Compliance
Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI.
Hi, what are you looking for?
SecurityWeek
Cybercrime
In the wake of a suspected leader’s arrest, ShinyHunters says it never intended to publish data stolen from the FBI.
Artificial Intelligence
The accord opened the door to future regulation but focused on four voluntary steps for the companies to take.
Artificial Intelligence
The AIxCC competition winner will analyze messaging app code and compiled binaries for vulnerabilities, with technology that could also help commercial customers secure their...
Data Breaches
The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense.
Government
Chinese cybersecurity firms are facing action from the country’s military, but it’s not due to product or technical failures.
Artificial Intelligence
The new program stems from an AI-focused Executive Order signed by President Trump on June 2.
Government
Multiple state-sponsored APTs are compromising poorly secured devices across critical infrastructure sector networks.
Compliance
A new CMMC review and reform task force will conduct a comprehensive review of the program.
Cybercrime
Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings...
Artificial Intelligence
Two announcements on July 7, 2026, demonstrate the government’s determination to improve the level of cybersecurity within the UK.
Artificial Intelligence
The audits are reportedly being spearheaded by CISA’s Attack Surface Evaluation team, a specialized unit tasked with conducting digital defense assessments and simulated hacking...
Artificial Intelligence
ChatGPT maker OpenAI said Friday it is restricting the release of its new artificial intelligence model at the request of President Donald Trump’s administration.
Government
UNC5792 and UNC4221 have been targeting US government officials, military leaders, and allied personnel.
Artificial Intelligence
Come vulnerabilities were found within hours, but that does not mean the model was able to exploit them within that time, the official said.
Data Protection
Federal agencies are required to transition high-value assets and high-impact systems to use PQC by the end of 2030 and 2031.
Government
NSPM-12 establishes a clear structure for NSS cybersecurity governance and accountability and reestablishes CNSS.
Data Breaches
French officials say roughly 73,000 government accounts were affected, while the threat actor claims to have stolen messages and user data from the sovereign...
Data Breaches
Someone posted fake VRChat and Discord data breach reports on the system, prompting the Maine AG to take action.
Government
The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries.
Government
The 13 websites purported to be affiliated with consulting companies that advertised job openings for current and former holders of security clearances
Artificial Intelligence
The order establishes a framework for the federal government to vet the national security risks of the most advanced AI systems for up to...
Data Breaches
Lithuanian authorities are on high alert after a massive data leak involving more than 600,000 entries from national data registers.
Artificial Intelligence
Other noteworthy stories that might have slipped under the radar: Nvidia cloud gaming data breach, Android 17 security upgrades, FBI warning after ShinyHunters hacks...
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)