Dive Brief - U.S. companies are merging cyber risk issues into their overall enterprise risk strategy, at a time when AI adoption and business resilience are leading to significant shifts in business priorities, according to a report released Tuesday by Information Services Group, a technology research and advisory firm. - Cybersecurity is increasingly seen as a business-critical concern, as companies accelerate their adoption of agentic AI and transform much of their technology and data infrastructure to hybrid or multicloud environments. - Enterprise leaders are closely integrating cyber spending decisions with overall IT strategy. In addition, C-suite and board members are taking greater accountability for business continuity, financial exposure and regulatory compliance. Dive Insight The report reflects significant changes among large enterprises in terms of how expanded use of AI cloud adoption has changed the conversation around overall business risk. AI adoption is forcing companies to rethink their corporate governance, internal controls and overall preparedness for a major cyberattack or IT outage. “Cybersecurity has become a core business consideration rather than a standalone technology function,” Jason Stading, director, cybersecurity at ISG, told Cybersecurity Dive. “Organizations are embedding cyber risk into AI adoption, digital transformation, and broader technology investment decisions; most enterprises recognize that security enables innovation while managing enterprise risk.” Chief information security officers and chief information officers are playing a more strategic role in these organizations, according to Stading. They are partnering with corporate boards and executive leadership to help shape business decisions and make sure cybersecurity is integrated into overall business strategy A June report by S&P warned that companies lacking strong internal security governance could put their credit ratings at risk. Authorities in the U.K., meanwhile, have pressed corporate leaders to incorporate cyber risk into their overall business strategies and sounded the alarm on the increasing number of
Jul 8, 2026 · via cybersecuritydive.com
Teragonia Appoints Cybersecurity Leader Dhruv Chandra as Executive Vice President of Technology & Operations Industry veteran brings three decades of cybersecurity and enterprise technology experience CHICAGO, July 8, 2026 (Newswire.com) - Teragonia, the AI operating system for private equity, today announced the appointment of Dhruv Chandra as Executive Vice President of AIOS Technology & Operations. In this role, Chandra will be responsible for Teragonia's cybersecurity posture, platform performance, program portfolio management and technology partnerships. As organizations rely on AI to inform business-critical decisions and increasingly complex cybersecurity, governance and data protection have become essential to maintaining customer trust and enabling innovation. Chandra's deep experience deploying strategies that protect complex enterprise environments in highly regulated industries like financial services and healthcare will further strengthen Teragonia's technology, while supporting the company's rapid product innovation and global growth. "Dhruv's background in infrastructure, cybersecurity, digital transformation and enterprise technology makes him a critical addition to the Teragonia leadership team," said Thomas Thayyil Thomas, CEO of Teragonia. "His experience helping some of the world's largest financial institutions modernize their data security strategies will be instrumental as we continue to expand our platform's capabilities for clients across key industry verticals." Chandra joins Teragonia after serving as an advisor to the company's leadership team. Most recently, he served as Managing Director at Intact, where he oversaw automated financial and technology control testing across five continents. Before that, he was Chief Technology & Privacy Officer at CloudMD. He also served as Principal Architect for Security in Financial Services at Google, advising major financial institutions on Zero Trust architecture and cloud modernization, and held technology leadership roles at Royal Bank of Canada, Scotiabank, and CIBC. "I'm excited to officially join Teragonia at a time when cybersecurity has become critical to value creation for private equity-backed businesses," said Chandra. "As
Jul 8, 2026 · via newswire.com
