Policy & Regulation


  • OpenAI CEO Sam Altman speaks during an event in Tokyo, Japan, on Feb. 3, 2025.
    Image attribution tooltip
    Tomohiro Ohsumi via Getty Images
    Image attribution tooltip

    Rogue OpenAI agent targeted Australian government site

    The prime minister rebuked the company for its slow response and warned that AI poses significant risks that need to be further addressed.

    By • Sept. 24, 2026
  • A man wearing a dark blue suit gestures with both hands while sitting in a plush white chair on a stage. Behind him, a backdrop displays a logo reading "Billington Cybersecurity."
    Image attribution tooltip
    Eric Geller/Cybersecurity Dive
    Image attribution tooltip

    CISA is on the verge of filling hundreds of critical vacancies

    The agency is also working to finalize an incident-reporting regulation and set up a new industry coordination structure, its acting director said.

    By • Sept. 10, 2026
  • Trendline

    AI

    AI has boosted cyber threat actors, but it’s also given defenders new tools. Which side will prevail?

    By Cybersecurity Dive staff
  • Artificial intelligence and machine learning concept
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Government lacks ability to verify AI labs’ claims, experts say

    A new survey of national security practitioners identified a wide range of near- and medium-term AI risks for policymakers to consider.

    By • Sept. 3, 2026
  • An American flag and a flag bearing the seal of the Cybersecurity and Infrastructure Security Agency (which features an eagle holding a shield with elements of a skyline on it) flank a large upright square panel bearing the same CISA seal. On the wall to the right of the panel and the flags, a row of digital clocks shows the time in the four major U.S. time zones.
    Image attribution tooltip
    Eric Geller/Cybersecurity Dive
    Image attribution tooltip

    CISA scraps 6 free cybersecurity assessments for critical infrastructure operators

    The agency’s decision, spurred by workload concerns, could leave organizations without valuable insights into their vulnerabilities.

    By • Updated Sept. 3, 2026
  • The exterior of the Department of Justice in Washington, D.C.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Federal authorities disrupt China-backed hacking operation targeting US critical infrastructure

    Compromised IoT devices were used in a yearslong campaign against key sectors and federal agencies.

    By • Aug. 27, 2026
  • Crowds walk past a statue of a man outside a government building
    Image attribution tooltip
    Chip Somodevilla via Getty Images
    Image attribution tooltip

    Treasury to help financial firms transition to quantum-resistant encryption

    The government is concerned that hackers could someday decrypt financial information and other secrets using code-breaking quantum computers.

    By • Aug. 26, 2026
  • A man stands at a lectern that has a plaque bearing the acronym "RUSI"
    Image attribution tooltip
    Courtesy of National Cyber Security Centre
    Image attribution tooltip

    UK power facility disabled for days after suspected state-linked cyberattack

    The disruption took place amid a wave of attacks targeting vulnerable industrial devices in the water and energy sectors.

    By • Aug. 24, 2026
  • CISA, cybersecurity, agency
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    House Democrats ask GAO to study CISA workforce cuts

    Five lawmakers serving on the Homeland Security Committee said Congress didn’t know enough about the Trump administration’s changes to the cybersecurity agency.

    By • Aug. 24, 2026
  • The Pentagon is seen from a flight taking off from Ronald Reagan Washington National Airport.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Defense contractors still struggling with basic CMMC requirements

    A “confidence disconnect” is plaguing the industry, a consulting firm said.

    By • Aug. 21, 2026
  • Water treatment plant infrastructure at sunset.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    What we know so far about the hacking campaign against US water systems

    Support is growing for stricter oversight and increased financial resources for utilities in the wake of a cyberattack spree, suspected to be the work of Iran-linked threat groups.

    By • Aug. 20, 2026
  • Siemens flags fly in front of Siemens AG headquarters in Berlin, Germany, on Aug. 20, 2024.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    AI-backed campaign targeting vulnerable Siemens S7 devices, CISA and FBI warn

    Hackers are developing scripts disguised as legitimate software in attacks aimed at multiple industries, including energy and water.

    By • Updated Aug. 20, 2026
  • antitrust enforcement
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    DOJ charges 17 people in Iran-backed hacking campaign against US

    Officials allege an IRGC-linked organization was behind a coordinated effort to steal research from American universities, companies and government agencies.

