Security Bulletin

A likely Iran-backed actor targeted more than 30 community water systems in Minnesota in a sobering reminder of rising threats to US critical infrastructure.

A myriad of software makes up the typical AI harness, and trust issues between the components can create concerning attack vectors.

Certification rubber-stamping is the most common form of governance decay.

Can the platform make the gap between what the organization claims and what the evidence supports visible before the response is sent?

CISOs urge resilience, supply chain security and simpler cyber rules.

Attackers continue to leverage AI to target our edge appliances – so why hasn’t the industry built-in AI into those devices yet?

In the cloud-based enterprise, Linux servers can't stay isolated on legacy authentication systems.

The AI Capability Verification Matrix will help test claims critical to the purchase decision

Decoys may be the best defense against fast-moving autonomous AI attacks.

In this edition of Reporters' Notebook, our journalists discuss the ins and outs of Anthropic's Claude Mythos rollout. How seriously should we take its risks? How big of a deal is it?

Brad Blakestad, director of the National Quantum Coordination Office, emphasized that quantum technology is not monolithic, encompassing computing, sensing, and networking, each with distinct components and multiple modalities within computing alone.

The UNODC reports that the failure of law enforcement to keep pace with criminal innovations has led to estimated costs of $88 billion to $114 billion for the region in 2025.