The European Commission has presented a plan to address the risks and harness the opportunities of advanced artificial intelligence (AI) in cybersecurity. While the AI can improve security, it can also be misused to identify vulnerabilities, automate attacks, and significantly increase the scale and speed of cyber incidents. The new plan will bring together EU countries, industry, and EU-level organisations to strengthen the cybersecurity of our digital landscape against the vulnerabilities posed by advanced AI. Key actions - Evaluating AI models: The AI Act requires advanced AI models to be evaluated and their risks to be assessed before they are placed on the EU market. The Commission will help establish an EU evaluation capacity to strengthen third-party assessment of AI capabilities and risks globally, supporting the regulatory function of the AI Office. - Accessing advanced AI models: Europe needs clear and transparent conditions for accessing the most advanced AI systems. The Commission will work with the EU Agency for Cybersecurity to define a European blueprint for structured access to advanced AI capabilities for cybersecurity, supporting public and private organisations in accessing advanced AI models. - Testing AI for cybersecurity: The EU Agency for Cybersecurity and the Commission’s Joint Research Centre will create a secure platform to test AI for cybersecurity, including using simulated environments. This will bring know-how on the safe use of AI to operators in critical sectors. - Reinforcing the EU's cybersecurity and fixing vulnerabilities: The EU must protect its critical infrastructure. In line with the EU's cybersecurity rules, organisations should intensify cyber hygiene practices, risk management measures, and security by design principles. They should also start using available AI capabilities to fix vulnerabilities faster, as well as prevent and respond to cyberattacks. EU Agency for Cybersecurity will assist them in this transition, including guidance, recommendations, and best
Jul 8, 2026 · via commission.europa.eu
The initiative, first teased in April, has garnered nationwide interest — DoD said it received more than 70,000 inquiries from prospective candidates. Applications for the Defense Department’s long-anticipated cyber apprenticeship program are now open, providing additional details about the 12-month paid pilot designed to train the department’s next generation of cyber professionals. The department’s chief information officer’s office announced Monday that applications will be accepted through July 17 on USAJobs.gov. The initiative, first teased in April, has garnered nationwide interest — the Defense Department said it received more than 70,000 inquiries from prospective candidates. “This overwhelming surge highlights a massive, untapped demand for alternative, skills-based training pathways into national security roles,” the Defense Department said in a press release. The initial announcement of the program captured the public’s imagination in part due to relatively low barriers to entry. Unlike many government cyber roles, the program does not require prior professional cyber experience. The only qualifications are that applicants must be at least 18 years old, U.S. citizens and able to obtain a security clearance. Join us July 21 – 23 for Federal News Network's Space & Satellite Exchange where government and industry leaders will discuss advancing connectivity, resilience and mission reach. Register today! Plus, the CIO office said these positions would be entry-level — DoD’s recent pay tables show that a recent college graduate just starting out in the Washington, D.C. area as a GG-7 Step 1 would make approximately $57,735 a year. The office also said that while participants would be able to complete technical training modules online from any location approved by the employing agency, on-the-job training would be conducted in person and vary by employing agency. But according to the USAJOBS posting, the salary is only $22,584 a year, and most vacancies are based in the Washington,
Jul 8, 2026 · via federalnewsnetwork.com
Trustifi Appoints New CEO to Lead Cybersecurity and AI Advances Tuesday, 07 July 2026 10:00 AM Company Update Technology industry veteran Jeff Spridgeon to lead the continued transformation of the renowned channel email security organization LAS VEGAS, NV / ACCESS Newswire / July 7, 2026 / Editorial Summary - Trustifi has appointed Jeff Spridgeon as CEO to lead the company's next phase of growth and strengthen its indirect go-to-market strategy. - This hire solidifies Trustifi's commitment to innovation and partner success, emphasizing faster responses to evolving cyber threats-especially for SMB customers-and expanded support for channel partners. - The company's zero-trust email protection platform and AI-driven security awareness training capabilities were designed to help channel partners protect themselves and their clients from modern threat Trustifi, a provider of AI-driven, next-generation email cybersecurity solutions, has appointed experienced channel and technology industry leader Jeff Spridgeon to the role of Chief Executive Officer. An accomplished sales and partnership development leader, Spridgeon has built, grown and successfully directed a number of indirect teams and organizations over his career. That channel experience and expertise will be invaluable as Trustifi continues to transform its cybersecurity and go-to-market strategy. "As cybercriminals adopt new tactics and automation to escalate attacks on businesses, especially the highly vulnerable SMB customers, Trustifi has to innovate and respond even faster to help partners protect their IT ecosystems," says company board member Jason Hable, a co-founder and partner at Camber Partners. "Jeff brings the insight and leadership skills required to carry out that mission, including a strong focus on the technological, support and business needs of our partners and robust growth of our AI-powered cybersecurity portfolio." Trustifi delivers an innovative and powerful email security solution through its network of channel partners and recently launched a new AI-driven SAT module, which directly integrates into the
