About Press Copyright Contact us Creators Advertise Developers Terms Privacy Policy & Safety How YouTube works Test new features NFL Sunday Ticket © 2026 Google LLC
About Press Copyright Contact us Creators Advertise Developers Terms Privacy Policy & Safety How YouTube works Test new features NFL Sunday Ticket © 2026 Google LLC
CrowdStrike Earnings Beat Sparks Selloff—Buy the Dip? Shares of CrowdStrike Holdings Inc. CRWD were down about 4% the day after the cybersecurity company delivered what was, by fundamental metrics, a strong earnings report. For the first quarter of its 2027 fiscal year, CrowdStrike delivered a beat on the top and bottom lines and raised its guidance. Revenue of $1.39B was up 26% year over year (YOY). Adjusted earnings per share (EPS) of $1.10 was a gain of over 50% YOY. 51% of customers now use 6+ modules. Net new annual recurring revenue totaled $255.8 million. Record free cash flow hit $468.5 million. One of the report's strongest elements was the $6 million increase in annual recurring revenue (ARR) for the company’s Falcon platform. That was better than expected, but apparently not enough to satisfy investors. However, this appears to be a case where high-frequency trading platforms sell first and discern later. With CRWD up sharply in the last three months, algorithms were looking for a stronger number than they got. But if investors look past the noise, the outlook for CrowdStrike and other cybersecurity stocks is bullish. A Beat That Wasn't Enough To be fair, the selloff wasn't purely about CrowdStrike—it also reflected a market already on edge. CrowdStrike’s report came on a day when the market sold off on concerns over a re-escalation of hostilities with Iran, as well as a revenue miss by Broadcom Inc. AVGO that stoked concerns about a frothy artificial intelligence (AI) trade. Cybersecurity stocks aren’t immune to AI fears. The concern is that the current business models of companies, such as CrowdStrike, will be less viable in an AI-driven future. Specifically, that AI tools will allow companies to automate the tasks that once required cybersecurity products. If that’s the case, then the future valuation
Budapest, Hungary - Jun 6, 2026 - Automotive cybersecurity solution provider, PCA Cyber Security has published its Q1 2026 Global Automotive Threat Intelligence Report, the latest edition of its quarterly automotive cybersecurity news briefing tracking automotive cybersecurity trends and incidents in 2026. The report finds that automotive-specific vulnerabilities have doubled in twelve months. PCA Cyber Security’s threat intelligence team identified 265 new CVEs in Q1 2026, a 28 per cent rise over Q4 2025 and a 102 per cent increase year-on-year vs Q1 2025. An example of the headline incidents noted by PCA Cyber Security in Q1 include a cyber-physical "bricking" event, where attackers compromised a telematics provider and left car owners unable to unlock or start vehicles via the mobile app for up to two weeks, a 12.4 million-record breach at a major online auto marketplace (executed via AI-assisted voice phishing against the companies help desk) and a 200 GB IP leak from a Tier-1 electronics supplier exposing design files for multiple OEMs. January's Pwn2Own Automotive contest in Tokyo produced 76 zero-days and $1.047 million in payouts, with the most consequential results targeting EV charging infrastructure from Autel, ChargePoint, and Alpitronic. "2026 is the year automotive cybersecurity stops being a policy alignment exercise and becomes operational proof," said Vlad Ryabyshkin, Chief Technology Officer at PCA Cyber Security. "The Q1 data shows threats are scaling faster than traditional defences, and the human perimeter and cloud control plane are now as critical as the in-vehicle network." PCA Cyber Security recommends immediate adoption of phishing-resistant MFA (FIDO2) across help desk functions and a move toward a "degraded mode" telematics architecture to keep vehicles functional during cloud outages. The full Q1 2026 Global Automotive Cybersecurity Report is available at https://pcacybersecurity.com/resources/threat_intelligence_quarterly_report. Media Contact Company Name: PCA Cyber Security Contact Person: Laura Martisiute Email: Send
