jain.com — data centers, connectivity and security, analyzed daily

Tag: ransomware

  • See’s Candies Data Breach Draws Class Action Investigation

    See’s Candies Data Breach Draws Class Action Investigation

    TL;DR · 30-second read

    The Short Version

    See’s Candies, the boxed-chocolate maker sold in shops across the country, told California regulators on August 13, 2026 that its computer systems were broken into. It has written to the people affected.

    A law firm that brings group lawsuits for consumers says it is now looking into whether those people have a claim. Published accounts describe a ransomware attack, in which criminals lock up or steal a company’s files and demand money.

    See’s has not said publicly how many people were affected, when the break-in happened, or exactly what was taken.

    Edelson Lechtzin LLP, a national class action law firm with offices in Pennsylvania and California, announced on September 5, 2026 that it is investigating data privacy claims arising from a cybersecurity incident at See’s Candies, Inc. The firm said See’s reported the incident to the California Attorney General’s Office on August 13, 2026 and notified affected individuals directly, and that reports attribute the incident to a ransomware attack.

    According to the firm’s announcement, the official notice did not detail the categories of information involved, the date of the breach, or the total number of individuals affected. Reports cited in the announcement indicate the exposed data may have included names, Social Security numbers, addresses, payment information, phone numbers, account records such as service plans and payment histories, and internal business records belonging to both customers and employees. The firm is offering free case evaluations and has not stated that a complaint has been filed.

    Executive Summary

    The immediate news is narrow: a plaintiffs’ firm has opened an intake investigation twenty-three days after See’s Candies filed a breach notice with California regulators. No lawsuit has been announced, no class has been certified, and See’s has not publicly confirmed the scope of the incident. On its own, an investigation announcement is a client-recruitment step, not a finding of fault.

    The wider significance is structural. California’s breach-notification regime turns a private security failure into a public, searchable record within days, and that record is monitored continuously by firms that specialize in consumer data litigation. For any company holding consumer and employee records at scale, the interval between incident disclosure and legal exposure is now measured in weeks, not quarters — regardless of how the intrusion happened or how well the response was run.

    That compresses the timeline for decisions that used to belong to the security team alone. Data retention, network segmentation, vendor contracts and notification readiness now determine litigation cost and regulatory posture, which makes them governance questions with security implementations rather than security questions with governance footnotes.

    From Regulator Filing to Legal Investigation in Three Weeks

    California’s breach-notification statute requires a business to submit a sample copy of its consumer notice to the Attorney General when more than 500 California residents are notified. Those submissions are published in a public, searchable database. It is an accountability mechanism — and it is also, in practice, a lead list. Firms that litigate consumer privacy claims monitor it as a matter of routine, which is how a filing dated August 13 produces an investigation announcement dated September 5.

    It is worth being precise about what that announcement is. An investigation is the intake phase: a firm publicizes an incident, collects contacts from people who received notification letters, and evaluates whether a viable class claim exists. The release carries an attorney-advertising notice, which is standard and required in some jurisdictions. None of that says anything about whether See’s Candies handled its data well or badly. It reflects the mechanics of the system, not an assessment of the company.

    The practical lesson for operators is that the notification decision is now also a litigation decision. The letter that satisfies a statutory duty simultaneously creates a public record, a plaintiff pool and a timeline that opposing counsel will scrutinize. Companies that draft breach notices under time pressure, without counsel who understand how the resulting document will be read a year later, hand away ground they cannot recover.

    What Is Substantiated — and What Is Not

    The announcement is candid about the limits of the underlying record: it states that the official notice did not detail the specific categories of information involved, did not disclose the date of the breach, and did not disclose the total number of individuals affected. Everything in the enumerated data list — Social Security numbers, payment information, account records — is presented as what reports indicate the breach “may have” involved. That is a materially different claim from a company confirming what was taken, and readers should hold it as the conditional statement it is.

    One item in that list deserves a flag. “Service plans and payment histories” is billing vocabulary at home in telecommunications, utilities or subscription services; it is not an obvious fit for a confectionery retailer, and See’s has not confirmed holding such records. It reads like language carried over from a general breach-notification template. Distinguishing template language from confirmed fact is not a small point when the categories drive the legal theory.

    The distinctions matter operationally too, because different data types imply different compromised systems. Social Security numbers at a retailer almost always live in human-resources and payroll platforms, not in store systems — so their involvement would point at corporate infrastructure rather than the point of sale. Payment card data points instead at commerce and transaction systems and pulls in contractual obligations under the payment card industry’s security standard, a private framework enforced by banks and card networks rather than by regulators. Until See’s specifies the categories, the blast radius of this incident cannot be assessed from the outside.

    The Economics That Make Consumer Breaches Expensive

    Breach cost is rarely dominated by the intrusion itself. It accumulates across forensic investigation, notification mailing, credit-monitoring offers, defense fees, regulatory engagement and settlement — and most of those line items scale with the number of people notified, which is precisely the figure See’s has not disclosed.