Jul 8, 2026 · via accessnewswire.com
Member-only story Notes on Cybersecurity’s Machine-Speed Future What a day inside the frontier of AI-driven security taught me about the collapse of the patch window, the rise of the remediation economy, and why your evals are about to matter more than your tools. tl;dr — There is a strategic shift in cybersecurity where AI-accelerated vulnerability discovery is outstripping the human ability to repair systems. Anthropic positions itself as an intelligence hyperscaler and the advent of frontier AI models has fundamentally altered the cybersecurity landscape by collapsing the window between vulnerability discovery and exploitation to near zero, shifting the industry’s primary bottleneck from finding flaws to remediating them at machine speed. This shift requires a move away from rigid, manual playbooks toward autonomous, goal-oriented agentic defense systems that can continuously triage alerts and conduct investigations. However, the rapid proliferation of these non-human actors introduces novel risks such as “poisoned memory” and prompt injection, necessitating that organizations treat AI agents like human employees by enforcing strict cryptographic identities, blast-radius limits, kill switches, and robust verifier networks. Ultimately, to survive this new era of abundant AI-driven threats, defenders must abandon static public benchmarks in favor of custom, operational evaluations and transition to continuous, real-time mitigation strategies.
Jul 7, 2026 · via medium.com
New ClickFix scam tricks users into installing malware, cybersecurity expert warns LITTLE ROCK, Ark. (KATV) — A resurfacing scam known as “ClickFix” is tricking people into installing malware on their own devices by posing as a “prove you’re human” verification step, according to cybersecurity expert Chris Wright of Sullivan Wright Technologies. Wright said the scam has been around for a while but has “reared its head again with a new theme,” using prompts that look like familiar human-verification tests. The key difference, he said, is that ClickFix instructs users to copy and paste code onto their own computer and run it, which can bypass typical security protections. “It’s asking you to actually copy code into your own computer, so it’s kind of bypassing all of your protective mechanisms and saying go ahead and paste this sight unseen code and run it for me,” Wright said. Wright said that once a victim runs the code, it can give an attacker a foothold on the device. That access can be used to steal sensitive information such as “passwords and credentials,” he said, or to install a remote access tool that allows the attacker to return repeatedly. He said cybercriminals are increasingly targeting everyday people rather than only large institutions. “There’s so many of these folks who, they’re, you know, they don’t need a whole lot, so they’re going to come after the little folks like us,” Wright said. “If they can get a little bit of money, if they can hit your small bank account, or you know, get something out of your email, then that’s good enough for them.” To protect against ClickFix-style attacks, Wright said people should be wary of any “prove you’re human” prompt that instructs them to open system tools and paste in commands. “It’s asking you to
Jul 7, 2026 · via katv.com
âWeâre giving local communities in Alabama a fighting chanceâ: McCrary program provides cyber defense for local governments across the state Published: Jul 7, 2026 3:30 PM By Joe McAdory The average cost of a data breach in 2025 for U.S. organizations was $10.22 million, according to IBM. Even more, 34 percent of local agencies — city halls, fire stations, hospitals, schools — were compromised by ransomware. To combat this threat, the average information technology division in Alabama employs 2.2 people. That’s it. 2.2. A successful cyberattack can shut down the systems a community depends on. Water systems go offline. Utility billing stops. Communications are disrupted. Public safety is put at risk. It’s what cybersecurity experts consider “a city’s worst day.” “When a cyberattack strikes Anytown, USA, what does that mayor do?” asked Nick Sellers, McCrary Institute for Cyber and Critical Infrastructure Security chief operating officer. “What do county commissioners do? What does that local hospital administrator do? They’ve got to get services going, and if