Quick summary - click for full details Concise summary of key highlights In one line Google patches over 420 security flaws in Chrome, including highly critical remote code execution risks. Key points • Critical vulnerabilities fixed Google addressed 429 security issues in Chrome, with 371 detected internally and 58 by external researchers. Several were classified as highly critical, enabling remote code execution and potential data theft. • Bug bounty rewards Independent cybersecurity researchers were awarded a total of $209,000 for reporting vulnerabilities, including a $97,000 prize for a single unnamed researcher. • Update urgency Users are strongly advised to update Chrome to version 149.0.7827.53 (Linux) or 149.0.7827.53/54 (Windows/Mac) to mitigate risks from unpatched vulnerabilities. • Android privacy enhancements Google also released the June Android update, introducing privacy features like fake call detection to improve user safety and experience. Key statistics 429 Total vulnerabilities patched $209,000 Total bug bounty payouts $97,000 Highest single bounty awarded 149.0.7827.53/54 Chrome update version Processed with AI. Reviewed by DH Digital Team. Published 06 June 2026, 07:32 IST
Automotive Cybersecurity News Q1 2026 - Vehicle Vulnerabilities Double Year-on-Year And Hackers "Brick" Thousands of Cars PCA Cyber Security's latest Global Automotive Threat Intelligence Report documents 265 new CVEs, a record-breaking Pwn2Own Automotive contest, and a cyberattack that stranded hundreds of thousands of vehicle owners for up to two weeks.Budapest, Hungary - Jun 6, 2026 - Automotive cybersecurity solution provider, PCA Cyber Security has published its Q1 2026 Global Automotive Threat Intelligence Report, the latest edition of its quarterly automotive cybersecurity news [https://pcacybersecurity.com/resources/threat_intelligence_quarterly_report] briefing tracking automotive cybersecurity trends and incidents in 2026. The report finds that automotive-specific vulnerabilities have doubled in twelve months. PCA Cyber Security's threat intelligence team identified 265 new CVEs in Q1 2026, a 28 per cent rise over Q4 2025 and a 102 per cent increase year-on-year vs Q1 2025. An example of the headline incidents noted by PCA Cyber Security in Q1 include a cyber-physical "bricking" event, where attackers compromised a telematics provider and left car owners unable to unlock or start vehicles via the mobile app for up to two weeks, a 12.4 million-record breach at a major online auto marketplace (executed via AI-assisted voice phishing against the companies help desk) and a 200 GB IP leak from a Tier-1 electronics supplier exposing design files for multiple OEMs. January's Pwn2Own Automotive contest in Tokyo produced 76 zero-days and $1.047 million in payouts, with the most consequential results targeting EV charging infrastructure from Autel, ChargePoint, and Alpitronic. "2026 is the year automotive cybersecurity stops being a policy alignment exercise and becomes operational proof," said Vlad Ryabyshkin, Chief Technology Officer at PCA Cyber Security. "The Q1 data shows threats are scaling faster than traditional defences, and the human perimeter and cloud control plane are now as critical as the in-vehicle network." PCA Cyber Security recommends immediate
5 min readNew DelhiJun 7, 2026 03:59 AM IST US artificial intelligence company Anthropic is extending access to its closely guarded cybersecurity initiative, Project Glasswing, to a select set of organisations in India, including key government entities that are responsible for safeguarding cybersecurity across sectors like banking, telecom, and power, The Indian Express has learned. Government agencies such as the Indian Cyber Crime Coordination Centre (I4C); Indian Computer Emergency Response Team (CERT-In); National Critical Information Infrastructure Protection Centre (NCIIPC); and the Department of Telecommunications’ Digital Intelligence Platform (DIP) are among the state-owned entities that are understood to have received access to Anthropic’s advanced frontier AI model Mythos. Anthropic is also said to have extended access to some cybersecurity-focused research institutions in India, while discussions are underway on providing Mythos Preview to dedicated cybersecurity and AI teams within some of the country’s largest IT services companies, a senior government official said on condition of anonymity. This move comes as part of Anthropic’s announcement that it would expand Project Glasswing beyond its initial cohort of participants in the US and UK to more than 15 countries, including India. Under the programme, vetted organisations are granted access to Claude Mythos Preview, an unreleased AI model that Anthropic says is capable of identifying critical software vulnerabilities at a level that could fundamentally alter the balance between cyber attackers and defenders. The company has so far restricted access to the model, citing concerns that its capabilities could be misused if released publicly. The official added that NCIIPC, which falls under the National Security Advisor in the Prime Minister’s Office, and CERT-In had requested access to Mythos to identify vulnerabilities within India’s critical infrastructure such as banking and power. The Indian Express had earlier reported that the Indian government was in conversations with Anthropic’s senior leadership
