Latest news
A BDO survey of over 200 U.S. directors finds that 80% say their board has a clear governance framework for AI and cybersecurity risk, and 88% are confident in executives' ability to integrate emerging technologies and mitigate cyber risk. However, 57% cite accelerating AI and cybersecurity changes as a top concern, and 45% say cybersecurity is a needed skill, up from 35% in 2025. About a quarter say crowded agendas have deprioritized cybersecurity and AI oversight.
Nvidia confirms the acquisition of open-source AI platform Hugging Face for $12.9 billion, marking its second-largest deal after acquiring Groq assets. The move aims to expand the developer community and strengthen its presence in the AI operating system space. Analysts note that the deal may bring more security resources to Hugging Face, enhancing the reliability and model evaluation capabilities that enterprise CIOs rely on, but it will have little impact on enterprise costs in the short term, with long-term attention needed on changes in bargaining power.
OpenAI announced on Thursday that it will commit $1 billion to provide subsidized access and training for frontline cyber defenders, helping small IT security teams use cutting-edge AI to protect critical infrastructure. The project, named Daybreak for Frontline Defenders, will first run a six-month pilot in partnership with MS-ISAC and will cover areas such as healthcare and open-source maintainers.
Blackpoint Cyber announced the appointment of Erin Whitmore as Head of the Adversary Pursuit Group (APG). Whitmore, a former CIA Operations Officer with experience across the Defense Intelligence Agency, National Geospatial-Intelligence Agency, and the Office of the Director of National Intelligence, will lead threat research and intelligence, bridging frontline insights from the B-ROC into actionable guidance.
On June 18, 2026, SafeLogic released CryptoComply™ Core and Mobile v4, providing FIPS 140-3 validated classical cryptography and NIST CAVP validated post-quantum algorithms, supporting CNSA 2.0 and hybrid TLS 1.3, and offering different versions for Common Criteria and FIPS compliance.
Two chained vulnerabilities (CVE-2026-83548 and CVE-2026-83549) have been disclosed in SonicWall SMA1000 series appliances, potentially leading to remote code execution. The former is a server-side request forgery vulnerability with a severity score of 10, while the latter is an OS command injection vulnerability with a score of 7.8. SonicWall has confirmed exploitation in the wild, and CISA has added them to its Known Exploited Vulnerabilities catalog, mandating federal agencies to remediate by Saturday.
US law enforcement agencies and cybersecurity company CrowdStrike took joint action on Monday to dismantle the Russian Sality botnet, which had been operating for 23 years. The botnet had been in continuous operation since 2003, involving criminal activities such as spam, credential theft, DDoS attacks, and cryptocurrency hijacking. During this operation, US authorities seized related domains, CrowdStrike assisted in disconnecting infected devices from the network, and investigators from Bulgaria, Hungary, and Romania also carried out simultaneous crackdowns in their respective jurisdictions.
A new survey released by the Institute for Security and Technology (IST) reveals that the U.S. government is inadequately equipped to verify claims made by frontier AI labs about their products, and its reliance on industry expertise may pose risks of regulatory capture. The 111 national security respondents generally believe that speed and legal frameworks are the main barriers to addressing AI threats, while AI has recently helped attackers more than defenders.
On June 23, 2026, Courser announced two executive appointments: Chad Polich as Chief Financial Officer and William Norton as Executive Vice President of Marketing. They will be responsible for building financial planning and analysis capabilities, and for communicating the value of AI and modern IT to small and medium-sized enterprises, respectively, reporting directly to CEO Reed Wilson.
On June 23, 2026, Optery released the 2026 Corporate Social Engineering Survey Report (The Data Behind the Deception), based on a survey of 421 cybersecurity leaders at large enterprises. The report shows that data brokers and people-search websites have become primary sources of intelligence for attackers, with nearly nine in ten respondents reporting an increase in targeted social engineering attacks over the past 12 months, and about three-quarters experiencing credential breaches. Companies are making the reduction of employees' public data a top defense priority and investment focus.