they don’t have a plan or the resources, they’re in trouble.” Cybersecurity professionals and students at Auburn University’s Samuel Ginn College of Engineering have a solution. The Alabama Cybersecurity Intelligence Center, a joint initiative of the Alabama Office of Information Technology (AOIT) and the McCrary Institute, offers basic cyber hygiene, multi factor authentication, penetration testing, incident response planning and round-the-clock monitoring of every device on a municipal network. The fundamental elements that can be quickly deployed are known as McCrary Secure and are made possible through the State and Local Cybersecurity Grant Program (SLCGP), a $19 million, five‑year federal investment under the Infrastructure Investment and Jobs Act. “We’re giving local communities in Alabama a fighting chance,” Sellers said. “What we’re offering is real, no‑cost protection from experienced cybersecurity professionals and industry partners. It’s a no‑risk
Jul 7, 2026 · via eng.auburn.edu
âWeâre giving local communities in Alabama a fighting chanceâ: McCrary program provides cyber defense for local governments across the state Published: Jul 7, 2026 3:30 PM By Joe McAdory The average cost of a data breach in 2025 for U.S. organizations was $10.22 million, according to IBM. Even more, 34 percent of local agencies — city halls, fire stations, hospitals, schools — were compromised by ransomware. To combat this threat, the average information technology division in Alabama employs 2.2 people. That’s it. 2.2. A successful cyberattack can shut down the systems a community depends on. Water systems go offline. Utility billing stops. Communications are disrupted. Public safety is put at risk. It’s what cybersecurity experts consider “a city’s worst day.” “When a cyberattack strikes Anytown, USA, what does that mayor do?” asked Nick Sellers, McCrary Institute for Cyber and Critical Infrastructure Security chief operating officer. “What do county commissioners do? What does that local hospital administrator do? They’ve got to get services going, and if they don’t have a plan or the resources, they’re in trouble.” Cybersecurity professionals and students at Auburn University’s Samuel Ginn College of Engineering have a solution. The Alabama Cybersecurity Intelligence Center, a joint initiative of the Alabama Office of Information Technology (AOIT) and the McCrary Institute, offers basic cyber hygiene, multi factor authentication, penetration testing, incident response planning and round-the-clock monitoring of every device on a municipal network. The fundamental elements that can be quickly deployed are known as McCrary Secure and are made possible through the State and Local Cybersecurity Grant Program (SLCGP), a $19 million, five‑year federal investment under the Infrastructure Investment and Jobs Act. “We’re giving local communities in Alabama a fighting chance,” Sellers said. “What we’re offering is real, no‑cost protection from experienced cybersecurity professionals and industry partners. It’s a no‑risk
Jul 7, 2026 · via eng.auburn.edu
Federal government organizations must double down efforts to combat ‘living off the land’ attacks Commentary Read more
Jul 7, 2026 · via federalnewsnetwork.com
By now, you've probably sick of reading about Taylor Swift and Travis Kelce's New York City nuptials. Apologies if you came to the Huntress blog to escape it all. But even if you're allergic to celebrity gossip, you have to admit that the security apparatus surrounding America's Royal Wedding was impressive. And hey, it worked. As of this writing, no one's even seen the dress yet. As Huntress' newly hired Swiftie in Residence, I've compiled some Tay-keaways for cybersecurity professionals on how to protect your crown jewels from paparazzi threat actors. 1. Make your environment a fortress Madison Square Garden was already equipped with its own world-class set up of metal detectors, badges, facial recognition technology, security cameras, and door alarms. Add to that the couple's private security team, the NYPD, and even the FBI and National Guard, and you've got an impenetrable citadel, what Taylor might call "unbreakable heaven." Defender Tay-keaway: Like the meaning behind Taylor's lyrics, the strongest security postures are multi-layered. Weaving human analysis with SIEM and cutting-edge detection and response technology is the best way to achieve defense in depth. Key lyric: Baby, I know places we won't be found, and They'll be chasing their tails trying to track us down 2. Trust no one There's no doubt that Taylor and Travis's employees, vendors, and even guests were required to sign strict non-disclosure agreements ahead of the big day. A few MSG employees were reportedly escorted off the premises during the event for violating the strict no-phones policy. In other words, the wedding was not BYOD. Defender Tay-keaway: Authenticate early and often. Combining multi-factor authentication and single-sign on secures user accounts while avoiding login fatigue. Key lyric: I don't trust nobody and nobody trusts me 3. Throw off the scent Known to strategically leak false stories
