Latest

Government

CISA: DHS Funding Lapse Would Sideline Federal Cyber Staff

Chris Riotta  •  February 11, 2026

More than half of the U.S. cyber defense agency's workforce would be furloughed under a DHS funding lapse, the agency's acting chief warned Wednesday, pausing incident reporting rulemaking, security assessments and proactive cyber programs while significantly limiting operations.

Application Security

How CIOs Are Navigating the AI-Driven Software Market Crash

Jennifer Lawinski , Sandhya Michu  •  February 11, 2026

While AI systems such as Claude lower the marginal cost of writing code and automating discrete tasks, especially when it comes to early-stage work including prototyping and front-end design, the idea that AI will lay waste to the industry is overblown, analysts say.

Critical Infrastructure Security

Singapore Mounts Largest-Ever Coordinated Cyber Defense

Chris Riotta  •  February 11, 2026

Singapore conducted a yearlong, multi-agency cyber defense operation to expel UNC3886 from all four major telecom providers after the advanced threat actor accessed segments of critical communications infrastructure and extracted limited technical data without disrupting services.

Fraud Management & Cybercrime

A New Data Theft Gang for the Health Sector to Lose Sleep Over

Marianne Kolbasuk McGee  •  February 11, 2026

A new cybercriminal gang, Insomnia, appears to have its eyes wide open for potential healthcare-related targets. Since surfacing on the darkweb in recent weeks, the apparent data theft group has chalked up 18 alleged victims on its data leak site, with more than half having ties to healthcare.

Artificial Intelligence & Machine Learning

AI-Generated Malware Exploits React2Shell for Tiny Profit

Rashmi Ramesh  •  February 11, 2026

Security researchers detected artificial intelligence-generated malware exploiting the React2Shell vulnerability, allowing attackers with no coding expertise to build functional exploits. The attacker may have circumvented an AI model's safeguards by framing the malicious coding request as homework.

Cyberwarfare / Nation-State Attacks

Should CISOs Plan for Government as an Adversary?

Maryam Shoraka  •  February 11, 2026

CISOs for decades viewed governments as partners. That assumption is weakening. Today, state control over infrastructure needs be part of threat modeling and business continuity planning for global security leaders - and it's time for CISOs to reassess dependencies and trust boundaries.

Endpoint Security

Microsoft Beefs Up Runtime Security

Greg Sirico  •  February 10, 2026

Microsoft is touting changes to Windows meant to ensure better runtime security and user prompts when apps access sensitive desktop resources such as files, a camera or microphone. Other controls include blocking legacy authentication protocols to ensure use of multifactor authentication.

Cyberwarfare / Nation-State Attacks

Google Warns of 'Relentless' Cyber Siege on Defense Industry

Chris Riotta  •  February 10, 2026

A new report from Google Threat Intelligence Group warns that state-backed hackers are escalating attacks on the defense industrial base, shifting from classic espionage to supply-chain compromise, workforce infiltration and battlefield-adjacent cyber operations.

3rd Party Risk Management

Billing Services Firm Notifying Medical Lab Patients of Hack

Marianne Kolbasuk McGee  •  February 10, 2026

A revenue cycle management software firm is notifying an undisclosed number of patients of several medical diagnostic labs that their sensitive information, including diagnoses and treatments, was stolen in a November hack. Ransomware gang Everest Group claims it has leaked all the data.

Fraud Management & Cybercrime

Fake Out: 0APT Data-Leak Ransomware Group Branded a Scam

Mathew J. Schwartz  •  February 10, 2026

Newcomer ransomware group 0APT is being branded a "likely scam operation," not least after a list of over 200 supposed victims turned out to be bogus, if not entirely AI-generated - never mind a 1 bitcoin joining fee for would-be affiliates and outdated crypto-locking malware.

Artificial Intelligence & Machine Learning

Writing Ransomware Using AI to Get Rich? Don't Bet the Farm

Mathew J. Schwartz  •  February 10, 2026

Attackers that want to use artificial intelligence tools to build ransomware or help run their cyber operations risk getting much less than they bargained for, said security expert Candid Wuest, in part because they'll still rely on known tactics that can be readily spotted and blocked.

Cyberwarfare / Nation-State Attacks

Norway Says Salt Typhoon Hackers Hit Vulnerable Systems

Chris Riotta  •  February 9, 2026

Norway's security service confirmed it was targeted by the China-linked Salt Typhoon campaign, marking one of Europe’s clearest public acknowledgements that the cyberespionage operation extended beyond U.S. telecom and federal networks into allied infrastructure.