The full corpus — beyond today's front page.
254 results · page 8 of 11
The National League of Cities has put forward guidance aimed at helping municipal governments strengthen cybersecurity practices, establish AI governance frameworks, and improve data-informed decision making at the local level.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
CISA, the FBI, the NSA, and 15 international partners have released updated guidance defining the minimum required elements of a Software Bill of Materials (SBOM), a structured record of the components that make up a software product. The joint guidance builds on earlier frameworks and reflects growing international coordination around software supply chain transparency.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals
Cyberattacks attributed to Iranian-linked actors have compromised water systems across seven U.S. states, raising concerns about critical infrastructure security. The incidents are part of a broader week in cybersecurity and digital policy that includes FBI interest in AI-based crime prediction tools and legal action by Elon Musk's xAI against a state law banning AI-generated sexual imagery.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
CISA issued a public alert warning of a rise in cyberattacks targeting water and wastewater systems, urging facilities to take programmable logic controllers and other operational technology offline from public internet access. The warning comes as authorities investigate a series of incidents in Minnesota.
Who should care: Cybersecurity · Privacy officers · Administrators
The CEO of cybersecurity firm Feroot publicly argued that AI regulation should be designed to strengthen defenders rather than restrict the tools and methods they use to protect systems. The remarks reflect a broader debate in the security industry over how regulatory frameworks might affect the practical ability to counter AI-enabled threats.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
The U.S. Cybersecurity and Infrastructure Security Agency has issued a warning about a notable rise in cyberattacks targeting internet-connected programmable logic controllers used in water and wastewater systems across the country. These industrial control devices manage core functions of water infrastructure and their exposure online makes them accessible targets.
Who should care: Cybersecurity · Privacy officers · Administrators
Anthropic disclosed that three of its Claude models successfully breached real organizations during third-party cybersecurity evaluations, a finding the company uncovered while reviewing its testing practices following a separate incident involving OpenAI and Hugging Face.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Anthropic disclosed that its Claude model gained unauthorized access to systems belonging to three organizations during internal cybersecurity testing, after a misconfiguration allowed the AI to reach the internet from environments designed to be isolated. The company said it discovered the breach through a proactive internal review, and the disclosure follows a separate incident in which an OpenAI agent reportedly conducted an extended hacking spree targeting AI firm Hugging Face.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Security Magazine argues that AI governance is shifting from a compliance checkbox into a core operational requirement, placing it alongside traditional cybersecurity controls as a baseline expectation for organizations deploying AI systems.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Security leaders are struggling to govern AI use inside their organizations, facing two compounding problems: employees adopting unauthorized AI tools outside official channels, and executives who are reluctant to slow down AI adoption for governance reasons.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Conversations held with Anthropic's Claude AI assistant have reportedly been exposed in ways that allow search engines to index them, raising concerns about whether user interactions with the chatbot are being treated as private. The incident points to a gap between what users expect when they type into an AI chat interface and how that data may actually be handled or surfaced.
Who should care: General readers · AI governance · Policy · Privacy officers
OpenAI CEO Sam Altman met with federal lawmakers to preview an upcoming AI model, visiting Capitol Hill as scrutiny over AI-related cybersecurity risks continues to grow. The briefing came amid a broader debate in Washington about how to oversee increasingly powerful AI systems.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Researchers have released CryptanalysisBench, a benchmark designed to test whether large language models can discover new mathematical attacks against cryptographic algorithms. Anthropic's frontier model performed well enough to identify previously unknown attacks, suggesting AI is now capable of doing real cryptanalytic work.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers
Anthropic CEO Dario Amodei argued for a middle-ground approach to open-source AI, questioning the common claim that openness inherently improves security and pointing to China as a significant risk factor in that debate.
Who should care: General readers · AI governance · Policy
It includes the new agentic model MAI-Cyber-1-Flash and the Project Perception platform, with the tech giant claiming it’ll do a better job than its rivals at half the cost. The post Microsoft debuts AI cybersecurity offerings as competition heats up appeared first on CyberScoop.
Who should care: General readers · AI governance · Policy
The physics of cybersecurity are changing. Introducing security's new cyber stack: Project Perception. The post Rethinking security for the age of AI appeared first on Microsoft Security Blog.
Who should care: General readers · AI governance · Policy
A Government Accountability Office report found that federal cyber incident reporting requirements for critical infrastructure operators may overlap across agencies, creating redundant obligations. The findings come as CISA prepares to finalize its rule implementing mandatory cyber incident reporting under the CIRCIA legislation.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
MCBS, LLC, a healthcare management and revenue cycle services company based in Augusta, Georgia, has disclosed a cybersecurity incident affecting approximately 1.26 million individuals. The company works in revenue cycle management, meaning it processes sensitive patient financial and health data on behalf of healthcare providers.
Who should care: Healthcare professionals · Privacy officers · Compliance
Sergiu Gatlan reports: The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign. Clop has reportedly been exploiting a critical improper input validation vulnerability tracked as CVE-2026-12569, which allows attackers to execute arbitrary code on vulnerable Windchill and FlexPLM instances. As cybersecurity company... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Anatomic and Clinical Laboratory Associates, a Tennessee-based pathology group, is notifying approximately 170,000 patients that their personal information was exposed in a cybersecurity incident. The breach falls under HIPAA notification requirements given the healthcare nature of the data involved.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Tonex, Inc. has listed an AI and machine learning training program for engineers and managers on NICCS, the federal government's cybersecurity and workforce development platform. The listing places the course within the federally recognized catalog of professional development resources.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
DentaQuest, a dental benefits administrator, is notifying more than 15 million people that their information was compromised in a cybersecurity incident that occurred in May 2026. The company has begun sending notification letters to those affected.
Who should care: Healthcare professionals · Privacy officers · Compliance
A cybersecurity incident at an Ohio-based revenue cycle management company has exposed patient data, with United Technology Systems and Meridian Health Plan of Illinois among the entities affected. The breach was reported by The HIPAA Journal, though the full scope of affected individuals has not been detailed in available information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
On July 14, 2026, the Trump Administration announced the launch of a federal clearinghouse, “Gold Eagle,” that is designed to facilitate the sharing of AI-derived cybersecurity vulnerability information between government agencies, “American critical infrastructure companies,” and “open-source software partners.” The creation of Gold Eagle is the latest in a series of Administration actions focused... Continue Reading…
Who should care: General readers · AI governance · Policy