Enterprise Cyber Alert

CISA Advisories

• CVD Best Practices Guidance: CISA and NSA released guidance on establishing coordinated vulnerability disclosure programs for...

• Economic stakes confirmed: New modeling puts extreme CI attacks at natural-disaster scale—healthcare up to $62B, cross-sector events $24–47B.
  -...

AI is slashing the window between disclosure and exploitation to as little as nine hours, forcing organizations into a frantic patch race.

• Microsoft...

Origin Energy, Australia’s largest energy retailer, is investigating unauthorized access to customer data including names, addresses, dates of birth,...

• March 28–April 12, 2026: Unauthorized access to EY’s IT service platform allowed download of client tax documents containing SSNs and...

Riskonnect's integration with Argos Risk embeds continuous vendor intelligence directly into third-party risk workflows, allowing organizations to...

• AI-driven threats hit new highs with 26% YoY attack growth and a 24-hour median exploit window
• MDR delivers detection, investigation and response...

Financial account and payment card information was exposed in the Questo data breach impacting 369 residents. The company responded by engaging...

North Korean and Russian actors demonstrate coordinated, multi-vector threats to enterprises and critical systems.

• North Korean campaign: Famous...

RHEL AI 3.5 users across x86_64, s390x, ppc64le, and aarch64 must apply RHSA-2026:42875 to address multiple important CVEs in the aom library. The update covers affected aom packages and is required for the Red Hat AI platform.

On July 16, Hugging Face disclosed a production breach executed entirely by an autonomous AI agent that exploited dataset code-execution flaws,...

Forescout’s 2026H1 Threat Review flags sharp rises in enterprise risk:

• Vulnerabilities climbed 51% to 37,137, with over half high or critical...

• 95% of enterprise teams discover high or critical vulnerabilities outside scheduled tests, yet only 15% describe their validation programs as...

Critical gaps in federal oversight leave US aviation networks exposed, according to a new GAO audit.

• FAA fully implemented just three of seven...

• Manufacturers suffered 27.7% of global cyberattacks in 2025, the highest share across industries.
• IT/OT convergence creates confusion as staff...

Two major launches signal AI-driven vulnerability discovery as a priority for governments and big tech.

• Gold Eagle clearinghouse unites Treasury,...

Three major healthcare organizations disclosed breaches in July 2026, underscoring persistent sector vulnerability.

• DentaQuest suffered a...

Venture capital and strategic partnerships are rapidly building a new defense category for autonomous AI systems.

• Neo Security raised $100M from...

Louisiana receives $258,668 as part of a 42-state settlement resolving bankruptcy claims against 23andMe after its 2023 breach exposed 6.9 million...

Ransomware operators face shrinking profits as organizations increasingly refuse payments, bolstered by stronger backups, training, and incident...