Strategy
-
Retrieved from R. Eskalis/NIST.
NIST and MITRE partner to test AI defense technology for critical infrastructure
The National Institute of Standards and Technology is partnering with a nonprofit research organization to study how AI can boost the security of critical infrastructure. NIST on Monday announced that the agency and MITRE are creating an AI Economic Security Center to Secure U.S. Critical Infr...
By Eric Geller • Dec. 23, 2025 -
ServiceNow to buy Armis for $7.75B
The combination yields a major player in cyber-physical security and exposure management.
By David Jones • Dec. 23, 2025 -
Explore the Trendline➔
Getty Images
TrendlineRisk Management
An esclation of cyber risks facing businesses and government has made cyber resilience a major priority.
By Cybersecurity Dive staff -
CISA loses key employee behind early ransomware warnings
The future of a program that has helped prevent an estimated $9 billion in economic damages is now unclear.
By Eric Geller • Dec. 23, 2025 -
AI security is fundamentally a cloud infrastructure problem, Palo Alto Networks says
Companies should prioritize identity security and integrate cloud monitoring into the SOC, according to the security firm.
By Eric Geller • Dec. 22, 2025 -
Top lawmaker asks White House to address open-source software risks
The Senate Intelligence Committee’s chairman voiced concern about foreign adversaries tampering with code.
By Eric Geller • Dec. 19, 2025 -
Retrieved from R. Eskalis/NIST.
NIST adds to AI security guidance with Cybersecurity Framework profile
Organizations have a new resource to map AI considerations onto NIST’s most famous security blueprint.
By Eric Geller • Dec. 17, 2025 -
Cybersecurity concerns are paramount among executives in almost all roles, regions and industries
A new survey finds widespread agreement that security is one of the biggest challenges facing companies today.
By Eric Geller • Dec. 15, 2025 -
CISOs view hybrid environments as best way to manage risk, compliance
Security leaders are also focused on the convergence of IT and operational technology as business continuity becomes a major concern.
By David Jones • Updated Dec. 15, 2025 -
Sponsored by Palo Alto Networks
Fighting AI with AI: How midmarket teams can turn the tables on smarter threats
AI has significantly lowered the barrier to entry for cybercrime.
Dec. 15, 2025 -
Sponsored by Lenovo and SentinelOne
The new frontline: How AI and automation are securing the supply chain
In today’s digital economy, trust isn’t a given, it’s engineered across the entire supply chain.
By Nima Baiati, Executive Director and General Manager, Commercial Software & Security Solutions, Lenovo • Dec. 15, 2025 -
CISA updates cybersecurity benchmarks for critical infrastructure organizations
The agency streamlines and supplements goals it first issued in 2022.
By Eric Geller • Dec. 12, 2025 -
Cyberattacks force small firms to raise prices: ITRC
The price hikes create a hidden “cyber tax” that is helping to fuel inflation, according to the report.
By Alexei Alexis • Dec. 11, 2025 -
Grid-scale battery energy storage systems face heightened risk of cyberattack
Experts warn that state-linked threat groups are actively searching for ways to disrupt the industry amid growing power demand in the U.S.
By David Jones • Dec. 11, 2025 -
Majority of global firms plan to boost cyber spending in 2026
A report by Marsh shows companies are also focused on third-party risk mitigation.
By David Jones • Dec. 9, 2025 -
Initial access brokers involved in more attacks, including on critical infrastructure
A research firm also finds nation-states aligning their cyberattacks more closely with geostrategic goals.
By Eric Geller • Dec. 8, 2025 -
US, allies urge critical infrastructure operators to carefully plan and oversee AI use
New guidance attempts to temper companies’ enthusiasm for the latest exciting technology.
By Eric Geller • Dec. 4, 2025 -
Lawmakers question White House on strategy for countering AI-fueled hacks
The Trump administration has said little about how it will prevent hackers from abusing AI.
By Eric Geller • Dec. 4, 2025 -
CISA eliminates pay incentives as it changes how it retains top cyber talent
Auditors had described the program as poorly managed. CISA is scrapping it in favor of another recruitment tool.
By Eric Geller • Dec. 3, 2025 -
Leading surveillance camera vendor signs CISA’s product-security pledge
Axis Communications is the first major surveillance camera maker to vow to adhere to CISA’s security guidelines.
By Eric Geller • Dec. 3, 2025 -
Senators push to renew cyber grant program for state, local governments
Security experts and local officials say the program is vital to protecting the country.
By Eric Geller • Dec. 2, 2025 -
Hackers ready threat campaign aimed at Zendesk environments
Researchers warn that hackers linked to recent social engineering attacks are targeting customer-service platforms.
By David Jones • Updated Dec. 1, 2025 -
European police dismantle cryptocurrency mixer popular with ransomware gangs
Authorities have spent years trying to cripple the ecosystem that helps hackers hide their profits.
By Eric Geller • Dec. 1, 2025 -
shutterstock.com/PeopleImages
Sponsored by ThreatLockerEmerging cybersecurity needs: What the market is telling us
Default-deny, strict controls and real-time monitoring: how to stop threats before they start.
By Yuriy Tsibere • Dec. 1, 2025 -
Deep Dive
Thanksgiving holiday weekend kicks off heightened threat environment for security teams
As workers take family time and consumers race for Black Friday discounts, hackers gain an advantage to penetrate vulnerable corporate perimeters.
By David Jones • Nov. 26, 2025 -
Microsoft tightens cloud login process to prevent common attack
Hackers have spent decades exploiting a ubiquitous type of vulnerability. Microsoft is trying to change that.
By Eric Geller • Nov. 26, 2025