    California adds a specific multiplier. The state’s consumer privacy law gives residents a private right of action when unencrypted, unredacted personal information — a name combined with an identifier such as a Social Security number — is exposed through a business’s failure to maintain reasonable security. Statutory damages run from $100 to $750 per consumer per incident, or actual damages if greater. Claims for statutory damages carry a written-notice and cure requirement, so the path is not automatic, but the arithmetic explains why class size, not intrusion sophistication, tends to determine a case’s value.

    There is also a second, often underestimated class. Employees whose payroll records are exposed have a different relationship to the company than customers do, and their claims — negligence, breach of implied contract, state wage and privacy statutes — are typically stronger, because employees have no practical choice about handing over a Social Security number. A retailer that thinks of a breach as a customer problem may be looking at the smaller half of its exposure.

    Why This Is a Governance Question, Not an IT Ticket

    Ransomware economics changed several years ago. Encryption-only attacks were survivable with good backups; the prevailing model now combines encryption with data theft, so restoring systems resolves the outage but not the exposure. “We recovered without paying” is an operational win that leaves the legal and notification obligations entirely intact. Any board briefing that treats recovery time as the headline metric is measuring the wrong thing.

    For consumer brands, the valuable data is frequently not where the brand lives. It sits in payroll processors, loyalty platforms, e-commerce back ends, marketing clouds and customer-service tools — much of it operated by third parties under contracts that determine who investigates, who notifies, who pays and how fast anyone finds out. Vendor due diligence, breach-notification clauses and indemnity terms are therefore security controls in commercial clothing, and they are negotiated by procurement and legal, not by the security operations team.

    The controls that actually reduce exposure are unglamorous and mostly organizational: retention schedules that delete records the business no longer needs, because data you do not hold cannot be stolen; segmentation that keeps corporate and human-resources systems off the same flat network as store and commerce infrastructure; immutable or offline backups; and rehearsed notification workflows with counsel in the room before an incident, not after. Each requires budget authority and cross-functional mandate. That is what makes third-party retail data handling a governance problem — the cost lands in legal, brand and regulatory columns, while the fix has to be funded and enforced somewhere else entirely.

    Background

    See’s Candies was founded in Los Angeles in 1921 and has been owned by Berkshire Hathaway since 1972, selling boxed chocolates through company retail shops, mail order and online channels. The release describes it simply as a retail company serving customers nationwide. Like most consumer retailers of its size, it holds two distinct pools of sensitive data: customer records tied to purchases and shipping, and employee records tied to payroll and benefits — typically in separate systems, often operated in part by outside providers.

    The legal environment around those records has hardened considerably. Every US state now has a breach-notification statute, California publishes submitted notices in a public database, and its consumer privacy law added a private right of action with statutory damages for breaches involving unencrypted personal information. That combination — mandatory public disclosure plus a pre-set damages figure — supports a specialized plaintiffs’ bar that monitors regulator filings and moves within days of them. Investigation announcements of the kind issued here are a routine, high-volume feature of that ecosystem, and their appearance says more about the disclosure regime than about any individual company’s security practices.

    Sources

    Source: See’s Candies Data Breach: Edelson Lechtzin LLP Launches Investigation Into Exposure of Personal Information — a September 5, 2026 announcement from class action firm Edelson Lechtzin LLP stating that See’s Candies, Inc. reported a data security incident to the California Attorney General’s Office on August 13, 2026 and that the firm is evaluating potential claims on behalf of affected individuals. The release may be considered attorney advertising in some jurisdictions.

  • Hack-Back Memo Puts State Hackers Out of Scope, Despite Attacks on 45 Water Systems

    Hack-Back Memo Puts State Hackers Out of Scope, Despite Attacks on 45 Water Systems

    TL;DR · 30-second read

    The Short Version

    The American government will now let approved private companies break into, and even wreck, computers run by foreign criminal hacking gangs. In March, officials said they would not do this.

    Each company must set aside at least $1 million, which it loses if it breaks the rules. Every attack needs written approval from the Justice Department and Homeland Security.

    The catch: hackers working directly for a foreign government are off-limits. That matters because the order came after suspected Iranian attacks on water suppliers in 45 American towns.

    Tom’s Hardware reported that President Donald Trump signed a presidential memorandum on August 12 creating the first US program that lets vetted private companies conduct offensive cyber operations against foreign cybercrime organizations. These include operations that destroy data and systems. Participating firms must post at least $1 million in escrow, which they forfeit if they break program rules. Every operation needs written approval from Department of Justice and Department of Homeland Security officials.

    A National Coordination Center will run the program. Implementation guidance is due within 60 days. The policy reverses public statements administration officials made in March.

    Executive Summary

    The memorandum authorizes two kinds of activity. “Cyber Surveillance Operations” means getting into foreign systems without permission to gather intelligence while staying undetected. “Cyber Effects Operations” means disrupting or destroying those systems and their data. Both large firms and smaller specialists will be eligible. Participants may also sign commercial deals with other private firms and with state and local agencies to receive threat data and propose operations based on it.

    This matters for two reasons. First, it turns offensive cyber activity, long treated as a government monopoly in the US, into something a licensed private sector can do under supervision. Second, its target definition is narrow. A group qualifies as a target unless “clear intelligence exists” that it is part of a foreign government or wholly run at a government’s direction. So the program is aimed at criminal ransomware crews, not at the state-directed actors behind many attacks on physical infrastructure. For operators of water, power and data center infrastructure, that distinction shapes what the program can and cannot do for them.