Bridgewater State University image CyberTrust Massachusetts hosts regular, realistic "Capture the Flag" (CTF) cyber range competitions designed for public colleges, municipalities, and regional Security Operations Centers (SOCs).These events typically challenge student teams to investigate mock corporate digital infrastructures, trace cyber attacks, and present executive briefings to non-technical audiences. The CyberTrust CTF scenarios mirror real-world attacks. They heavily evaluate incident response, alert analysis, and crisis management skills. More than a dozen Consortium Schools participated recently, including Bridgewater State University, MassBay Community College, Salem State University, and Springfield Technical Community College. In the most recent CTF competition it was the Bridgewater State team, which happened to be all female, that took top honors. Among the four-member team was FHS-alumni, Emily Reilly. According to a University website posting, the four are among the first to earn degrees in cybersecurity and digital forensics at the college and had many opportunities to bond during their studies. “This shows, especially with us being the first batch of graduates, that they have built a very strong program,” Emily said. The women also gave credit to individual professors for the strong preparation they received.
Picture three technology executives: one in cybersecurity, one in software as a service, and one in payments. Each is trying to figure out how to deploy artificial intelligence across their organization. The cybersecurity CTO wants to know how quickly the firm can roll out AI across more tasks. The SaaS lead wants to know where AI can sharpen growth and give products an edge. The payments executive wants to know where AI can earn organizational trust, reduce risk and prove its worth. Previous PYMNTS Intelligence research finds that the tech industry is at the forefront of AI adoption. But “tech” is a broad category, and AI strategies aren’t one-size-fits-all. Adoption reflects an individual sector’s core pressures, from customer protection to revenue expansion to transaction control. Cybersecurity firms use AI most broadly, SaaS firms are most willing to experiment and payments firms are most disciplined about where they invest. The obstacles aren’t the same, either. Some firms wrestle with change management, others with oversight and still others with security and data handling. Taken together, the findings show that enterprise AI is about fit. Firms that scale the fastest match AI to the parts of the business where it can do the most useful work. These insights are explored in “New Data Shows How Tech Sectors Are Turning AI Into Strategy,” the latest edition of the Enterprise AI Benchmark Report, a PYMNTS Intelligence exclusive series. This edition draws from a survey of 60 senior technology executives at U.S.-based enterprises with at least $1 billion in annual revenue conducted in April 2026. The data show that different tech sectors are scaling AI in distinct ways that align with core business pressures, not a single, shared playbook. Cybersecurity Leads in AI Breadth The cybersecurity sector is adopting AI the most broadly but not necessarily
Donald Trump is considering a senior executive from Palantir Technologies as the new head of the U.S. Cybersecurity and Infrastructure Security Agency (CISA). Shyam Sankar, CTO of Palantir, is 44 years old. According to his LinkedIn profile, Sankar has worked at Palantir for over 20 years, serving as the company's Chief Operating Officer for 17 years until he was appointed Chief Technical Officer in 2023. The agency has not had a Senate-confirmed leader since Jen Easterly resigned in January of last year, according to The Record Media. Just a few days ago, the Secretary of the Department of Homeland Security (DHS), Markwayne Mullin, informed legislators that the administration is about to appoint a director for the agency, which has been led by acting director Nick Andersen since February. "We have a person, who will soon be nominated, who will lead CISA and has the ability to recruit staff and focus on the competencies we have. We want CISA to be a leader in cybersecurity. It should be and it will be," Mullin commented. Palantir maintains close ties with the Trump administration and primarily focuses on artificial intelligence. This big data analytics company has established itself as a major AI provider for businesses and the defense sector. Following the publication of this information, a White House official denied the potential selection, stating that "at this moment this is not accurate." A former chief who shared official information Earlier this year, the then-acting chief of CISA, Madhu Gottumukkala, made a notable error by sharing documents for official use in the public version of ChatGPT. Although the documents were not formally classified, they did contain sensitive information regarding hiring and internal management of the Department of Homeland Security (DHS). Thus, it was a significant operational security failure in an agency tasked with defending
