CyberScoop | Breaking Cybersecurity News, Public Sector Threats

Get our latest cybersecurity news first on Google.

Click here!

The FBI and Environmental Protection Agency issued a joint advisory last week confirming attacks at water and wastewater utilities in at least 12 states since July 27. (Getty Images)

Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online

A scan of internet-connected industrial equipment found 4,400 exposed PLCs, including 22 in cities recently targeted by water system attacks.

By Greg Otto

A figure walking with a glowing trail of binary code emanating from a case, symbolizing stolen data. (Getty Images Plus)

Ransom Cartel creator sentenced to 16 years in prison

Cybercrime

By Matt Kapko

Safe Mode

The SOC wasn’t built for this

AI

By CyberScoop Staff

Featured on CyberScoop

The water sector just got it’s wake-up call. Again.

By Andrea Carcano
Snowflake hacker pleads guilty, faces up to 32 years in prison

By Matt Kapko
Tom Cotton prods Treasury for tax code tweaks to modernize OT

By Matt Bracken
Open-source software’s archenemy TeamPCP goes back further than anyone thought

By Matt Kapko
AI is getting better at election facts, but voters shouldn’t rely on it

By Derek B. Johnson

Popular Stories

(Getty Images)

How software development’s speed obsession enabled TeamPCP’s chaos crusade

The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security.

By Matt Kapko

(Getty Images)

Inside the race to adapt to an AI-powered security world

AI is breaking things faster than anyone can fix them. Security leaders across the industry are racing to figure out what comes next.

By Greg Otto

(Getty Images)

Security leaders say the next two years are going to be ‘insane’

Kevin Mandia, Morgan Adamski, and Alex Stamos tell CyberScoop that AI is finding bugs faster than anyone can fix them, exploit development is accelerating, and most organizations…

By Greg Otto

(Graphic by Shanima Parker / Scoop News Group)

Across party lines and industry, the verdict is the same: CISA is in trouble

The agency lost a third of its people in a year. Now industry and lawmakers on both sides say it's unprepared for a potential crisis.

By Tim Starks

Your AI doctor doesn’t have to follow the same privacy rules as your real one

By Derek B. Johnson

Cyber scholarship-for-service students say government has pulled rug on them, potentially burdening them with debt

By Tim Starks

A house full of open windows: Why telecoms may never purge their networks of Salt Typhoon

By Derek B. Johnson

‘Whatever we did was not enough’: How Salt Typhoon slipped through the government’s blind spots

By Tim Starks

Prolific Russian ransomware operator living in California enjoys rare leniency awaiting trial

By Matt Kapko

Insights

Call center agent viewing a monitor. — Getty Images

Weaponized AI: The new frontier of fraud and identity spoofing

By Fernanda Sottil

Abstract art of data security — Image: Giannina Vera, Scoop News Group

Why cyber modernization requires partners with technical plus acquisition expertise

By Katie Baxter

Image of US Capitol evoking data flow — Image: Scoop News Group

Why identity is the definitive cyber defense for federal agencies

By Daniel Wilbricht

Agencies push for digital transformation amid security challenges

By Scoop News Group

Videos

T-Mobile’s Eric Jensen on the challenge of securing vast supply chains

By CyberScoop Staff

Datadog’s Emilio Escobar on compliance-first AI

By Scoop News Group

Cohesity’s Marlin McFate on risks tied to growing cloud dependence

By Scoop News Group

ThreatLocker’s Rob Allen on the dual impact of AI

By Scoop News Group

Podcasts

Why Cybersecurity is at the heart of the US-China AI race

By CyberScoop Staff

A builder’s view of the AI arms race

By CyberScoop Staff

What the Section 702 lapse means for cybersecurity

By CyberScoop Staff

What the post-quantum executive order means for CISOs

By CyberScoop Staff

The Latest

United States National Cyber Director Sean Cairncross (2nd-L) accompanied by United States Chief Technology Officer Dr. Ethan Klein (L), White House Office of Science and Technology Policy Director Michael Kratsios (3rd-L), U.S. President Donald Trump (R), and Commerce Secretary Howard Lutnick (2nd-R), speaks during an event in the Oval Office of the White House on June 22, 2026 in Washington, D.C. (Photo by Andrew Harnik/Getty Images)

National cyber director lays out White House plans to secure AI without writing new rules

Two more organizations reported AI models taking “unsanctioned” actions, including exploiting real assets on the internet. (Source: Getty Images)

AISI, OpenAI report more ‘unsanctioned’ model hacks

(Getty Images)

Massive supply-chain attack compromises 440 packages under four hours

U.S. Sen. Kirsten Gillibrand, D-N.Y., attends a subcommittee hearing with the Senate Committee on Appropriations in the Dirksen Senate Office Building on April 22, 2026. (Photo by Anna Moneymaker/Getty Images)

Dem senators criticize Trump administration decisionmaking on AI security risks

(Getty Images)

Prolific ransomware group behind SonicWall zero-day attacks

Del. Eleanor Holmes Norton, D-D.C., speaks at a press conference outside the U.S. Capitol on March 10, 2024. (Photo by Kayla Bartkowski/Getty Images)

Lawmakers spring to save ID theft services for OPM breach victims, with expiration looming

WASHINGTON, DC – DECEMBER 03: (L-R) Chairman Sen. Ted Cruz (R-TX) and Ranking member Sen. Maria Cantwell (D-WA) arrive for a hearing with the Senate Commerce, Science and Transportation Committee in the Russell Senate Office Building on Capitol Hill on December 3, 2025 in Washington, DC. Senator Maria Cantwell, D-Wash., wants hearings to force AT&T and Verizon to disclose how they’ve responded to the hacks to protect telecom networks. (Photo by Anna Moneymaker/Getty Images)

Senate set to debate package of bills on privacy, AI and kids safety

(Getty Images)

How companies could share cyber risks without exposing their secrets

This illustration picture shows the ChatGPT logo displayed on a smartphone in Washington, DC, on March 15, 2023. (Photo by OLIVIER DOULIERY/AFP via Getty Images) O

Public interest coalition urges Congress to investigate OpenAI, Hugging Face hack

(Getty Images)

CrowdStrike: AI is now both the weapon and the target in cyberattacks

US President Donald Trump speaks during a Cabinet meeting at Camp David in Maryland, on July 31, 2026. (Photo by Aaron Schwartz / AFP)

Trump blames Minnesota for cyberattacks on water sector, drawing pushback from cyber world

The OpenAI logo is displayed on a smartphone screen placed on a reflective surface, photographed using a slow exposure with a motion blur effect, in Creteil, France, on May 12, 2026. Daybreak is an AI-powered cybersecurity service designed to detect, analyze, and remediate software vulnerabilities more quickly. (Photo by Samuel Boivin/NurPhoto via Getty Images)

What the Hugging Face breach reveals about defense in the age of agentic AI

(Getty Images)

Anthropic says its AI accidentally hacked three companies during safety tests

Upcoming Events

Sep 15 2026

Federal Cyber Defense Breakfast

Ritz-Carlton, Pentagon City

Sep 21 2026

Defense Tech Week

Washington, D.C.

Sep 22 2026

DefenseTalks

Ritz-Carlton, Pentagon City

Oct 13 2026

Rubrik Public Sector Summit: Building Resilience for the AI Era

Virtual Event

Nov 5 2026

Threat Response Forum

Ritz-Carlton, Pentagon City