    The Target Line Runs Straight Through Critical Infrastructure

    The memo arrived after suspected Iranian cyberattacks on water suppliers in 45 US municipalities. It also followed a CISA alert about Iranian hackers targeting programmable logic controllers (PLCs), the small industrial computers that open valves, run pumps and switch equipment at water and energy companies. Yet state-directed hackers fall outside the program’s own definition of a valid target. Private operators could go after a ransomware crew that encrypts a utility’s billing systems. They could not go after a government-run unit tampering with its treatment-plant controllers.

    The line is drawn deliberately. Ransomware crews that operate with a state’s tolerance but not under its formal control stay within scope, a description that fits much of the Russia-based ransomware ecosystem. Once an actor is clearly an arm of a foreign state, the matter stays with government. For utility and industrial security teams, the practical conclusion is that nothing changes for defending operational technology against nation-state intrusion. Segmentation, monitoring and incident response for control systems remain their responsibility. The new program targets the financially motivated threat, not the geopolitical one.

    There is also an ambiguity problem. Eligibility turns on whether “clear intelligence” ties a group to a government, and in practice attribution is often contested and slow. A group judged criminal today may later prove to have state links. That question will matter a great deal to any firm whose operation lands on the wrong side of the line.

    A $1 Million Bond on a Destructive Capability

    The escrow requirement is the program’s main economic control. A minimum of $1 million, forfeited for rule-breaking, is a meaningful commitment for a small specialist firm. Whether it is proportionate to the harm a destructive operation could cause is a separate question. Wiping servers that turn out to be shared with innocent third parties could produce losses well above that figure. The minimum works as a deterrent and an entry filter. It is not obviously a compensation fund.

    The commercial provisions may matter more for the market’s shape. Participants can contract with other private firms and with state and local agencies, receive threat data and propose operations based on it. That creates a potential new service line for security vendors: selling disruption, not just detection. Two background facts point the same way. Congress earmarked $1 billion for offensive cyber operations in last year’s spending bill. Google said in August last year that it was preparing to take part in disruptive actions against cybercriminals. Large platform companies with deep telemetry into criminal infrastructure look like natural participants. Smaller firms may compete on specialized tasks, as the eligibility rules anticipate.

    Escalation, Legal Exposure and a Classified Annex

    DOJ and DHS officials cannot approve operations likely to cause loss of life or amount to an armed attack under international law. The memo does not prohibit such operations outright, however. Approval authority for them sits in a classified annex. Companies weighing participation, and the public, therefore cannot see the full rulebook for the highest-risk cases.

    Personnel face exposure too. Jake Williams, vice president of research and development at Hunter Strategy, told TechCrunch that Americans involved in these operations “could easily be classified as non-uniformed combatants while traveling overseas.” That is a risk that falls on individual employees, not only on their employers, and firms will need to account for it in staffing, travel policy and insurance.

    The speed of the reversal adds uncertainty. In March, Thomas Lind, then a senior adviser at the Office of the National Cyber Director, said the administration had no plans to authorize private offensive operations: “We’re not interested in fighting pirates with pirates.” National Cyber Director Sean Cairncross said the same week that companies running offensive campaigns were not what the administration meant when it asked industry for help. A policy that changed direction within months could change again, which makes long-term investment in offensive capability a harder bet.

    Collateral Risk Is Written Into the Rules

    The memo requires any company that unintentionally hits a US person or a system on US soil to halt operations and notify the government immediately. That clause concedes that operations aimed abroad can land at home. Criminal groups commonly route activity through rented servers and compromised machines owned by unrelated parties. Hosting providers, cloud platforms and data center operators therefore have a direct interest in how approvals weigh that possibility, and in how quickly they would be told if their infrastructure were affected.

    Defenders more broadly face a quieter risk: retaliation. A criminal group whose systems are destroyed by a US firm may not distinguish between that firm and US targets generally. The memo’s safeguards govern how operations are approved. They do not change who absorbs the response.

    Background

    For decades, US law and policy have treated breaking into someone else’s computer as illegal, even when that someone is an attacker. Offensive cyber operations have been reserved for government agencies such as the military and intelligence community. Proposals to let private victims “hack back,” including the Active Cyber Defense Certainty Act introduced in Congress in 2017, never became law. Critics warned of misattribution, collateral damage and escalation.

    Pressure grew as ransomware crews, many operating from jurisdictions beyond the reach of US law enforcement, hit hospitals, pipelines and municipalities. Some large technology firms have already worked with authorities to take down criminal infrastructure, and Google said last year it was preparing to take part in disruptive actions. The August 12 memorandum is the first formal framework for private firms to go further, under federal supervision.

    Sources

    Source: White House authorizes private companies to launch ‘hack-back’ cyberattacks that destroy data and systems, targeting foreign cybercrime organizations. Tom’s Hardware on the August 12 presidential memorandum creating a supervised private offensive cyber program.