Jul 7, 2026 · via huntress.com
Rare Bellevue cybersecurity and defense tech campus poised for takeoff as anchor tenant secured ‘REACH’ facility funded partially by a $50M in state funds The planned “REACH” facility, represented here in the front row to the left, reached a milestone when an anchor tenant signed a letter of intent agreement with the Prairie Hill Farm Area Development Authority, a nonprofit that includes City of Bellevue officials and will own and manage the broader campus northeast of Highways 75 and 34 in the state’s third most populous city just south of Omaha. It is to house research and development of defense and cybersecurity technologies that will boost the missions at the Bellevue-based U.S. Strategic Command (StratCom). The REACH building is still under design. (Courtesy of the City of Bellevue and Prairie Hill Farm Area Development Authority) BELLEVUE — Now that its main tenant has been “nailed down” and an agreement signed, a campus focusing on national defense technology in this military-heavy Nebraska town should start to take shape. That’s the word from City of Bellevue officials working with anchor tenant Nebraska Defense Research Corp. on the long-planned Research, Engineering, Architecture Collaboration Hub, or “REACH” facility. The REACH complex — envisioned as a secure space occupied by researchers, startups, private industry and defense contractors — is to receive $50 million from the state and when fully built, total private and public investment could be $300 million, said Bellevue economic and community development director Harrison Johnson. It is to be the centerpiece of a broader neighborhood dubbed Prairie Hill Farm collaboration campus that, as planned, could span 45 acres northeast of Highways 75 and 34, not far from Offutt Air Force Base and the U.S. Strategic Command (StratCom). Prairie Hill over time could surpass $600 million in private and public investment, partners have
Jul 7, 2026 · via nebraskaexaminer.com
The U.S. Department of Justice’s (DOJ) recent settlement with Alabama defense contractor LOGZONE Inc. (LOGZONE) is a notable reminder that, in the federal contracting context, cybersecurity deficiencies are not merely technical concerns — they can create False Claims Act (FCA) exposure, particularly where a contractor misstates its compliance status to the government. Under the settlement, LOGZONE agreed to pay $507,144 to resolve allegations that it submitted claims for payment under two Department of the Navy contracts while knowing that it failed to comply with those contracts’ cybersecurity requirements. This resolution shows the DOJ’s continued willingness to treat alleged noncompliance with contractual cybersecurity requirements as a fraud issue even in the absence of any data breach or other security incident. The press release reflects a theory that turns not only on the existence of unimplemented security controls, but also on the alleged submission of compliance-related information that did not accurately reflect the company’s actual cybersecurity posture. That combination — known deficiencies coupled with inaccurate compliance representations — presents an especially acute area of FCA risk for government contractors handling sensitive defense information. The Settlement The two Navy contracts at issue incorporated Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012, which requires contractors handling covered defense information to provide adequate security for covered contractor information systems, including by implementing the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 security requirements. The applicable framework also required LOGZONE to report a summary-level score from a current NIST SP 800-171 self-assessment in the Supplier Performance Risk System (SPRS). The DOJ alleged that, from May 2021 to March 2025, LOGZONE failed to implement certain NIST SP 800-171 controls that, if left unaddressed, could permit system exploitation or exfiltration of sensitive defense information. The government further alleged that LOGZONE submitted a score of 110 in
Jul 7, 2026 · via natlawreview.com
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting Israeli organizations. The activity, which has primarily singled out IT providers and government sectors, has been attributed to a threat cluster tracked by Check Point Research under the moniker Cavern Manticore, which it said shares some level of tactical overlaps with MuddyWater and Lyceum, the latter of which is assessed to be a subgroup within OilRig. "The framework reflects a mature and adaptable toolset built around a shared .NET foundation, while using multiple compilation formats across different components, including .NET Framework, .NET Mixed-Mode C++/CLI, and .NET Native AOT," the cybersecurity company said. "The compilation format itself becomes the anti-analysis layer that forces reverse engineers into multiple