Regulation, government programmes and standards.
Zohar Pinhasi, the owner of Florida-based ransomware recovery firm MonsterCloud, has been charged with wire fraud. Federal prosecutors allege that he told clients not to pay ransoms while secretly negotiating with the same attackers and buying decryption keys on their…
Yusaku Fujii, a professor at Gunma University in Japan, has proposed an oversight system for AI that analyses street camera footage, aimed at stopping operators from misusing it. The design, called the Verifiable Record of AI Output (VRAIO), places an…
Rapid7 has published the second part of a series on security in higher education, arguing that universities face a compliance burden unlike most other sectors. Institutions may have to satisfy four federal frameworks at once: FERPA, the GLBA Safeguards Rule,…
Anthropic has consolidated its Cyber Verification Program and Project Glasswing into a single offering with three tiers of access to its most capable models. All tiers include Opus 5.5, Sonnet 5.5, Mythos 5.1 and future models, each with its own…
The US Department of Energy’s Office of Cybersecurity, Energy Security, and Emergency Response (CESER) has announced a $100 million funding opportunity aimed at strengthening the cybersecurity posture of electric cooperative, municipal and small investor-owned utilities. The money is available through…
Ann Barron-DiCamillo, executive vice president and chief information security officer at U.S. Bank, says the CISO role has expanded to cover fraud, resilience, third-party risk and AI governance, and that no single leader can own all of it. She argues…
Unauthorised parties accessed the names, addresses and personal identification numbers of about 8.8 million people in Denmark’s national population register, the country’s digitalization ministry said on 5 October. The access used a private Danish company’s lawful right to look up…
The White House’s latest AI security task force is confronting shortfalls in expertise and partnership, according to early reporting on the project. The Cybersecurity and Infrastructure Security Agency does not appear among the participants in the initiative.
MI5 has issued a formal alert naming the China General Technology Research Institute, known as CGTRI or CAGT, as an organisation with strong ties to China’s Ministry of State Security. The agency says the institute exists mainly to fund academic…
NIST published the initial public draft of SP 800-82 Revision 4, its Guide to Operational Technology Security, on 21 September 2026, with comments open until 30 November. The draft adds zero trust principles to OT architecture but recommends applying them…