  • Gunra’s 10 p.m.–6 a.m. Pattern Shows Why Edge Appliance Logs Belong Off the Box

    Gunra’s 10 p.m.–6 a.m. Pattern Shows Why Edge Appliance Logs Belong Off the Box

    TL;DR · 30-second read

    The Short Version

    Government agencies in the United States and South Korea have jointly warned about a criminal hacking group called Gunra. It breaks into organizations, copies their private files, locks everything up, then demands payment, threatening to publish or sell the stolen files if victims refuse.

    Its main way in is the security equipment that lets employees log in to work networks from home. Once inside, it erases its tracks and works overnight, between 10 at night and 6 in the morning.

    Hospitals, banks, utilities and universities are among its targets. One bright spot: a flaw in one version lets some victims unlock files without paying.

    Industrial Cyber reported that the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), the Department of Defense Cyber Crime Center (DC3), the National Security Agency (NSA), the US Secret Service and South Korea’s National Police Agency (KNPA) released a joint advisory Monday on Gunra, a ransomware operation derived from leaked Conti source code. Gunra steals data, encrypts systems and threatens to publish or sell the stolen data on its leak site, with victims listed across the Americas, Europe, the Middle East, Africa and the Asia-Pacific region.

    The advisory says Gunra gets in mainly by exploiting known flaws in internet-facing firewall and VPN appliances, including two authentication-bypass vulnerabilities in specific FortiOS and FortiProxy versions (CVE-2024-55591 and CVE-2025-24472), deletes logs to hide, and works primarily between 10 p.m. and 6 a.m.

    Executive Summary

    Six US and South Korean agencies have published a detailed account of how Gunra ransomware operates, from initial access to extortion. Gunra emerged in April 2025, added a Linux variant by mid-2025, and by early 2026 had become a ransomware-as-a-service operation that recruits affiliates on dark web forums. Its leak site lists victims in more than ten sectors, including healthcare, finance, utilities, transportation and government.

    For infrastructure operators, the advisory’s significance is where the attack begins and how it hides. Entry runs through the edge: firewall and VPN appliances with known vulnerabilities, default credentials or weak access controls. Once inside, the actors delete system and network access logs, clear command history, work overnight and run an encryptor that produces no observable network indicators. That combination leaves appliance logs held somewhere the attacker cannot reach, and watched after hours, among the most useful signals a defender has.

    The advisory also contains a rare point in defenders’ favor: as of March 2026, Gunra’s Linux variants use weak, time-seeded randomness that lets encryption keys be reconstructed and files recovered without payment, though that does nothing about data already stolen.

    The Front Door Is the Security Appliance Itself

    The most consequential detail for infrastructure operators is how Gunra gets in. The FBI observed the group obtaining initial access primarily by exploiting known vulnerabilities in internet-facing devices, including firewall and VPN appliances, and named two authentication-bypass flaws in specific FortiOS and FortiProxy versions: CVE-2024-55591 and CVE-2025-24472. An authentication bypass lets an attacker reach functions that should require a login without valid credentials. South Korea’s National Police Agency separately observed Gunra exploiting credential exposure and Secure Shell (SSH) access-control weaknesses on internet-facing VPN gateways.

    The intrusion the agencies describe shows how modest the first step can be: default credentials on an SSL-VPN appliance, the encrypted gateway remote staff use to reach internal systems, with no account lockout to stop repeated guessing. After compromising an administrator workstation, the actors reached the appliance’s administrative console, found an unused account with access to both external and internal networks, and modified it to skip a mandatory password change, creating a persistent backdoor that looks like an ordinary account.

    For data center, colocation and network operators, firewalls and VPN concentrators sit at the boundary of nearly everything they run, including remote administration paths into their own environments. Because both named CVEs are known vulnerabilities, the defense here is patch cadence and asset inventory rather than anything exotic. The practical test is whether an operator can list every internet-facing appliance it owns, its firmware version and every account configured on it, including dormant ones.

    Why Edge Appliance Logs Belong Off the Box

    Gunra is built to leave few traces where defenders usually look. According to the advisory, the actors delete system and network access logs and clear command history while active, conduct reconnaissance and encryption primarily between 10 p.m. and 6 a.m., and run the encryptor as a self-contained binary that produces no observable network indicators. Data is exfiltrated before encryption, so by the time files lock, the extortion leverage has already left the network.

    Taken together, those facts narrow the useful evidence to a short list, and the advisory’s own incident-response guidance points at it: review network appliance logs for anomalous privileged activity and audit file creation to detect exfiltration. Logs that exist only on the compromised appliance or host are exactly what the actors delete. Logs forwarded in near real time to a separate, access-controlled collector survive that deletion, and they only help if someone, or an automated rule, is watching during the overnight window the group favors.

    This falls hardest on organizations that run round-the-clock infrastructure with thin overnight staffing, and on managed service providers that administer appliances for many customers. An after-hours login to a VPN administrative console, a dormant account suddenly modified, or a change to appliance traffic controls are low-volume events that are straightforward to alert on, provided the record sits where the attacker cannot erase it. None of this is new practice, but Gunra’s combination of edge entry, log wiping and night-time activity turns off-device logging from a best-practice line item into the difference between catching the intrusion before encryption and discovering it from a ransom note.

