Cyber Defense

EU wants to support bedrock cyber vulnerability program, top official says

U.S. congressional staffers are also working on legislation to give CISA more oversight of the Common Vulnerabilities and Exposures program after a contracting incident last April.

ODNI is building a framework to boost spy agencies’ AI adoption

A tech modernization push launched last year also included expanded threat hunting across IC networks, according to an official.

Ex-NSA leaders say Americans are becoming ‘numb’ to cyber threats

A serious cyberattack hasn’t prompted a strong enough policy or public reaction, one former director said.

National cyber director doesn’t envision industry doing offensive hacking

Sean Cairncross wants the private sector to use its technical prowess to inform U.S. government offensive and defensive decisions.

Trump’s new cyber strategy details more offensive response to cyber threats

“Unlike other Administrations, the Trump Administration will not tinker at the edges and apply partial measures and ambiguous strategies that neglect the growing number and severity of cyber threats,” the strategy said.

Exclusive

Trump’s CISA nominee said he left Coast Guard to address GOP hold

Sean Plankey confirmed the intent to Nextgov/FCW and said he’s “prepared to lead the nation’s cyber defense agency to protect the federal civilian networks and our nation’s critical infrastructure from physical and cyber attacks.”

Potential US-built hacking tools obtained by foreign spies and cybercriminals, research says

iVerify has described the activity as the “first known mass iOS attack” campaign of its kind. Google said fragments of the exploit first appeared last February, with ties to an unnamed “customer of a surveillance company.”

US cyber responses will be ‘linked to adversary actions’ and involve industry coordination, official says

That dynamic will be outlined in a national cyber strategy, which will be released “soon,” said ONCD’s Alexandra Seymour.

New Treasury initiative targets improved cyber risk management for AI tools

The department says it plans to release deliverables from a public-private working group in phases throughout the rest of February.

DEF CON bans hackers, technologists named in Epstein documents

Vincenzo Iozzo, Joichi Ito and Pablos Holman are barred from future attendance after Justice Department files revealed their roles in efforts to secure Jeffrey Epstein’s access to DEF CON.

CISA orders agencies to patch and replace end-of-life devices, citing active exploitation

The directive gives agencies three months to identify unsupported edge devices, a year to begin removing them and 18 months to eliminate them entirely.

White House cyber shop is crafting AI security policy framework, top official says

ONCD chief Sean Cairncross also said a bedrock National Cyber Strategy, initially expected last month, is coming “sooner rather than later” without specifying a date.

Watch for GenAI browsers, purple teaming and evolving AI policy in 2026

COMMENTARY | Government IT leaders cannot afford inaction, especially as AI adoption accelerates.

OMB reverses Biden-era software attestation order

A new executive branch memorandum instead allows agencies to lean on software bills of materials, or SBOMs, in lieu of a universal attestation framework.

Funding bill extends TMF and cyber measures through September

The authorization for the Technology Modernization Fund had lapsed in December, leaving its leadership unable to make new investments.