.

The use of AI agents is soaring in the retail sector, but visibility remains a major challenge, with regulated data at risk.

The incidents stemmed from the same testing environment defects that tripped up OpenAI, Anthropic and Meta.

Researchers suspect the hacker employed LLMs to develop custom tools.

Security researchers warned that hackers are using VPN credentials for initial access and deploying RMM tools.

The agency wants to help companies sort through the AI-fueled avalanche of bug reports.

The investigation comes at a time of heightened vigilance over U.S. port facilities and maritime security.

Misconfigurations remain widespread in the manufacturing sector, including internet-accessible remote-access software, a new report found.

Researchers warn the vulnerability could be used by state-linked actors for espionage.

“I need people that can pivot from day to day,” the agency’s acting chief told reporters.

Businesses are taking AI governance seriously, but their plans lag behind the technology they’re using, according to an EY survey.

A report warns that non-human identities are growing beyond the ability of existing systems to track.

The vulnerability could let unauthenticated users access sensitive files from software-development environments.

A report shows that state CIOs and CISOs need additional funding, personnel and training to protect water, energy and healthcare.

Stung by years of embarrassing hacks, the tech giant overhauled how it approached cybersecurity. Company leaders now say they’re seeing results.

A report shows state-linked and criminal hackers are incorporating automation and agentic technology to find new victims and bypass traditional defenses.

A top cybersecurity official said the government was taking a new approach to protecting critical infrastructure.

From the CVE Program to autonomous hacks, everyone is worried about the technology’s next evolution.

Meanwhile, the agency is finalizing an incident-reporting regulation and setting up a new industry coordination structure.

A report shows CISOs face increased pressures related to cyber resilience and business continuity.

The document also focuses on helping victims, reflecting the bureau’s attempt to encourage more companies to share information with it.

Security researchers warned the company of unusual threat activity in a recently patched N-able environment.

Simple attacks remain far more consequential than anything AI is doing, government and industry leaders said.

A new survey of national security practitioners identified a wide range of near- and medium-term AI risks for policymakers to consider.

Just weeks after a wave of ransomware attacks, new flaws in SMA1000 series appliances are being exploited.

A nonprofit group is now working to contact the botnet’s victims.

The agency’s decision, spurred by workload concerns, could leave organizations without valuable insights into their vulnerabilities.

The collaboration software’s developer took almost a full month to patch the flaw after disclosing it.

An authentication bypass flaw is already under exploitation, the latest in a series of recent SharePoint attacks.

The five lawmakers, who serve on the Homeland Security Committee, said Congress didn’t know enough about the Trump administration’s changes to the cybersecurity agency.

The disruption took place amid a wave of attacks targeting vulnerable industrial devices in the water and energy sectors.

The company said the remote-code execution vulnerability has been fully mitigated and no further action is necessary.

A “confidence disconnect” is plaguing the industry, a consulting firm said.

Support is growing for stricter oversight and increased financial resources for utilities in the wake of a cyberattack spree, suspected to be the work of Iran-linked threat groups.

Resilience, not prevention, is key, analysts at the credit-rating agency said in a pair of new reports.

Hackers are developing scripts disguised as legitimate software in attacks aimed at multiple industries, including energy and water.

These companies often have the hardest time balancing their roles as suppliers and customers, according to the risk management firm Black Kite.

Officials allege an IRGC-linked organization was behind a coordinated effort to steal research from American universities, companies and government agencies.