Financial institutions are shifting their focus from simply preventing cyberattacks to building stronger cyber resilience and faster recovery capabilities. Agentic AI can analyze threats in real time, helping security teams identify and respond to unusual activity more quickly. Asset tokenization creates greater transparency across transactions, giving organizations better visibility and control over digital assets. A bank can spend years building trust with customers and lose a part of it in a single cyber incident. That is why security has become a daily concern for financial institutions. The major challenge is to ensure the services continue even if something goes wrong. As the financial world becomes more digital, companies are looking at new tools that can help them stay prepared. Two of the technologies getting attention are Agentic AI and asset tokenization. They are different in many ways, but both are changing how financial firms think about risk, security, and recovery. There was a time when cybersecurity was mostly about building stronger walls around systems. Today, many security leaders know that no system is completely untouchable. The real question is what happens after a threat appears. Can the problem be spotted quickly? Can the damage be limited? Can customers continue using important services? That way of thinking has pushed cyber resilience to the center of many discussions across the financial sector. Also Read: Why AI Agents are Becoming Active Participants in Crypto Markets Security teams deal with huge amounts of information every day. Transactions move constantly. Alerts appear around the clock. Sorting through everything manually is becoming harder. This is where Agentic AI comes in. Instead of simply waiting for instructions, it can watch activity, identify unusual patterns, and help decide what needs attention first. Imagine a sudden spike in suspicious transactions late at night. A human team may need time
Lol, thats funny. 😎😅 Sad but true 😄 - Abdullah 9h This never gets old! 🤣🤣 My Products is Fully Alignment with SANS Released 2026. SOC analysts can FREE use the following Ai High tech to reduce anxiety between shifts: Specialized for: SOC Analysts Threat Hunters Blue Team Leads Incident Responders Security Architects Security Leadership For Narrative views #CyRex -Link to the next generation of artificial intelligence engineering and the first Iranian example of a completely hunter-oriented Cognitive AI Proven ability to deploy this system in Total Local & OFFLINE Building a complete attack narrative Creating three hypotheses and graphs on the Miter matrix Proving the power of architecture in controlling Hallucination & Overconfidence https://chatgpt.com/g/g-692dae5e326c81919b6a6cb3faa2b456-cyrex-lordblue-cybersecurity-threat-hunter
Mountain Rides, the Wood River Valley's public transportation agency, has resolved an issue caused by a malicious pop-up box that showed up on its website this week and threatened website visitors with a computer virus. Mountain Rides spokeswoman Andrea Hernandez told the Express in a Friday phone call that she spotted the issue Wednesday morning. She said that since then, Mountain Rides had been working to resolve the issue with the help of a local web-design company that designed the Mountain Rides website, which was constructed using WordPress.com. She said that when users attempted to access the website, a pop-up box would appear and ask them to verify they were human. The site visitor would be asked to complete a series of steps to "prove you're not a robot," which included keyboard commands and on-screen button clicks, before the virus could target the visitor, Hernandez explained. Just after 11 a.m. Friday, Hernandez told the Express that the issue had been resolved. She said it was not a targeted attack on Mountain Rides but instead an attack across wordpress.com websites like the Mountain Rides website. Hernandez asked that if anyone in the public encounters a similar pop-up on the Mountain Rides website they reach out to info@mountainrides.org to inform the agency of the issue. Hernandez said the website is, once again, safe for traffic. Hernandez said that two similar cybersecurity threats on the Mountain Rides website had been resolved "right away" after they occurred on May 7 and 13. Post a comment as anonymous Report Watch this discussion. (0) comments Welcome to the discussion. Log In