    By • Updated Aug. 19, 2026
  • A man stands at a lectern near signs that read "Winning the AI race"
    Image attribution tooltip
    Chip Somodevilla via Getty Images
    Image attribution tooltip
    Deep Dive

    AI-powered vulnerability clearinghouse faces deep skepticism, major challenges

    The U.S. government’s promises about the Gold Eagle coordination program are overblown, experts said, but the initiative could help organizations prioritize patching and mitigation.

    By • Aug. 18, 2026
  • A digital depiction of a red triangle sign with an exclamation point in the center with binary code in the background.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip
    Deep Dive

    CVE Program eyes automation and globalization to weather AI ‘vulnpocalypse’

    The vulnerability coordination project has had a rocky few years, but a key leader says it will “flourish and improve.”

    By • Aug. 11, 2026
  • American Hospital Hallway
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Experts say healthcare faces cybersecurity crisis: ‘These are patient safety issues’

    Regulatory failures, funding constraints and industry consolidation have created serious hacking risks.

    By • Aug. 7, 2026
  • People stand at a conference booth in a large room in a convention center. The words "OpenAI Daybreak" are printed in large font on a wall behind the booth.
    Image attribution tooltip
    Eric Geller/Cybersecurity Dive
    Image attribution tooltip

    AI firms know policymakers won’t ‘let you make a Terminator factory,’ DHS official says

    The Trump administration believes leading AI companies have learned important lessons from recent incidents and regulation isn’t necessary to preserve those lessons.

    By • Aug. 7, 2026
  • Three men sit behind a table in a conference ballroom
    Image attribution tooltip
    Eric Geller/Cybersecurity Dive
    Image attribution tooltip

    Western government leaders call for a focus on infrastructure resilience, not AI hype

    U.S. and allied officials said companies should start preparing now for a cyberattack that changes how they provide essential services.

    By • Aug. 5, 2026
  • Nick Andersen, executive assistant director for cybersecurity, speaks during the Billington Cybersecurity Summit in Washington D.C. on Sept. 11, 2025.
    Image attribution tooltip
    Courtesy of Billington
    Image attribution tooltip

    CISA is prioritizing work with critical infrastructure as it begins to recover from cuts

    The agency has been focused on helping secure systems at drinking and wastewater utilities in recent weeks.

    By • Aug. 5, 2026
  • National Cyber Director Sean Cairncross delivers keynote address at the Billington CyberSecurity Summit on Sept. 9, 2025.
    Image attribution tooltip
    Permission granted by Billington
    Image attribution tooltip

    White House walks tightrope on securing AI without stifling tech innovation

    National Cyber Director Sean Cairncross said the administration wants to work collaboratively with the private sector.

    By • Aug. 5, 2026
  • Water treatment facility with multiple tanks and filtration units. Vital infrastructure for sustainable water management and distribution
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    OT security coalition urges Congress, CISA to enact reforms amid water sector hacks

    Iran-nexus hackers are suspected in a broad campaign targeting drinking and wastewater sites in at least seven U.S. states.

    By • Aug. 3, 2026
  • Water treatment plant infrastructure with the sun rising behind it.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    US authorities see ‘significant escalation’ in attacks on water system devices

    Hackers have locked operators out of their own OT networks, modified passwords and changed IP addresses.

    By • July 31, 2026
  • Minnesota State Capitol building
    Image attribution tooltip
    Stephen Maturen via Getty Images
    Image attribution tooltip

    Authorities investigating a coordinated cyberattack against Minnesota water systems

    The two-day attack comes days after federal officials warned of state-linked threat groups targeting a wider set of industrial devices.

    By • Updated July 29, 2026
  • AI assistant apps icons for OpenAI ChatGPT, Google Gemini and Anthropic Claude. are pictured on a smartphone screen.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Tech industry giants say US must embrace openness, transparency in AI

    Open-source and open-weight AI models are essential cybersecurity tools, two groups of major AI and security firms said.

    By • July 27, 2026
  • An Iranian flag flutters in front of a building with many windows
    Image attribution tooltip
    Michael Gruber via Getty Images
    Image attribution tooltip

    CISA, FBI warn that Iran-linked hackers are expanding target set for water, energy

    The agencies said threat groups have disrupted critical infrastructure sites by exploiting vulnerable PLC devices.

    By • July 23, 2026
  • A sign that says "Government Accountability Office" and shows the GAO's seal sits in front of the agency's headquarters
    Image attribution tooltip
    Retrieved from GAO.
    Image attribution tooltip

    GAO report details scope of cybersecurity regulation overlap

    A morass of rules is forcing companies to report the same information multiple times — and sometimes, those rules conflict.

    By • July 23, 2026