Strategy
-
Nation-state rivals linked to majority of consequential attacks targeting critical UK sites
The nation’s top cybersecurity official warned that business leaders, authorities need to rethink how they protect critical infrastructure from state-sponsored adversaries.
By David Jones • June 18, 2026 -
Major critical infrastructure disruptions are inevitable, acting CISA chief says
In recent years, the U.S. government has reoriented its cybersecurity strategy away from prevention and toward resilience.
By Eric Geller • June 17, 2026 -
Explore the Trendline➔
IPGGutenbergUKLtd via Getty Images
TrendlineThe Cybersecurity Skills Gap
From AI to federal budget cuts, the nature of cybersecurity work is changing faster than ever.
By Cybersecurity Dive staff -
California water utility probes breach claim by Iran-linked actor
The group Handala said it attacked one of the nation’s largest water companies.
By David Jones • June 17, 2026 -
AI isn’t solving cybersecurity workforce woes
More than half of cybersecurity professionals say they’re thinking about leaving the industry, according to a new report.
By Eric Geller • June 17, 2026 -
AI adoption correlates with incident frequency, underscoring need for governance
Even organizations that haven’t been breached expect an AI-related incident in the near future, a new survey found.
By Eric Geller • June 16, 2026 -
Deep Dive
MS-ISAC enters uncertain new era after losing federal funding and thousands of members
The information-sharing group, a vital resource for state and local governments, has cut staff and pinned its hopes on a membership surge.
By Eric Geller • June 15, 2026 -
Agentic AI surges in financial sector even as many firms fail to manage security risks
One-fifth of firms aren’t even sure if they’ve been hacked through their AI tools, according to a new report.
By Eric Geller • June 12, 2026 -
It’s Mythos’ world now. How do we live in it?
Anthropic's powerful model raises difficult questions about how government and industry should work together to safeguard systems in the AI era.
By Eric Geller • June 12, 2026 -
Enterprises report increasing budgets for security training in AI and other critical topics
Finding the time to train employees remains the biggest impediment to programs’ success, according to a new report.
By Eric Geller • June 11, 2026 -
FIFA World Cup expected to face extensive criminal, hacktivist cyber threats
Researchers warn that thousands of malicious domains are already in place, as fans and tournament organizers face potential attacks.
By David Jones • June 11, 2026 -
CISA gives agencies new vulnerability remediation deadlines that take risk levels into account
The cybersecurity agency says it wants to help network defenders prioritize the fixes that matter the most.
By Eric Geller • Updated June 10, 2026 -
Companies are failing to keep up with AI’s identity sprawl, creating entry points for hackers
Three-quarters of organizations say they aren’t fully overseeing the activities of user accounts belonging to agents and other AI tools.
By Eric Geller • June 10, 2026 -
IT sector faces growing threats from IP-hungry China, AI-enabled cybercriminals
Businesses also need to watch out for North Korean remote IT worker schemes, according to a new CrowdStrike report.
By Eric Geller • June 9, 2026 -
Deep Dive
Cyber insurance policyholders facing heavier scrutiny in underwriting, claims
A multiyear lull in insurance rates and insurers’ over-dependence on large U.S. policyholders have led to more restrictions and exclusions in coverage.
By David Jones • June 8, 2026 -
Companies aren’t prepared for how AI is accelerating impersonation attacks
Businesses generally aren’t taking a proactive enough approach to blocking schemes that spoof their leaders’ identities, according to a new report.
By Eric Geller • June 8, 2026 -
Sponsored by Lenovo
The new risk equation: Why endpoint security is a financial imperative
Cyber risk is financial risk; endpoint security in financial services is a business imperative.
By Nima Baiati, Vice President and General Manager, Commercial Software & Security Solutions, Lenovo • June 8, 2026 -
Sprawling new House AI bill includes frontier model oversight, open-source security grants
The legislation has already drawn widespread criticism for its proposal to preempt state AI laws.
By Eric Geller • June 5, 2026 -
CISA chief says Trump AI executive order implementation will start soon
The agency, depleted after several rounds of cuts imposed by the White House, insists it can handle its new AI security responsibilities.
By Eric Geller • June 4, 2026 -
CrowdStrike, Palo Alto Networks defy estimates as AI fuels cyber demand
The cybersecurity sector has been under perceived pressure due to accelerating deployment of AI tools.
By David Jones • June 4, 2026 -
‘Don’t panic’: AI reality checks dominate major cybersecurity conference
CISOs and their colleagues should focus on network security basics, not overhyped AI promises, analysts said at a Gartner cybersecurity event.
By Eric Geller • June 3, 2026 -
Trump signs EO seeking early government access to powerful AI models
The directive represents an about-face for an administration that previously repudiated government AI reviews.
By Eric Geller • Updated June 2, 2026 -
Anthropic shares Mythos with 150 more organizations, including critical infrastructure operators
The AI firm also said it’s exploring how to help open-source developers deal with a flood of vulnerability reports.
By Eric Geller • June 2, 2026 -
Opinion
Turning tension into collaboration: How CIOs and CISOs can lead together
If properly managed and channeled, age-old friction between IT and cybersecurity can create a more resilient organization.
By Tom Scholtz, Distinguished VP Analyst, Gartner • June 2, 2026 -
Without strong governance, companies put credit ratings at risk in AI era
A new report from S&P Global provides a blueprint for how companies can adapt to the changing threat environment.
By Eric Geller • June 1, 2026 -
Sponsored by SHI
Top 4 data security best practices for the AI-enabled enterprise
To maximize AI’s value without increasing security risk, organizations must enforce best‑practice data protections across their environment.
June 1, 2026