FORT HUACHUCA, Ariz. — Imagine the clock displaying 3 a.m. in the year 2040 at a forward power projection platform in a highly contested Indo-Pacific theater. Sensors detect an adversary’s hypersonic missile targeting the installation’s primary munitions depot. Simultaneously, the installation's cybersecurity architecture detects malicious traffic targeting the power grid. Instantly, the cybersecurity architecture isolates substations and reroutes power through redundant pathways to keep defensive missile launchers fully energized. As the threat approaches, an integrated air and missile defense system driven by artificial intelligence calculates the optimal intercept. The missile interceptor succeeds. Within seconds, the automated logistics system of the Army's Organic Industrial Base assesses the expended inventory and initiates a 3D printing process to fabricate a replacement guidance component for a new missile interceptor. This imaginary scenario illustrates a future where an Army installation is not just a passive piece of real estate. Instead, the installation is a fully realized, intelligent weapon system platform known as a “sentient fortress.” Achieving this vision is the driving force behind the Army's 15-year OIB Modernization Strategy and Modernization Implementation Plan. As part of the Communications-Electronics Command, the U.S. Army Information Systems Engineering Command is dedicated to realizing the Army’s OIB Transformation to ensure a 21st-century OIB capable of sustaining readiness, supporting modernization efforts and remaining postured to meet wartime requirements. The vulnerability of a bygone era To appreciate the resilient installation of the future, one must understand the critical vulnerabilities of legacy infrastructure. For decades, Army installations relied on a fractured technological foundation with a complex seam between information technology and operational technology. IT encompassed data and enterprise networks, while OT referred to the physical world, including industrial control systems, power grids, and the complex machinery of the OIB. The critical nature of these systems has made the seamless convergence of the
Houlihan Lokey Advises Phosphorus Cybersecurity Phosphorus Cybersecurity has been acquired by Dragos Sellside Advisor Houlihan Lokey is pleased to announce that Phosphorus Cybersecurity (Phosphorus) has been acquired by Dragos. Adding Phosphorus extends Dragos’ capabilities to secure connected devices across the extended operational technology environment, or xOT, delivering deeper device visibility, automated remediation, and continuous risk reduction. Phosphorus is an xIoT security and management platform that discovers, assesses, and actively remediates risk across connected devices, including IoT, OT, IoMT, and IIoT. The platform offers the industry's most comprehensive security capabilities for connected devices, integrating with customers' existing infrastructure without requiring disruptive architectural changes. The platform actively discovers and provides deep visibility into devices across OT and enterprise environments. Phosphorus automates remediation workflows, including password rotations, firmware updates, certificate management, and configuration hardening, while helping organizations address compliance and reduce risk at scale. Dragos is a global leader in OT cybersecurity. With nearly a decade of real-world experience handling landmark attacks on OT networks, Dragos understands the complexity and risks of industrial environments, operating on massive scale with unique systems and exacting availability requirements that are not protected by IT cybersecurity. Purpose-built for the xOT environment, Dragos technology delivers asset visibility, continuous monitoring, OT vulnerability management, segmentation validation, device protection, and real-time threat detection, powered by industry-leading OT threat intelligence and incident response teams. Dragos serves critical sectors including energy, manufacturing, water, transportation, and data centers. Privately held and headquartered in the Washington, DC area, Dragos operates globally across North America, EMEA and APAC. The acquisition brings together two highly complementary capabilities to address the full scope of the xOT environment. For Dragos, adding Phosphorus extends its platform to secure the billions of connected devices embedded across critical infrastructure networks, closing a visibility and remediation gap that legacy OT tools have historically
