Cybersecurity

How cyber ranges can help build trust in AI

The public and private sectors are turning more and more to closed environments to help prepare for a cyberattack. Experts said they can also build an understanding of AI and its capabilities.

Luminis cybersecurity incident highlights ‘concerning’ rise in attacks on healthcare

Experts say officials should anticipate future attacks and bolster their cybersecurity protections.

New state cloud rules are rewriting who can sell to government

COMMENTARY | Independently verified security is moving from a review conducted near the end of procurement to a requirement that can determine who competes and on what timetable.

White House launches water cybersecurity pilot in Texas

Project Watershed 250 will stress-test utilities over six months and could serve as a model for protecting water providers nationwide.

Whole-of-state cyber defense: The pathway for addressing today’s AI-fueled threats

COMMENTARY | When every link in the chain is protected, the entire state is stronger, so they and their technology partners must operate as a unified, integrated force.

States, feds scramble to prevent more water cyberattacks

In the weeks after nine states were hit, lawmakers at the federal and state levels have proposed new funding to harden infrastructure, but experts warned they remain vulnerable.

White House to soon launch water provider cyber protection program

The plans come as several states face water system intrusions from what some official suspect could be linked to Iran.

Treasury sanctions Iranian hackers tied to critical infrastructure breaches

Four of the five people named in the cyber action were also charged last week in the Justice Department’s expanded Mabna Institute case.

South Dakota’s cybersecurity program is running out of time, money as local governments face attacks

The $7 million in state cybersecurity funding for SecureSD expires in 2028. Once it runs out, local governments will have to absorb costs.

What leaders get wrong about cloud security

COMMENTARY | Local governments are adopting cloud-based ERP systems to modernize finance operations, but cloud migration alone doesn’t eliminate security and compliance risks.

‘I don’t trust you’: Tensions reach boiling point on election security call for state leaders hosted by Trump administration

Democratic election officials criticized Homeland Security leaders for lackluster support as the midterm election looms.

Former California CISO reflects on cyber’s importance in state government

Now a senior advisor at World Wide Technology, Vitaliy Panych said his aim was always to make everyone a “risk practitioner,” while managing an enormous state infrastructure.

The great AI escape(s): Now what?

COMMENTARY | Trust in agentic AI cannot be based on faith in vendors’ marketing. Leaders must engineer, require and verify that trust exists when they purchase a product.

Voting machine researchers say federal work abruptly ended after Trump ally pushed back on their findings

Mojave Research executives said at DEF CON that the government had been preparing to expand the company’s election security work, and linked Trump adviser Kurt Olsen to pressure they faced after finding election system vulnerabilities but no evidence votes were altered.

New ‘Water Watch Center’ launched to help small utilities stop cyberattacks

The initiative comes as multiple states grapple with intrusions into their water systems that some officials suspect could be tied to Iran.

More US water systems struck by hackers

The FBI said systems in at least seven states have been hit, following an Iran-linked group’s hack in Minnesota. Experts urged operators to beef up operational technology cybersecurity.

State AGs call for transparency from OpenAI after unprecedented Hugging Face hack

More than a dozen attorneys general are demanding answers from OpenAI after a cyber intrusion.

Smart phones render Nevada privacy law vague and outdated, says attorney

“The burden has now become placed on us as humans. If we want to have a private conversation, we really need to take extra steps to have that private conversation,” an attorney said while arguing a case involving the statute.

CISA urges water utilities to take exposed systems down after Minnesota hacks

A memo distributed to water industry members and obtained by Nextgov/FCW makes mention of Iran but does not directly present evidence attributing the latest Minnesota incident to the country.

Why large events require smarter, long-term security investments

COMMENTARY | The just-concluded World Cup and upcoming Olympics highlight the need to plan beyond the stadium or venue and support public safety years after fans go home.