Explore

Rapid Read Rapid Read
U.S. Government Warns of Iranian Hackers Disrupting Water and Energy Providers

U.S. Government Warns of Iranian Hackers Disrupting Water and Energy Providers

The U.S. government has issued a warning about Iranian state-backed hackers targeting industrial control systems at American water and energy providers. This alert follows previous warnings of increased hacking activities by Iranian actors amid ongoing geopolitical tensions. The FBI, NSA, Department of Energy, and CISA have identified that these hackers are manipulating programmable logic controllers on internet-connected networks, leading to outages and disruptions. Initially, the attacks focused on controllers made by Rockwell, but have since expanded to include products from Schneider Electric and Siemens. The advisory highlights that all internet-exposed industrial control systems could be at risk, urging infrastructure owners to take protective measures. The hackers have been able to alter programming logic, disabling critical shutdown processes and alarms, which could lead to unsafe conditions without operator awareness.
Rapid Read Rapid Read
White House Launches Gold Eagle to Enhance Vulnerability Management with AI

White House Launches Gold Eagle to Enhance Vulnerability Management with AI

The White House has introduced Gold Eagle, a federal initiative utilizing advanced AI to identify and manage software vulnerabilities across government and critical infrastructure. This program, launched on July 14, 2026, involves collaboration between the Treasury, DHS, DoD, and other partners. Gold Eagle employs Anthropic’s Mythos AI, which has previously identified critical flaws in U.S. government software. The initiative marks a shift from traditional human-led vulnerability patching to AI-driven processes, acknowledging the increasing speed and volume of cyber threats. The Mythos AI model has uncovered over 10,000 high-severity vulnerabilities, demonstrating capabilities beyond previous tools. This development comes as the industry faces challenges with rapid exploit timelines and a high volume of new vulnerabilities.
Rapid Read Rapid Read
GAO Recommends FAA and TSA Strengthen Aviation Cybersecurity Measures

GAO Recommends FAA and TSA Strengthen Aviation Cybersecurity Measures

The Government Accountability Office (GAO) has identified significant gaps in the aviation cybersecurity efforts of the Federal Aviation Administration (FAA) and the Transportation Security Administration (TSA). The GAO report highlights that the TSA lacks clearly defined cybersecurity responsibilities and relies on an outdated 2018 cybersecurity roadmap. Additionally, the FAA has not included all cybersecurity activities and costs in its budget data submitted to the Office of Management and Budget. The GAO has issued five recommendations to enhance oversight and risk management, including updating TSA's cybersecurity roadmap and strengthening FAA's budget reporting process. Both the Department of Homeland Security and the Department of Transportation have agreed with the recommendations.
Rapid Read Rapid Read
GAO Report Highlights Duplicative Federal Cybersecurity Regulations Impacting Agencies

GAO Report Highlights Duplicative Federal Cybersecurity Regulations Impacting Agencies

A recent report by the Government Accountability Office (GAO) has revealed that 70% of federal cybersecurity regulations requiring written reports are duplicated across various agencies. The study, requested by key lawmakers, examined 117 rules at 37 agencies and found that 80 of these rules had overlapping reporting requirements. This issue has persisted despite efforts to harmonize these regulations, which began under the Biden administration and continued into the second Trump administration. The GAO's findings indicate that sectors such as financial services may be subject to multiple cybersecurity reporting rules, including those from the Cybersecurity and Infrastructure Security Agency (CISA) and the pending Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA). Efforts to streamline these regulations have faced delays, particularly after an executive order from President Trump paused some harmonization initiatives.
Rapid Read Rapid Read
GAO Report Highlights Duplication in Federal Cybersecurity Reporting Rules, Calls for Harmonization

GAO Report Highlights Duplication in Federal Cybersecurity Reporting Rules, Calls for Harmonization

The Government Accountability Office (GAO) has released a report revealing that 70% of federal cybersecurity regulations requiring written reports are duplicated across various agencies. The study, requested by key lawmakers, examined 117 rules across 37 agencies and found significant overlap in reporting requirements. This duplication has been a longstanding issue, with efforts to harmonize these regulations gaining momentum under the Biden administration and continuing into the second Trump administration. The GAO's findings underscore the challenges faced by the private sector, particularly critical infrastructure sectors, which must navigate multiple overlapping regulations. The Cybersecurity and Infrastructure Security Agency (CISA) is working on regulations under the 2022 Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA), which adds another layer of complexity. Despite some progress by the Office of the National Cyber Director and the Department of Homeland Security, efforts to stream...
Rapid Read Rapid Read
Russian Hackers Exploit Zero-Click Attack to Target Western Organizations

