Cyber Threats
AI, once relegated to helping hackers with certain tasks, can now power every stage of a cyberattack
Researchers determined that AI was used in steps across entire cyber operations to identify security flaws, generate commands and carry out parts of intrusions, sometimes with little human oversight. Both U.S. and Chinese AI models have been involved.
Russian hackers exploit weak router security to breach critical infrastructure, Western allies warn
The guidance comes as the United Kingdom and European Union blamed a major Russian intelligence unit for an attempted attack on Poland’s power grid last year.
Exclusive
DHS network intrusion was twice ruled a false positive before breach confirmed
Suspicious activity on the Homeland Security Information Network, which is being used to support World Cup games around the U.S., was first detected around mid-to-late May.
Exclusive
Hackers breached DHS information-sharing network, people familiar say
The Homeland Security Information Network is used by government, international and private sector partners to share sensitive but unclassified information.
The hidden market turning home internet connections into cover for hackers
Researchers traced millions of household IP addresses through residential proxy networks, calling the illicit use of those connections the “blood diamonds of the digital age.”
Planned NDAA amendment would codify CISA’s role in cyber vulnerability program
The measure, expected as a proposed add-on to the government’s 2027 defense package, targets a bedrock cybersecurity vulnerability-tracking system after a contracting fiasco last year.
US officials see Iran cyber threat persisting despite preliminary deal
Officials’ views reflect a recurring concern that cyber operations would continue regardless of conflict status, even as the Trump administration pursues a diplomatic off-ramp with Tehran.
Warner presses CISA on whether staff cuts weakened regional cyber support
The Senate Intelligence Committee’s top Democrat is asking the cyber agency for workforce charts, vacancy details and service data as state and local support comes under strain.
NSPM-12: The NSS cyber memo agencies cannot ignore
COMMENTARY | NSPM-12 dropped last week. Anyone who has spent serious time in federal cybersecurity should read it carefully.
Exclusive
Warner proposes overhaul of critical infrastructure cyber plans as AI threats rise
The measure would require CISA to refresh long-outdated sector cybersecurity plans as lawmakers warn that advanced AI tools could accelerate the discovery and exploitation of software flaws.
New coalition will enter legal debate over industry’s role in government cyber missions
Its formation occurs amid a broader discussion over whether existing laws are suited for cyber activities that increasingly depend on cooperation between the government and private sector.
Hackers are already laying groundwork to disrupt the 2026 midterms, research says
The report from cybersecurity firm Check Point lands as the Trump administration pushes new voting rules and intelligence officials face questions about how they are handling foreign election threats.
Featured eBooks
Commercial location data is being used to target US servicemembers, lawmakers warn
U.S. Central Command said it “has received multiple threat reports concerning adversary exploitation of commercial location data to target or surveil U.S. personnel in theater.”
Exclusive
Iran’s hackers are coordinating more closely, Israel’s top cyberdefense official says
Yossi Karadi also said he is pressing major AI labs for access to advanced models like Anthropic’s Mythos to help defend Israeli government networks.
Why compliance alone doesn’t make federal networks secure
COMMENTARY | Zero Trust is an ongoing operational discipline, not a project with a completion date.
House Homeland Dems request CISA briefing amid report of leaked agency credentials
Independent journalist Brian Krebs reported Monday that researchers found a publicly accessible GitHub repository connected to a government contractor that exposed CISA data.
Microsoft disrupts cybercrime service offering malware disguised as legitimate software
The downstream impact of that service’s operations “has resulted in attacks against a broad range of industry sectors” in the U.S. and other nations, the company said.
Trump says he and Xi discussed cyberattacks and spying between US, China
“They’re talking about the spying. Well, we do it too,” the president said. “We spy like hell on them too.”
House Homeland panel gets briefing on Anthropic’s Mythos
The conversation was “productive and focused on a range of AI security and competitiveness issues,” according to one person familiar with the meeting.
The Pentagon’s cyber rules leave MSPs as an attack vector
COMMENTARY | Who actually holds the keys to military contractor information systems?