    MFA and Credentials Fail at the Seams

    The advisory is a reminder that multi-factor authentication (MFA) protects a login step, not the systems behind it. Against one victim, Gunra modified files on the virtual desktop infrastructure (VDI) authentication portal, the gateway to remotely hosted desktops, so it would accept a designated one-time password. The actors also manipulated SSL-VPN traffic controls to harvest credentials and session cookies, hijacked sessions to impersonate legitimate users, and entered the internal VDI environment with stolen session tokens.

    Inside, the playbook targets the identity core. Using Impacket libraries over SMB, the Windows file-sharing protocol, the actors moved laterally to the VDI authentication server, the Active Directory server that governs who can access what, and IT staff desktops. They ran secretsdump.py against the NTDS database where domain controllers store password hashes, enabling pass-the-hash and pass-the-ticket attacks that reuse stolen credentials without cracking them. At one victim they reached a Hiware system access control server over SSH and stole the symmetric key needed to decrypt enterprise server credentials stored in its database.

    The operational lesson is that authentication portals, privileged-access systems and key stores are high-value targets in their own right and warrant the same integrity monitoring and segmentation as production systems. The agencies’ recommendations map onto each step: least-privilege administrative rights, audits for unrecognized accounts, MFA on all services with emphasis on VPNs and webmail, network segmentation to restrict lateral movement, and disabling command-line and scripting activity where possible.

    A Flaw in the Linux Encryptor, With Limits

    One finding cuts in defenders’ favor. As of March 2026, the advisory says, Gunra’s Linux ELF variants use a weak pseudorandom number generator seeded with predictable system time, allowing defenders to mathematically reconstruct keys from file timestamps and recover files without paying. That is relevant to infrastructure operators because Linux underpins much of the server estate, and Gunra introduced its Linux variant in mid-2025 as it moved toward cross-platform targeting.

    The limits matter. The weakness is described for the Linux variants as of a specific date, and ransomware-as-a-service operations, which rent their tooling to affiliates, can ship revised builds. Key recovery also does nothing about stolen data: the threat to publish or sell it stands regardless. Offline, immutable backups kept in a physically separate, segmented location, and tested, remain the control that makes recovery independent of both the attacker’s cooperation and the attacker’s mistakes.

    Background

    Gunra traces its code to Conti, a prolific ransomware operation whose source code leaked in 2022 and has since been reused by several groups. Gunra appeared in April 2025 focused on Windows systems, introduced a Linux variant by mid-2025, and by early 2026 had adopted a ransomware-as-a-service model, in which core developers supply the malware and infrastructure while recruited affiliates carry out intrusions in exchange for a share of ransoms.

    Joint advisories from US agencies and foreign partners are a standard way of publishing attacker techniques, indicators and mitigations for a specific ransomware family. They typically align recommendations with CISA and NIST’s cross-sector cybersecurity performance goals, a baseline of practices such as patching internet-facing systems, maintaining offline backups, enforcing multi-factor authentication and segmenting networks.

    Sources

    Source: Gunra ransomware expands globally as US, South Korean agencies warn of data theft, encryption and extortion tactics — Industrial Cyber’s report on the joint FBI, CISA, DC3, NSA, Secret Service and Korean National Police Agency advisory on Gunra ransomware.

  • CISA’s Coming 72-Hour Rule Makes AI Data Center Incident Response a Contract Term

    CISA’s Coming 72-Hour Rule Makes AI Data Center Incident Response a Contract Term

    TL;DR · 30-second read

    The Short Version

    The US government’s cybersecurity agency plans to finish new rules in September 2026. They will require essential services, likely including hospitals, banks and power companies, to report serious hacks within three days and any ransom paid to hackers within one day.

    The catch: many of these organizations run their computers inside buildings owned by someone else, including the huge data centers being built for artificial intelligence. A customer can only meet a three-day deadline if the building’s operator tells it about a break-in fast. Expect the contracts between them to get much stricter.

    The Cybersecurity and Infrastructure Security Agency (CISA) expects to issue its final rule under the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) in September 2026, Hunton Andrews Kurth reported on July 17. The rule will require covered critical-infrastructure entities to report covered cyber incidents to CISA within 72 hours and ransom payments within 24 hours.

    The date comes from a preview of the 2026 Unified Agenda, the federal government’s schedule of planned regulatory actions. CISA missed the statutory October 2025 deadline, then set an internal target of May 2026. Town halls originally planned for March and April were postponed by a lapse in Department of Homeland Security funding and held June 15 through 18, drawing more than 1,200 stakeholders over four days.

    Executive Summary

    CIRCIA is the first cross-sector federal mandate requiring critical-infrastructure operators to report cyberattacks to a single agency. After a proposed rule in April 2024 and more than a year of slippage, a final rule is now expected in September 2026, with the two headline obligations unchanged: 72 hours to report a covered cyber incident and 24 hours to report a ransom payment.

    For the data center and cloud industry, the most immediate consequence may come less from whether operators are themselves covered and more from their customers’ obligations. Hospitals, banks, utilities and other covered entities increasingly run critical systems in third-party facilities and clouds, and the statute explicitly contemplates incidents that begin with a compromised hosting provider. A customer’s 72-hour clock therefore depends on how quickly and completely its provider tells it what happened, which turns incident notification into a negotiated contract term.

