Strategy
-
Retrieved from GAO.
GAO report details scope of cybersecurity regulation overlap
A morass of rules is forcing companies to report the same information multiple times — and sometimes, those rules conflict.
By Eric Geller • July 23, 2026 -
Ransomware victims fail to fix flaws that exposed them
Many organizations still aren’t securing their email or patching vulnerabilities after recovering from attacks, a new report found.
By Eric Geller • July 21, 2026 -
Explore the Trendline➔
Getty Images
-
Sponsored by Doppler
The secret problem in AI infrastructure: Why MCP security starts with secrets
AI changes how infrastructure is accessed. Here's what to secure.
July 20, 2026 -
Gaps in network security, oversight strategy hamper US’s aviation cybersecurity regulators
A new government audit identified several weaknesses at the two agencies that protect air travel from hackers.
By Eric Geller • July 16, 2026 -
Iran-nexus actors using AI to enhance cyber playbook
A report shows state-linked and hacktivist groups have used ChatGPT and other tools for malware development, phishing and mapping out industrial sites.
By David Jones • July 16, 2026 -
US launches vulnerability clearinghouse amid AI-fueled surge in flaws
The Trump administration hopes the program will accelerate the discovery and fixing of serious technical problems before hackers exploit them.
By Eric Geller • July 15, 2026 -
Sharp rise in AI adoption for cyber defense exposes major governance gap
A report by the SANS Institute indicates a split between senior security leaders and frontline practitioners.
By David Jones • July 14, 2026 -
Healthcare sector faces persistent supply-chain security, identity management challenges
A new report says doctors and nurses should train for cyberattacks the way firefighters train for major blazes — even if they expect them to be rare.
By Eric Geller • July 14, 2026 -
Sponsored by Censys
When cybercriminals outrun the feed
How can you defend against yesterday?
By Alex Gartner, Principal Technical Product Lead at Censys • July 13, 2026 -
CISA details security lapses that led to GitHub leak of passwords, cloud access keys
The agency’s blog post came as lawmakers pressed the agency for answers.
By Eric Geller • July 10, 2026 -
US enterprises incorporate cyber risk into larger strategic focus
The rapid adoption of AI and cloud is forcing significant shifts toward business resilience and financial impact.
By David Jones • Updated July 8, 2026 -
Businesses modernizing networks for AI fear expanding attack surface, limited visibility
IT leaders are worried that security controls aren’t keeping pace with threats to AI systems.
By Eric Geller • July 7, 2026 -
Deep Dive
Sophisticated threat campaign pushes Cisco to the very edge
A monthslong exploitation wave against Cisco SD-WAN systems raises larger questions about trust and the insecurity of network infrastructure.
By David Jones • July 7, 2026 -
Why schools are easy prey for hackers — and why they struggle to fight back
Power plants and gas pipelines might receive more attention, but schools are arguably more vulnerable.
By Eric Geller • July 6, 2026 -
Most cybersecurity workers have been told to conceal a breach, report finds
Security firm Bitdefender also found that U.S. companies were simultaneously more confident and more strained on cyber defense than foreign peers.
By Eric Geller • July 2, 2026 -
Anthropic reactivates Fable, Mythos after securing government approval
The company’s powerful frontier models are back, but vetting issues remain unresolved.
By Eric Geller • July 1, 2026 -
DHS proposes new system for public-private infrastructure security collaboration
The Trump administration eliminated the previous framework in 2025, sparking backlash from experts and infrastructure operators.
By Eric Geller • June 30, 2026 -
OpenAI voluntarily limits new AI models at government’s request
The company said Friday it was working with the government on a more formal process for reviewing model releases.
By Eric Geller • June 29, 2026 -
Sponsored by Cobalt
From mythos to reality: Why the 2026 state of pentesting report proves the need for programmatic defenses
AI can find zero-days in minutes. Your defense strategy must evolve now.
By Gunter Ollmann, CTO, Cobalt • June 29, 2026 -
Software, AI companies form alliance to tackle open-source security flaws
The emergence of frontier AI models has increased the speed and capabilities of malicious hackers.
By David Jones • June 26, 2026 -
FCC requires emergency-alert distributors to secure their systems
More than a decade after a high-profile hacking campaign, the commission is moving from recommending basic security protocols to requiring them.
By Eric Geller • June 26, 2026 -
AWS unveils agent security, data access tools
The updates reflect Anthropic’s Mythos model and the speed at which vulnerabilities can be surfaced.
By Paige Gross • June 26, 2026 -
NIST offers security guidance for water utilities using remote-access tools
The technology is one of the water sector’s biggest cybersecurity weaknesses.
By Eric Geller • June 25, 2026 -
As cyber risk evolves, the insurance industry tightens guardrails
C-suite executives are concerned about resilience, but claims are increasingly tied to strict underwriting standards.
By David Jones • June 25, 2026 -
Microsoft, Europol lead global takedown of infostealer malware
Cybercriminals used Amadey and StealC to infect thousands of computers worldwide, leading to ransomware and other digital crimes.
By David Jones • June 24, 2026