A former IBM cybersecurity executive accused the company of getting hacked three times in the previous decade by foreign governments and then covering up the breaches. In a lawsuit unsealed this week but filed in 2020, William Barlow, who was IBM’s vice president of threat intelligence until August 2019, said IBM concluded Chinese hackers breached its core network between 2013 and 2016 but that the company then covered up the breaches and never disclosed them. Barlow also said at least two IBM subsidiaries were also breached, and that IBM covered up those breaches as well. Barlow alleged in his complaint that IBM’s core network was “routinely hacked by foreign state actors and others,” adding that data was frequently stolen and government agencies were “never notified.” While the alleged breaches date back more than a decade, the news shows that cyberattacks, even those affecting large public tech companies such as IBM, sometimes never get disclosed, either to the public or to relevant government authorities. IBM is a major cybersecurity vendor to the U.S. federal government, which makes the alleged concealment especially significant. In the last few years, several data breach notification laws have been passed to counter this problem. Bloomberg first reported on the lawsuit. IBM spokesperson Miki Carver declined to answer specific questions about the lawsuit and the underlying accusations. Instead, Carver told TechCrunch, “This complaint was filed six years ago, and the U.S. Department of Justice declined to intervene. IBM is confident that our actions followed the letter of the law.” In particular, Barlow said IBM was among several victims of a hacking campaign carried out by APT 10, a Chinese government-linked group that then-FBI Director Christopher Wray said had targeted a “Who’s Who” of the global economy when its members were indicted in 2018. The hackers broke into
Trump AI Order Seeks Voluntary Frontier Model Testing The White House's executive order establishes voluntary framework for early government access to frontier models while investing in federal security. A new executive order aims to put gas in the federal cybersecurity tank and prepare the government for frontier AI models like Anthropic's Claude Mythos, but private sector participation is voluntary and practitioner impact remains to be seen. The executive order, which the White House unveiled this week, aims to prioritize cybersecurity in the Trump administration and encourage the private sector to share AI frontier models with the federal government for an early preview prior to releasing the model publicly. President Donald Trump's second term has butted up against the cybersecurity community. Early last year, the administration effectively shuttered the Cyber Safety Review Board, and this was followed with mass CISA layoffs, cybersecurity-focused budgetary cuts, and other actions such as a withdrawal from cybersecurity event RSAC Conference. The new executive order, "Promoting Advanced Artificial Intelligence Innovation and Security," could reverse this course. Sec. 2, Upgrading American Systems for Advanced AI, orders the Committee on National Security Systems and Secretary of Defense Pete Hegseth to take action to "prioritize the cyber defense of National Security Systems" within 30 days. Moreover, most other cyber stakeholders, including the Department of Homeland Security (DHS), the Director of the Office of Management and Budget (OMB), the assistant to the president for National Security Affairs, and the National Cyber Director are ordered to expedite and prioritize the cyber defense of civilian federal government information systems, as well as establish or expand federal programs and cybersecurity services to enhance AI defensive tool deployment. The EO will also "facilitate access to cybersecurity tools and services including, where appropriate, covered frontier models for agencies, State and local authorities, and operators of
Law EU Cybersecurity Act could expose member states to costly investment treaty claims, legal opinion warns A new legal opinion by leading international investment law expert Professor Christoph Schreuer warns that the European Commission's proposed Cybersecurity Act (CSA) could place EU member states in a difficult legal position, potentially exposing them to compensation claims from Chinese investors under existing bilateral investment treaties (BITs). The opinion, commissioned by international law firm Gaillard Banifatemi Shelbaya Disputes and dated 4 May 2026, examines the legal consequences of a potential conflict between the proposed EU cybersecurity legislation and investment protection agreements that almost all EU member states maintain with China. Under the draft legislation, the European Commission would gain extensive powers to identify and exclude so-called "high-risk suppliers" from European information and communications technology (ICT) markets. The proposed measures could affect suppliers involved in key digital infrastructure, including 5G networks, telecommunications systems and other strategic ICT assets. Potential legal collision According to Schreuer, the central issue is that while the