The warped cybersecurity jobs market is a major topic of discussion at RSAC, and was the focus of a recent podcast with ICIT Executive Director Valerie Moon.
The Office of the Director of National Intelligence’s 2026 Annual Threat Assessment (ATA) highlights escalating risks to the U.S. from China, Russia, Iran, North Korea, and aggressive ransomware actors, emphasizing pre-positioning in key systems for potential disruption during crises.
The Purdue Model has long been the GuideStar for securing factories, power plants, and water systems: layer your sensors at the bottom, controllers above, and tie it all to enterprise IT at the top with firewalls segmenting between. Simple. Effective. Or so the industry told itself.
Dragos CEO and Army National Guard Lt. Col. Rob Lee explains how Cyber Fortress brings together military units, infrastructure operators, and international partners to train for real-world cyberattacks against operational technology systems.
Dragos CEO and National Guard Lt. Col. Rob Lee warns that cyber operations targeting civilian infrastructure, from hospitals to water systems, are crossing a dangerous line the cybersecurity community must confront directly.
Chris Glanden is blending cybersecurity, journalism, and storytelling through projects like GhostLine and his new narrative podcast series about AI failures.
How a career that began in IT support evolved into cybersecurity consulting, podcasting, and documentary filmmaking focused on telling the human stories behind technology.
Many medical devices have expected lifespans measured in decades, and the majority of connected medical devices currently in use wouldn't meet the FDA's latest cybersecurity standards if submitted for approval. Adversaries have noticed.
The bring-your-own-device (BYOD) dimension carries implications well beyond Stryker.
While Iranian drones were taking out Amazon's data centers in the Gulf, Tehran's hackers were already inside U.S. banks, airports, and defense networks — and they got there weeks before the first missile flew.
Ransomware events surged 55% in 2025, supply chain attacks widened the blast radius, and nation-state actors showed up. New data from Health-ISAC shows why the health sector's security problem continues to grow.
As Iran's cyber forces regroup after the most devastating military strikes in the Islamic Republic's history, the U.S. agency built to defend the nation's critical infrastructure is operating with a skeleton crew, gutted leadership, and a funding crisis — at precisely the moment it is needed most.
The SaaS market has shed $1 trillion in value. Salesforce, Workday, Adobe, and Snowflake are all down at least 40% from 2025 peaks. For CISOs managing risk across a consolidating software stack, the implications for vendor stability, integration continuity, and contract leverage are significant.
Lazarus-linked threat actors exploit fake recruiter campaigns in an operation ReversingLabs calls “graphalgo,” turning technical job interviews into remote access trojan (RAT) delivery mechanisms that target developers.
The forthcoming plan marks a sharp pivot from the Biden era—and some experts warn it may leave the nation more exposed, not less.
The Notepad++ incident isn't just another nation-state compromise. This attack highlights how developer tools are a governance blind spot, ongoing weaknesses in the integrity of update mechanisms, and the continued evolution of supply chain attacks.
