Latest coverage for Government

Also: Potential Fallout From HIPAA Rule Delay, AI Identity Governance ChallengesIn this week's panel, four ISMG editors discussed the rise of artificial intelligence-powered phishing toolkits, potential fallout from the U.S. government's decision to delay a major overhaul of the HIPAA Security Rule and what security leaders see as the defining AI security challenges of 2026.

National Risk Assessment Cites CrowdStrike Lessons Learned, Hybrid Warfare RisksThe British government's latest national security risk register sees a rising threat posed by cyberattacks disrupting operational technology in more critical national infrastructure sectors, and cites the CrowdStrike outage in "digital resilience failure" lessons to be learned.

Initiative seeks to prevent duplicate vulnerability scanning and remediation efforts.The Trump administration has launched Gold Eagle, a federal AI cybersecurity clearinghouse that coordinates AI-discovered software vulnerabilities through Carnegie Mellon University's VINCE platform to speed validation, disclosure and remediation while reducing duplicate efforts across government and industry.

US Government Is Working on CBOMs But Discovery and Inventories Are a Local ProblemTrump's executive order could give the world a common language for cryptographic inventories, but practitioners say the hardest work won't come from Washington. Even if organizations adopt a shared CBOM schema, each enterprise must still tackle the costly task of discovering cryptographic assets.

Also: Oracle Suit Points to AI Revenue Forecasting Risk; the AI Sovereignty PushIn this week's panel, four editors discussed the growing role of artificial intelligence in U.S. federal government cybersecurity, Oracle's investor lawsuit over its projected cloud sales to frontier AI lab OpenAI and what AI sovereignty means for enterprises.

Peter Justen of AmeriTrust on How Data Integrity Affects Benefits AdministrationArtificial intelligence is transforming healthcare and government benefits administration, but organizations must strengthen data quality and operational processes before expecting meaningful results, said Peter Justen, founder and CEO at AmeriTrust Solutions.

Also, 23andMe Breach Settlement, GitHub AI Flaw, Ubiquiti Patches Critical BugsThis week, hidden breaches, researchers exposed a GitHub AI agent flaw, an Ubiquiti critical flaw, a ColdFusion flaw, a growing Chinese ORB, U.K. government FortiBleed exposure, 23andMe victims get $46.75 million, 3.8 million affected by Medtronic breach and Cerner's 2025 victim count went up.

Agencies and Industry Coordinate Post-Quantum Migration PlansThe White House convened government officials, quantum companies and researchers to accelerate the transition to post-quantum cryptography, align public-private investments and reinforce a 2030 deadline as advances in quantum computing increase risks to today's encryption.

2023 LockBit Attack Affected Nearly 9M People, Including ChildrenMCNA Dental, one of the largest providers of U.S. government-sponsored dental benefits to children, has agreed to a proposed multimillion dollar settlement to resolve class action claims stemming from a 2023 LockBit ransomware attack and data theft that affected nearly 9 million people.

Researchers Identified Two Undocumented Variants Used Since 2023Eset uncovered two previously undocumented Windows variants of the China-linked SprySocks backdoor tied to FishMonger and iSoon, revealing expanded espionage capabilities, rootkit-based stealth and continued targeting of government organizations across Asia and Central America.

OT Operators Shouldn't Wait for Mythos Access to Probe CodebasesThe abrupt, government-ordered cut-off of access to Mythos 5, the most cyber-capable of Anthropic's large language models, has underlined a message security experts have been trying to get out to the operational technology community: You don't need Mythos.

AI Governance, Compliance and Workforce Challenges Top GovSec AgendaGovSec Summit USA 2026 explored how federal agencies are balancing AI adoption, regulatory complexity and national security priorities. Discussions centered on cyber resilience, AI governance, workforce challenges and public-private collaboration as critical pillars of modern government defense.

Decision to Restrict Access Exposes EU Dependency on US Made ModelsThe U.S. government’s decision to cut foreign nationals’ access to Anthropic’s most powerful AI models has sparked a massive increase in calls for Europe to reduce its reliance on American technology. Tech sovereignty has become a live topic in Europe.

Fake Recruiting Sites Used for Info GatheringThe Department of Justice and FBI seized 13 websites tied to an alleged Chinese intelligence gathering operation, using fake recruiting firms and deceptive job offers to target current and former U.S. government employees and security clearance holders.

On Device Controls Spark Privacy, Security ConcernsThe British government is demanding that smartphone giants Apple and Google ensure underage users of iOS and Android devices can no longer take, send or view nude photographs.

IBM False Claims Act Plaintiff Alleges Years of Hidden Security FailuresA former IBM vice president of threat intelligence alleged IBM and AT&T failed to implement basic security controls and obtained major government contracts despite unresolved cybersecurity deficiencies that potentially exposed sensitive federal data.

Bob Costello on Voluntary Plan's Impact on Collaboration - and CISA's Pivotal RoleFormer CISA CIO Bob Costello said President Trump's voluntary AI cybersecurity review order provides a workable foundation for government-industry collaboration, though agencies will need time and resources to meet accelerated 30-day evaluations of advanced AI systems.

Five Eyes Agencies Document 5-Step Chinese Job Platform Spy SchemeThe Five Eyes intelligence agencies issued a rare joint bulletin warning that Chinese military intelligence is using LinkedIn, Indeed, and Upwork to recruit government and military insiders. The operation targets clearance holders, military personnel, academics and journalists.

Analysts Say White House Must Quickly Replace Shelved AI FrameworkU.S. President Donald Trump's decision to abruptly shelve an artificial intelligence executive order aimed at creating a federal review process for frontier models doesn't annul the need for the federal government to work with frontier model makers to address risks, say cybersecurity experts.

New York-Based Kyndryl Can't Buy Amsterdam-Based Solvinity GroupThe growing push for European technological sovereignty from the United States claimed a significant scalp in the Netherlands, where authorities blocked the American takeover of a crucial secure cloud company.