    The practical window is short. Organizations that may be in scope should assess coverage against the proposed criteria, align incident response plans with the reporting deadlines, and review provider and customer agreements before the final text lands.

    A Tenant’s 72-Hour Clock Runs Through Its Data Center

    Under CIRCIA, the reporting duty sits with the covered entity: the hospital system, bank, utility or other organization that meets the final rule’s criteria. The 72-hour window runs from the point that entity reasonably believes a covered incident has occurred. Much of that entity’s computing, however, no longer sits in buildings it owns. It runs in colocation facilities, where a tenant rents space, power and cooling inside someone else’s building, and in public and GPU clouds, where it rents the computers themselves. The 2022 statute anticipates this: among the incidents the rule is meant to capture, it lists unauthorized access facilitated through the compromise of a cloud service provider, managed service provider or other third-party data hosting provider.

    That places the provider’s detection and notification speed directly on the customer’s compliance path. A covered tenant cannot report what it has not been told, and it needs enough detail from its provider (what was accessed, when and how) to file a report that meets CISA’s content requirements. Breach-notification clauses are not new, but a binding federal deadline gives customers a concrete number to negotiate against: notification windows well inside 72 hours, named incident contacts, and obligations to share forensic detail. If a provider is itself swept in by the final size- or sector-based criteria, it will be running its own clock in parallel with its customers’.

    The AI buildout sharpens the problem. New AI capacity is often delivered in layers: a facility owner, a GPU cloud or managed-infrastructure provider operating inside that facility, and the enterprise or model developer consuming the compute. Each layer is a hand-off in the notification chain, and each hand-off consumes hours of the covered entity’s window. Operators whose customer lists include regulated industries should expect incident-notification terms to be negotiated with the same seriousness as power and uptime commitments.

    Three Targets, One Missed Deadline, No Final Text Yet

    The timeline explains why caution is warranted. The statute required a final rule by October 2025. CISA missed that date and set an internal target of May 2026, citing the volume of comments on the April 2024 proposal and an intent to streamline requirements. Town halls meant to inform the final text were then pushed from March and April into mid-June by a Homeland Security funding lapse. September 2026 is the third target date.

    CISA has signalled that it wants to streamline the rule but has not said how. Streamlining could mean narrower coverage, fewer required data fields, clearer thresholds for what counts as a reportable incident, or some combination. Until the text is published, the April 2024 proposal remains the best available guide, which is why the practical advice is to assess coverage against its proposed sector-based and size-based criteria rather than wait. The turnout of more than 1,200 stakeholders at the June sessions suggests how many organizations believe they may be affected.

    Unified Agenda dates are projections, not commitments, and this rule has slipped before. Publication of a final rule is also not the same as the start of reporting obligations; the effective date and any transition period will matter as much as the publication date. Operators should treat September as a planning anchor, not a certainty.

    The 24-Hour Ransom Report Tests Governance, Not Just Tooling

    The 24-hour window for reporting a ransom payment is the tighter of the two deadlines. Ransom decisions typically involve executives, legal counsel and cyber insurers, not the security team alone. A one-day reporting clock after payment means the documentation behind that decision (who approved it, how much was paid, to whom, and why) has to be assembled as the decision is made, not reconstructed afterward. Organizations without pre-assigned authority and a documented escalation path will find the deadline hard to meet.

    CIRCIA also lands on top of existing obligations. Public companies already face the SEC’s requirement to disclose material cybersecurity incidents within four business days of determining materiality, and several sector regulators have their own notification rules. The statute provides an exception where an entity reports substantially similar information to another federal agency under an agreement with CISA, but how widely that exception applies will depend on agreements not yet described. A data center operator serving customers across several sectors may find that its customers each face a different combination of deadlines, and that each will expect its provider’s notification terms to fit.

    The intended payoff is real. CISA’s stated purpose is to deploy help to victims quickly, analyze reports across sectors for patterns, and share warnings with other defenders. For infrastructure operators, better cross-sector visibility into attack trends is a genuine benefit; the cost is process discipline that has to be in place before the first incident, not after.

    Background

    The Cybersecurity and Infrastructure Security Agency is the component of the Department of Homeland Security responsible for coordinating the protection of US critical infrastructure against cyber and physical threats. Before CIRCIA, cyber incident reporting to the federal government was largely voluntary or governed by a patchwork of sector-specific rules. CIRCIA, signed in March 2022, directed CISA to create a single cross-sector reporting regime, and CISA published its proposed rule in April 2024, setting out proposed coverage criteria, the scope of reportable incidents, and required report contents.

    Data centers and cloud platforms sit underneath much of that critical infrastructure, hosting systems for healthcare, finance, energy and government customers. As AI demand drives new capacity, more of those workloads run in shared facilities and layered provider arrangements, which is why the reporting rules matter to operators whether or not they end up directly covered.

    Sources

    Source: CISA Plans to Finalize Cyber Incident Reporting Regulations in September 2026 (Hunton Andrews Kurth), on CISA’s expected timeline for the CIRCIA final rule and its 72-hour and 24-hour reporting requirements.

