Cybersecurity
The monsters of Cybersecurity Awareness Month are getting stronger
Familiar threats like phishing and ransomware have not gone away, but NIST’s 2026 Cybersecurity Awareness Month activities are increasingly confronting newer risks involving AI agents, secure software development and digital identity.
FBI removes Accenture contractor after missed security patch led to breach
The bureau’s cyber chief blamed a contractor’s failure to apply an available fix for an intrusion that may have exposed sensitive employee information.
Pentagon personnel breach — undetected for months — renews cyber standard scrutiny
Unauthorized users accessed sensitive records for roughly nine months before discovery, exposing another government personnel data fiasco as the FBI confronts its own breach incident.
China-linked hackers posed as former US officials, Anthropic employee to target AI experts
Proofpoint identified phishing campaigns that borrowed prominent figures’ identities to approach U.S. policy researchers before attempting to steal access to their cloud accounts.
Renewed CISA support comes too late for midterm prep, some election officials say
Arizona still plans to accept federal help on Election Day, while officials warn that staffing cuts have weakened relationships and left smaller jurisdictions with fewer resources.
FBI warns ShinyHunters members to come forward after alleged leader’s arrest
“You know how to find us, and we know how to find you,” said Brett Leatherman, assistant director of the FBI’s Cyber Division. “I suggest you reach out first while the choice is still yours.”
ShinyHunters says it won’t publish FBI data
The group’s new statement — which called the incident a “marketing campaign" — follows reports that the stolen material includes medical records and details about employees working in sensitive intelligence roles.
Updated
OpenAI agents accessed Census, SEC data and tried to hack Education website
The disclosure follows warnings from former officials in August that government systems could face unintended intrusions by autonomous AI agents.
Senators propose voluntary telecom security framework after Salt Typhoon hacks
The bipartisan bill would establish cybersecurity best practices and independent certification, following the FCC’s rollback of safeguards adopted in response to the Chinese hacking campaign.
CISA pledges election security support after cuts weakened ties with states
A new plan emphasizes threat sharing and coordination ahead of the midterms, but does not explain how those commitments fit with proposed cuts to dedicated election security funding.
AI scanning tools found security gaps at rail operator and hospitals, Wiz says
Researchers discovered access to rail administration systems, a hospital alert channel and sensitive records in a new effort aimed at organizations with limited cyber resources.
Stolen FBI data reveals employees’ roles in intelligence and surveillance
Exposed analysts work on areas including China, Russia and electronic surveillance. ShinyHunters claimed responsibility for the breach this week. The FBI said it’s investigating.
Updated
ShinyHunters claims FBI data theft, demands bureau retract cyber warning
The hacking group says it obtained sensitive employee and applicant records. The full scope of the claimed breach remains unclear.
AI agents are getting better at cybersecurity. That cuts both ways.
NIST is testing agentic AI to help enrich the National Vulnerability Database, even as increasingly capable models demonstrate why cyber autonomy needs careful containment.
CIA feared terrorists could exploit Y2K glitches, declassified briefs show
Records released for the 25th anniversary of 9/11 also describe intelligence assessments of extremist websites helping recruit fighters and spread chemical and biological weapons information.
25 years after 9/11, spy agencies face old lessons and new threats
Former intelligence officials describe a nation better equipped to disrupt terrorist plots, but still wrestling with the costs of its response and how to prevent the next crisis under escalating technology threats.
White House plans to take water cyber pilot into other sectors
Sean Cairncross also outlined plans for a cyber academy that would combine venture capital and other private sector initiatives with a service component.
Lawmakers ask Commerce to sanction Indian firms involved in mercenary hacking
The “hack-for-hire” entities have systematically targeted newsrooms covering corporate fraud, legal teams in high-stakes litigation and NGOs.
New FBI cyber strategy seeks faster action against hackers, larger industry role
The bureau wants more frequent disruption operations and quicker warnings to victims as the Justice Department works through rules for expanded private sector participation in hacking cybercrime groups.
CIA cyber intelligence helped US forces capture Maduro, deputy director says
Michael Ellis credited the agency’s cyber intelligence officers with helping U.S. troops locate and apprehend the Venezuelan leader within minutes of landing.
Senator asks NSA to update Americans about VPN spying risks
A congressional analysis found foreign spies could trace users by comparing encrypted traffic entering and leaving a VPN server, according to the lawmaker’s office.
