DHS proposes new framework for public-private infrastructure security collaboration
The Trump administration eliminated the previous system in 2025, sparking a backlash from experts and infrastructure operators. Source link
Category: CyberSecurityDive
Critical flaw in SimpleHelp exploited in attacks targeting sensitive credentials
Researchers found two previously undisclosed malware samples used to steal AI assistant tokens and other valuable secrets. Source link
OpenAI voluntarily limits new AI models at government’s request
The company said it was working with the government on a more formal process for reviewing model releases. Source link
Insurance body confirms hackers posted Oracle PeopleSoft breach data
NAIC warned that some ratings agencies have suspended data feeds as a precaution. Source link
AWS unveils agent security, data access tools
The updates reflect Anthropic’s Mythos model and the speed at which vulnerabilities can be surfaced. Source link
FCC requires emergency alert distributors to secure their systems
More than a decade after a high-profile hacking campaign, the commission is moving from recommending basic security protocols to requiring them. Source link
Software, AI companies form alliance to tackle open-source security flaws
The emergence of frontier AI models has increased the speed and capabilities of malicious hackers. Source link
As cyber risk evolves, the insurance industry tightens guardrails
C-suite executives are concerned about resilience, but claims are increasingly tied to strict underwriting standards. Source link
NIST offers security guidance for water utilities using remote-access tools
The technology is one of the water sector’s biggest cybersecurity weaknesses. Source link
Klue investigating supply chain attack that targeted Salesforce integrations
Customer data from several prominent cybersecurity firms was among that of hundreds of potential enterprise victims. Source link
White House’s state infrastructure cybersecurity initiative stalled
The Trump administration says it wants to help states implement innovative defenses. Most states are still waiting for the call to participate. Source link
Ransomware attacks grew in 2025 as traditional data breaches fell
In a new report, the company also charted a massive surge in internet-exposed AI services. Source link