  • JadePuffer: What the First Fully LLM-Driven Ransomware Attack Signals

    JadePuffer: What the First Fully LLM-Driven Ransomware Attack Signals

    Security publication Dark Reading has reported on JadePuffer, an incident it characterizes as the first complete ransomware attack driven end-to-end by a large language model (LLM) — the AI technology behind chatbots and coding assistants. The report, published July 5, 2026, frames JadePuffer as a milestone: not malware that merely used AI for one task, but a campaign in which the AI itself reportedly orchestrated the attack.

    Executive Summary

    According to the Dark Reading report, JadePuffer represents a threshold the security industry has warned about for several years: ransomware in which a large language model does not just assist a human operator but drives the attack itself. If the characterization holds up, the distinction matters enormously. AI-assisted crime scales with the number of human criminals; AI-driven crime scales with compute.

    Details available at publication remain limited to the report’s central claim, so the responsible reading is twofold. First, the trajectory it describes is consistent with what researchers have documented publicly — proof-of-concept AI-powered ransomware and confirmed criminal misuse of commercial AI tools both surfaced well before this report. Second, “first” and “fully LLM-driven” are strong claims that deserve independent technical corroboration before the industry treats them as settled fact. Either way, the operational lesson for enterprises and infrastructure operators is the same: plan for adversaries whose speed and volume are no longer bounded by human labor.

    From AI-Assisted to AI-Driven Is a Difference in Kind

    Criminals have used AI for years to write phishing emails, debug malicious code, and research targets — but a human stayed in the loop, making decisions at each step. What the JadePuffer report describes is categorically different: an LLM reportedly executing the ransomware kill chain — reconnaissance, intrusion, data theft, encryption, and extortion — as an autonomous agent. In practical terms, that is the criminal application of the same “agentic AI” pattern legitimate businesses now use to automate customer service and software development.

    The precedent did not appear from nowhere. Security researchers had previously demonstrated proof-of-concept ransomware that used an LLM to generate its attack logic on the fly, and AI vendors have publicly disclosed catching threat actors abusing their models for extortion operations. JadePuffer, as reported, would move that trajectory from lab demonstrations and AI-augmented crews to a fully automated operation in the wild.

    The Economics Shift in the Attacker’s Favor

    Ransomware has always been constrained by skilled labor. Ransomware-as-a-service — the criminal franchise model where developers rent tools to affiliates — was itself an answer to that constraint, and it still required capable humans to run intrusions. An LLM-driven attack removes that bottleneck. The marginal cost of one more victim falls toward the price of compute and API calls, and a single operator could in principle run campaigns that once required a team.

    That reshapes the target landscape. Human-operated ransomware gravitates toward victims worth the effort — large enterprises, hospitals, critical infrastructure. Automation makes small and mid-sized organizations, historically protected partly by being unprofitable to attack individually, economically viable at scale. It also compresses time: an autonomous agent can move from initial access to encryption faster than human incident responders can convene a call.

    Defense Becomes a Machine-Speed Problem

    For defenders, the implication is uncomfortable but clarifying. Signature-based detection — recognizing known malicious files — was already fading; an LLM that generates or adapts its tooling per victim can present a novel artifact every time. The durable signals are behavioral: unusual data movement, anomalous credential use, encryption activity, and network patterns that no rewrite of the malware can fully disguise. Detection and response pipelines that depend on a human analyst approving each containment step will struggle against an adversary operating at machine speed.

    This is also an infrastructure story. Autonomous attacks still need identities to hijack, networks to traverse, and data to reach — so the fundamentals compound in value: segmented networks, phishing-resistant multifactor authentication, least-privilege access, and immutable, regularly tested backups kept isolated from production. Offline, verified backups remain the one control that converts a ransomware catastrophe into an outage. Providers of data center, connectivity, and security services should expect customer demand to tilt toward exactly these capabilities.

    Strong Claims Deserve Strong Evidence

    A dose of rigor is warranted on the report’s framing itself. “First” is notoriously hard to establish in security — earlier incidents may simply have gone undetected or unattributed — and “fully LLM-driven” needs a precise technical definition. Did a model plan and execute every stage autonomously, or did it automate most stages with humans supplying access, infrastructure, and the ransom negotiation? The available material does not yet answer that, and the security industry has an economic incentive to headline AI threats, which makes independent verification more important, not less.

    None of that skepticism blunts the strategic point. Whether JadePuffer proves to be the first fully autonomous ransomware attack or an important step short of it, the capability curve it sits on is real and publicly documented. Organizations that wait for a definitionally perfect “first” before adapting will be responding to the tenth.

    Background

    Ransomware grew over the past decade from opportunistic file-locking scams into a multibillion-dollar criminal economy, professionalized through ransomware-as-a-service — a franchise model in which developers lease attack tools to affiliates for a share of ransoms. Since the arrival of capable large language models, security researchers have tracked steadily deepening criminal adoption: first AI-polished phishing and malware development, then documented cases of AI models being misused across whole extortion operations, and lab proofs-of-concept for AI-generated ransomware. The JadePuffer report, as framed by Dark Reading, marks the point where that progression is claimed to have reached full automation in a real attack.