toolsets and metadata-reconstruction workflows." The components of the C2 framework are used as Cavern Agent and Cavern modules, demonstrating a clear division of responsibilities between core communication capabilities and mission-specific post-exploitation functionality. This architecture has inherent advantages as it allows the operators to tailor deployments based on the victim profile, reduce forensic visibility, and ensure persistent access through bespoke modules for reconnaissance, data theft, tunneling, and lateral movement. The attack chain documented by Check Point Research commences with SysAid's software update feature, which is leveraged by the adversary to initiate a DLL side-loading chain that leads to the execution of a trojanized DLL ("uxtheme.dll") containing the Cavern Agent. The agent, for its part, loads a standalone communication DLL module ("n-HTCommp.dll") to contact the C2 server ("hospitalinstallation[.]com") and fetch additional post-exploitation modules on the fly over HTTPS or WebSocket. As many as five DLL modules have been uncovered - - mhm.dll, for file operations, enumeration, recursive file search, archive handling, and bidirectional file transfer - db.dll, for
Jul 7, 2026 · via thehackernews.com
An official website of the United States government Here’s how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. Mohamed Telab serves as the acting Regional Director (a/RD) for CISA Region 2. In this capacity he oversees the management of all CISA regional activities, including the regional headquarters, and physical, cyber, chemical security and emergency communications programs. Prior to becoming the a/RD, he served as the Deputy Regional Director, the Chief of Protective Security, and held positions as a Protective Security Advisor in both New Jersey and New York City. Previously, he was with the Department of Homeland Security’s (DHS) Office of Intelligence and Analysis in New Jersey. Before joining DHS, he served as a civilian in the Counter Terrorism Division of the New York Police Department. Mr. Telab has over 22 years of military experience across active duty and reserve components in the United States Army and the United States Coast Guard (U.S.C.G), where his work included responding to natural disasters, security incidents, and supporting national security special events. During his tenure with the U.S. Army, he held a variety of staff and leadership positions, including a combat tour in support of Operation Iraqi Freedom. He is currently assigned as the head of Operations for the U.S.C.G reserve unit at U.S. Cyber Command at Fort Meade Md. He holds a Master of Science degree from the National Defense University, a Master of Science of Global Affairs degree from New York University, and a Bachelor of Business Administration degree from Hofstra University. He is a Graduate of the Senior Executive Fellows program at the
Jul 6, 2026 · via cisa.gov
Upcoming Webinar Tradecraft Tuesday | The Cost of a Weak CAP: Anatomy of a Major Password Spray Attack In June, a massive password spray attack against Microsoft accounts resulted in 81 million login attempts and 78 successful compromises. Threat actors used Azure command line interface (CLI) sign ins via a deprecated OAuth authorization flow called ROPC. This allowed them to slip through weak spots in victim organizations’ Conditional Access policy (CAP) configurations. Additionally, we found that the actors were using BYOIP, a service that lets the assigned owner of a range of IP addresses get peering services from an ISP. These attacks are part of a large wave of credential spray attacks across a few different ASNs. In the past six months, Huntress has observed the volume of credential spray attacks increase by over 155 times across our customer base. During this Tradecraft Tuesday, we’ll break down how threat actors operate credential spray attacks, what’s driving the recent surge, and the best CAP configurations that organizations can use to address the authorization flow used across these incidents. * HUNTRESS WEBINAR GIVEAWAY TERMS. Live webinar participants may be eligible to receive one (1) Nintendo Switch 2™ + Mario Kart™ World Bundle (“Gift”), worth approximately USD $500.00. This gift giveaway (“Giveaway”) is sponsored by Huntress Labs Incorporated (“Huntress”). By registering for the above Huntress webinar (“Webinar”), you accept the following Huntress Webinar Giveaway Terms and all decisions of Huntress, which are final and binding in all respects. NO PURCHASE NECESSARY. PURCHASE OF HUNTRESS PRODUCTS OR SERVICES DOES NOT ENHANCE CHANCES OF RECEIVING THE GIFT. Eligibility: The Giveaway is applicable to individuals who are 18 years of age or older who register for and participate in the Webinar. All applicable laws and regulations apply. Void where prohibited or restricted by law, including, but
Jul 6, 2026 · via huntress.com