Cybersecurity Act would be directly applicable across the European Union, EU member states remain bound by their separate bilateral investment treaties with China. These treaties generally guarantee protections against expropriation, discriminatory treatment and unfair treatment of Chinese investments. The opinion concludes that compliance with EU legislation would not automatically shield member states from liability under international law. "Member States would remain bound by their respective BITs with China in the event of a conflict between their obligations under the CSA and those arising under the BITs," Schreuer writes. The analysis argues that international law does not allow to invoke domestic legislation—including EU law—as a justification for breaching treaty obligations. As a result, if measures taken under the Cybersecurity Act adversely affect Chinese investors, member states could still face international arbitration claims. Chinese investors could
Trump Executive Order on AI: Voluntary Framework, Cybersecurity Focus, and Key Takeaways On June 2, 2026, President Trump issued a new Executive Order (EO), "Promoting Advanced Artificial Intelligence Innovation and Security." The order arrives after the President's recent decision to postpone its signing. As foreshadowed in the leaked draft, the EO reflects the Trump Administration’s stated priority of advancing AI innovation while acknowledging that “advanced AI capabilities make our Nation stronger,” but also “introduce new national security considerations” that require coordinated action across government. Below we summarize the EO's key provisions, compare them to the Biden administration's broader AI framework, and draw out the practical implications for developers and critical infrastructure operators. What Clients Need to Know - The EO is narrowly focused on cybersecurity and national security. This marks a notable shift from the Biden administration's broad AI governance framework. - No new mandatory obligations for AI developers. The frontier model framework is expressly voluntary and preclearance is prohibited. - Designation thresholds for "covered frontier models" will be set through a classified NSA process. Developers will have little visibility into where that line falls. - The AG is directed to prioritize enforcement of existing computer fraud laws against AI-enabled attacks. No new crimes created, but this is a noteworthy prosecutorial signal. - Developers who opt into the voluntary framework should plan for a 30-day pre-release government access window. - Critical infrastructure operators (hospitals, community banks, utilities) should track CISA Binding Operational Directives. These carry real compliance weight even if clearinghouse participation is voluntary. Section 2: Upgrading American Systems for Advanced AI Section 2 details the bulk of EO’s cybersecurity mandates. By July 2, 2026 (within 30 days): - Cyber Defense Prioritization (Sec. 2(a)). The Committee on National Security Systems is directed to prioritize the cyber defense of National Security
"Our adversaries, our foreign adversaries definitely have been taking some of our most precious IP in this country," said Emil Sayegh. Interview transcript Terry Gerton You have a lot of background on a very important topic, CMMC. In fact, your company received quite a bit of attention last fall when you released a report that found only 1% of defense contractors said they felt ready for the CMMCs rules that were just then going into effect. We’re about six months later. How have you seen the situation change? Emil Sayegh There’s certainly a rush from certain contractors and subcontractors to essentially become CMMC compliant, get certified, get assessed, and so on and so forth. But what we’ve seen from before, for multiple years as CMMC was being talked about and planned, basically CMMC has moved from planning and PowerPoint and Excel sheets and word documents and project plans to actual implementation now and people are starting to take it much more seriously. So it’s moved basically from writing the policy to actually implementing those policies and not only implementing them, but also making sure that you have the proper evidence that those policies are implemented because when an assessor is gonna come in and audit you or even if you’re doing a self assessment and you’re publishing an SPRS score, there’s a threshold of evidence that you need to maintain. And that’s what needs to go into your self assessment, right? It can’t just be, “I think” or “we planned” or “it looks good” on an Excel document or a Word document. You have to be able to provide the evidence so that you can enter your SPRS score in the government system, the DOD system. So having said that, I think we’re seeing everything shift from planning to now