Russian Hackers Exploit Zero-Click Attack to Target Western Organizations

Russian state-supported hackers have launched a new cyber espionage campaign targeting Western organizations using a Zero-Click attack method. This technique, which does not require user interaction with phishing emails, has been used to compromise networks and gain persistent access. The campaign, identified as Laundry Bear, exploits a zero-day vulnerability in the Zimbra Collaboration Suite (ZCS) software, affecting sectors such as defense, government, education, energy, law enforcement, media, NGOs, and technology. The joint advisory was issued by the UK National Cyber Security Centre, US agencies including the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency, and the FBI, along with other Five Eyes nations and European agencies. The attack leverages a vulnerability disclosed in November 2025, using a zero-click exploit called 'beehive' to steal emails and sensitive data. Organizations using ZCS are urged to patch vulnerabilities and enhance network monitoring.
Rapid Read Rapid Read
Fourth SharePoint Vulnerability Exploited Amid Recent Cyber Attacks

Fourth SharePoint Vulnerability Exploited Amid Recent Cyber Attacks

A new SharePoint vulnerability, CVE-2026-50522, has been exploited in the wild, marking the fourth such incident in the past month. This critical remote code execution vulnerability, which stems from the deserialization of untrusted data, was patched by Microsoft on July 14. Despite the patch, threat actors have been actively exploiting the flaw, with reports indicating that attackers are stealing machine keys to maintain long-term access to compromised systems. Security firm WatchTowr confirmed the active exploitation following the release of proof-of-concept exploit code. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has previously warned organizations about attacks targeting SharePoint instances, highlighting the ongoing threat posed by these vulnerabilities.
Trendline Trendline
SEIA Releases Report on Cybersecurity and Domestic Manufacturing in Solar Industry

SEIA Releases Report on Cybersecurity and Domestic Manufacturing in Solar Industry

SEIA Releases Report on Cybersecurity and Domestic Manufacturing in Solar Industry
Rapid Read Rapid Read
SonicWall Zero-Days Exploited to Deliver Custom Malware Before Patch Release

SonicWall Zero-Days Exploited to Deliver Custom Malware Before Patch Release

Two zero-day vulnerabilities in SonicWall appliances were exploited by threat actors for several weeks before patches were released, according to cybersecurity firm Volexity. The vulnerabilities, identified as CVE-2026-15409 and CVE-2026-15410, affected SMA1000 secure remote access appliances. SonicWall issued a public advisory on July 14, alerting customers to the exploitation of these flaws. Volexity, which assisted in the investigation, attributed the attacks to a threat actor it tracks as UTA0533. The exploitation reportedly began as early as June 22. The attackers deployed custom malware named KnuckleBall, which injected additional tools into legitimate processes. Despite the significant capability demonstrated by UTA0533 in compromising the appliances, the group was reportedly less successful in moving laterally or accessing other systems. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added these vulnerabilities to its Known Exploited Vulnerabilities catalog.
Rapid Read Rapid Read
AI-Powered Cyberattacks Challenge U.S. Cybersecurity Infrastructure

AI-Powered Cyberattacks Challenge U.S. Cybersecurity Infrastructure

In 2026, the threat of AI-powered cyberattacks has become a significant concern for U.S. cybersecurity infrastructure. New AI models have emerged with capabilities rivaling top human hackers, posing a challenge to existing defenses. The federal government's attempts to control access to these models, such as export controls on Anthropic's Mythos and Fable models, have proven to be temporary solutions. As foreign companies develop similar models, the difficulty in controlling AI capabilities increases. The federal government has reduced resources for key agencies like CISA, creating a gap that AI companies have attempted to fill. Initiatives like Anthropic's Project Glasswing and OpenAI's Patch the Planet aim to bolster critical infrastructure, but the responsibility for national cybersecurity remains a shared one.
Rapid Read Rapid Read
House Intelligence Bill Proposes Enhancements in Cybersecurity and AI Threat Management

House Intelligence Bill Proposes Enhancements in Cybersecurity and AI Threat Management

The House Intelligence Committee has approved a fiscal 2027 intelligence authorization bill that includes provisions for enhancing cybersecurity and AI threat management. The bill proposes a pilot program for cyber threat intelligence sharing with state and local governments and mandates an assessment of current information-sharing practices. It also emphasizes the use of AI in intelligence and cyber missions, aiming to expand the role of the Artificial Intelligence Security Center at the National Security Agency. The bill includes measures to improve election security and address foreign cyber threats to critical infrastructure.
Rapid Read Rapid Read
House Intelligence Committee Advances Bill to Enhance Cybersecurity and Election Security Measures

House Intelligence Committee Advances Bill to Enhance Cybersecurity and Election Security Measures

The House Intelligence Committee has approved the fiscal 2027 intelligence authorization legislation, which includes significant provisions aimed at enhancing cybersecurity and election security. The bill proposes a cyberthreat intelligence sharing pilot program for state and local governments, allowing them to receive monthly briefings on cyber threats from the Office of the Director of National Intelligence (ODNI), Department of Homeland Security, and FBI. This initiative is part of a broader effort to improve information sharing and address frustrations over previous federal cutbacks in cybersecurity support. Additionally, the bill mandates the ODNI to develop a strategy for information sharing with state and local entities and requires the Government Accountability Office to assess current information-sharing practices. The legislation also includes amendments focused on election security, such as requiring unclassified assessments of foreign intelligence threats to upcoming elections and protecting an...