Cybersecurity is entering a new phase. It's one where the gap between awareness and operational execution is becoming the industry's biggest challenge. That's what stood out to me most after reviewing the results of the 2026 Bitdefender Cybersecurity Assessment, which found that organizations have never had greater insight into the risks they face, yet turning that understanding into meaningful action remains a persistent challenge. Nowhere is that gap more visible, in my view, than in how organizations handle breach transparency. We surveyed 1,200 IT and cybersecurity professionals across six countries: France, Germany, Italy, Singapore, the United Kingdom, and the United States. Respondents ranged from frontline employees to IT managers to CISOs, all working within organizations with 500 or more employees. A Governance Problem, Not an Attacker Problem One of the most troubling findings in our report is not about attacker behavior. It's about internal response. More than half, 55.2%, of respondents who experienced a security incident or breach in the past 12 months told us they were instructed to keep it confidential, even though they believed it should have been reported to authorities. The U.S. led all regions at 68.6%, followed by Germany and the U.K. at 57.2%. Most Organizations Say Transparency Matters. Many Still Face Pressure to Stay Quiet. Most organizations recognize the importance of transparent incident reporting, yet more than half of professionals who experienced a breach say they were told to keep it confidential. That contradiction, to me, is one of the clearest signs of an industry that understands the right answer but still struggles to operationalize it. These findings, detailed in the full 2026 Bitdefender Cybersecurity Assessment, point to a broader governance issue: how organizations respond when incidents happen, how transparent they are, and whether internal culture supports compliance, accountability, and trust. Awareness Is Not the
Jul 6, 2026 · via thehackernews.com
Getty Images/iStockphoto/gorodenkoff Enough is enough: Let talent dictate technology Commentary Read more
Jul 6, 2026 · via federalnewsnetwork.com
INDIANAPOLIS (WRTV) — The state of Indiana is phasing out a transparency tool out of concern for cybersecurity, Indiana’s I-Team has learned. “Find a Person” allows you to look up state employees and learn: - Title - Agency - Work address - Email address - Desk phone number Indiana’s I-Team has also used the “Find a Person” tool to see whether someone is still employed with the state. Indiana’s I-Team noticed certain state employees missing from the portal, and we contacted the Indiana Office of Technology. “While the Find a Person feature provided transparency and contact information, it also introduced a significant security risk by making data easily accessible to cybercriminals,” said Kelly Johnson, IOT Director of Communications, in an email to Indiana’s I-Team. “Upon further review, page traffic and utilization of the application was very low, leading to the decision to phase it out, as the benefit of the tool did not outweigh the security concerns.” Johnson points out that the state does still have the Indiana Transparency Portal, which contains salary information about employees. “The Indiana Transparency Portal on in.gov continues to provide information about state finances, assets, contracts, employee salaries, and more. Indiana was also the first state to introduce a broad-based generative AI chatbot on our homepage, making information more readily searchable,” said Johnson in an email. “Using the Ask Indiana tool, constituents are able to locate the information they need quickly and efficiently. While we have seen an increase in website visits, overall page views and time on site have decreased, illustrating that people are finding answers faster.” Johnson said the Indiana Office of Technology conducts ongoing security and risk assessments to safeguard state data and systems.
Jul 6, 2026 · via wrtv.com
Some Jacksonville services offline as city addresses cybersecurity incident
JACKSONVILLE, Texas (KLTV) - The City of Jacksonville has taken some city systems offline after they discovered a cybersecurity concern.
According to the city, suspicious network activity was detected on July 3 and city officials have since determined is related to a cybersecurity incident.
The city said the affected systems were taken offline and an investigation was launched into the nature and scope of the incident.
According to the city, certain systems have been disabled as a precaution and some city services will remain unavailable as the investigation continues. The city said it is implementing workarounds where possible.
The city said it has also implemented additional security measures and enhanced monitoring across its network.
According to the city, the investigation is in its early stages. The city said it is working with third-party cybersecurity specialists to address the situation and restore the network.
Officials said they will provide updates as the investigation progresses.
Copyright 2026 KLTV. All rights reserved.
Jul 6, 2026 · via kltv.com