Threat groups ramp up social-engineering attacks against healthcare sector

The Latest

• 

  Businesses fear cyberattacks more than anything else, driven by AI and supply chain worries

  Many companies still aren’t preparing thoroughly enough to face a hack, the insurance firm Travelers said in a new report.

  Strategy

• 

  Retailers tamp down shadow AI but struggle to oversee agentic sprawl

  The use of AI agents is soaring in the retail sector, but visibility remains a major challenge, with regulated data at risk.

  Strategy

• 

  Insurance sector begins to offer clarity on AI-related cyber claims

  The emergence of agentic AI and frontier models has led to widespread uncertainty for policyholders.

  Strategy

• 

  Google AI models broke out of sandbox, hacked three companies

  The incidents stemmed from the same testing environment defects that tripped up OpenAI, Anthropic and Meta.

  Updated Sept. 21, 2026

  Breaches

• 

  China-nexus actor steals thousands of documents in monthslong exploitation campaign

  Researchers suspect the hacker employed LLMs to develop custom tools.

  Vulnerability

• 

  CISA ends weekly vulnerability roundups as part of shift to prioritization approach

  The agency wants to help companies sort through the AI-fueled avalanche of bug reports.

  Strategy

• 

  Settra ransomware variant deployed in recent attacks

  Security researchers warned that hackers are using VPN credentials for initial access and deploying RMM tools.

  Cyberattacks

• 

  FBI, Coast Guard probe suspected cyberattacks on ships entering US waters

  The investigation comes at a time of heightened vigilance over U.S. port facilities and maritime security.

  Cyberattacks

• 

  Manufacturers make patching progress, but identity management still major weakness

  Misconfigurations remain widespread in the manufacturing sector, including internet-accessible remote-access software, a new report found.

  Vulnerability

• 

  CISA looks to recruit general infrastructure security experts rather than sector-focused advisers

  “I need people that can pivot from day to day,” the agency’s acting chief told reporters.

  Strategy

• 

  Hackers exploit zero-day flaw in Cisco email gateway

  Researchers warn the vulnerability could be used by state-linked actors for espionage.

  Vulnerability

• 

  Companies’ AI strategies don’t account for agentic tools

  Businesses are taking AI governance seriously, but their plans lag behind the technology they’re using, according to an EY survey.

  Strategy

• 

  AI is now leading driver of new cybersecurity spending

  The prioritization comes at a time of relatively modest growth in overall security investments, according to IANS and Artico Search.

  Updated Sept. 16, 2026

  Strategy

• 

  Malicious actors already using critical GitLab flaw, CISA and others warn

  The vulnerability could let unauthenticated users access sensitive files from software-development environments.

  Vulnerability

• 

  Security teams increasingly outflanked by AI agents

  A report warns that non-human identities are growing beyond the ability of existing systems to track. 

  Strategy

• 

  Deep Dive

  Accountability, oversight and AI: Inside Microsoft’s security transformation

  Stung by years of embarrassing hacks, the tech giant overhauled how it approached cybersecurity. Company leaders now say they’re seeing results.

  Strategy

• 

  State authorities warn they lack resources to address cyber threat to critical sectors

  State CIOs and CISOs need additional funding, personnel and training to protect water, energy and healthcare, according to a new report.

  Strategy

• 

  CISA is on the verge of filling hundreds of critical vacancies

  The agency is also working to finalize an incident-reporting regulation and set up a new industry coordination structure, its acting director said.

  Strategy

• 

  White House sees water cybersecurity partnership in Texas as national blueprint

  The government is taking a new approach to protecting critical infrastructure, National Cyber Director Sean Cairncross said.

  Strategy

• 

  Threat groups enhance cyberattack capabilities with AI

  A report shows state-linked and criminal hackers are incorporating automation and agentic technology to find new victims and bypass traditional defenses.

  Cyberattacks

• 

  How AI anxieties dominated the summer’s big cybersecurity conference

  From the CVE Program to autonomous hacks, everyone is worried about the technology’s next evolution.

  Strategy

• 

  New FBI cyber strategy promises increase in adversary disruptions

  The document also focuses on helping victims, reflecting the bureau’s goal of encouraging more companies to share information with it.

  Strategy

• 

  CISOs are feeling the security burden of accelerated AI use

  A report shows CISOs face increased pressures related to cyber resilience and business continuity.

  Leadership & Careers

• 

  Don’t let AI distract from cybersecurity basics, officials and executives warn

  Government and industry leaders said simple attacks remain far more consequential than anything AI is doing.

  Strategy

• 

  N-able issues patch for zero-day flaw

  Security researchers warned the company of unusual threat activity in a recently patched N-able environment.

  Vulnerability

More stories