    Source: JadePuffer: The First Complete LLM-Driven Ransomware Attack — Dark Reading’s July 5, 2026 report on a ransomware campaign characterized as the first driven end-to-end by a large language model.

  • Sysdig Documents First Fully Autonomous AI-Agent Ransomware Attack

    Sysdig Documents First Fully Autonomous AI-Agent Ransomware Attack

    Security vendor Sysdig has reported what it characterizes as the first documented instance of a ransomware attack executed end-to-end by an autonomous AI agent, according to a July 5, 2026 write-up in The HIPAA Journal. In this framing, the agent — not a human operator following a runbook — made the tactical decisions from initial access through encryption.

    The claim is being circulated widely because it marks a symbolic threshold in the offensive use of large language model-based agents, systems that can chain tools, reason about goals, and take multi-step actions with limited human oversight.

    Executive Summary

    The announcement, as relayed by The HIPAA Journal, positions Sysdig’s finding as a landmark in cybersecurity: an intrusion in which an AI agent, rather than a human ransomware operator, drove the attack chain. That is a meaningful shift in threat modeling. Where traditional ransomware crews rely on human affiliates to move laterally, escalate privileges, and stage encryption, an autonomous agent could theoretically compress those stages into machine time and run them in parallel across many victims.

    For infrastructure operators — data centers, cloud tenants, connectivity providers, and their customers — the practical implication is that assumptions built around human attacker tempo may need revisiting. Runbooks that count on hours of dwell time to detect and evict an intruder become weaker when the intruder is a piece of software that never sleeps and does not tire of retrying.

    That said, the summary made available in this feed is thin. The claim of “first fully autonomous” is a strong one, and the industry should read the underlying Sysdig research carefully before treating the milestone as settled fact rather than a plausible and important report.

    Why “Autonomous” Is The Word That Matters

    Ransomware crews have used automation for years — mass scanners, exploit kits, off-the-shelf loaders. What Sysdig is reportedly describing is different in kind: an AI agent that plans and adapts rather than executing a fixed script. In agent architectures, a language model is given a goal, a set of tools (shell access, network utilities, credential stores) and permission to iterate until it succeeds or gives up. If the report holds up, the notable step is not that malware ran on its own, but that decision-making — normally the human’s contribution — was delegated to software.

    The distinction matters because defenders have historically exploited the human bottleneck. Every hour an operator spends deciding what to do next is an hour a SOC can use to detect them. Autonomous agents narrow that window.

    Economics: Scaling Attacks Without Scaling Headcount

    Ransomware is a business, and its unit economics are constrained by affiliate labor. Recruiting, vetting, and paying human operators is expensive and risky for the crews at the top of the pyramid. An autonomous agent, if it works reliably, lowers that cost floor. The same operator could in principle run many concurrent intrusions, each customized to the victim environment, without a proportional increase in staff.

    The flip side is reliability. Language model agents are known to hallucinate, loop, and make confidently wrong choices. Whether Sysdig’s observed agent achieved its objective through skill or luck is the kind of detail that separates a novelty from a business model. The public summary does not settle that question.

    Implications For Infrastructure Buyers

    For enterprises buying cloud, colocation, and connectivity, the near-term takeaway is not panic but pressure on already-known controls. Identity hygiene, least-privilege access, tested backups, egress monitoring, and behavioral detection at the workload layer — the fundamentals Sysdig itself sells into — matter more, not less, if attacker tempo increases. Providers that offer runtime detection, immutable backups, and rapid isolation of compromised workloads have a clearer story to tell.

    There is also a governance dimension. If an attack is driven by an AI agent, questions of attribution, evidence preservation, and even insurance coverage become murkier. Incident responders will want to capture not just the malware artifacts but the agent’s prompt history, tool calls, and model provenance where possible.

    Reading The Claim Fairly

    “First” claims in security are notoriously hard to verify. Autonomous or semi-autonomous offensive tooling has been demonstrated in research settings and hinted at in underground forums for at least two years. Sysdig may well have observed the first in-the-wild case that meets a strict definition of full autonomy, but the industry should ask what that definition is: Did a human select the target? Approve the ransom demand? Handle negotiation? Each answer changes how landmark the milestone really is.

    None of that diminishes the direction of travel. Whether this specific case is the first or the fifth, agent-driven intrusions are a plausible near-term trajectory, and treating the report as a prompt to stress-test defenses is a reasonable response even before every detail is independently confirmed.

    Background

    Ransomware has evolved over the past decade from opportunistic file-encrypting malware into an organized affiliate economy, in which core developers license their tooling to human operators who conduct intrusions and split proceeds. Detection and response strategies have been built largely around the pace and habits of those human affiliates.

    In parallel, the rise of large language models has produced “agent” frameworks that let AI systems use tools, browse, execute code, and pursue goals across many steps. Security researchers have warned since at least 2024 that the same capabilities that make agents useful for legitimate automation make them attractive for offensive operations. Sysdig’s reported finding, if it holds up to scrutiny, marks the point at which that warning moves from theory into documented practice.

    Source: AI Agent Conducts First Fully Autonomous Ransomware Attack – The HIPAA Journal — reporting on Sysdig’s research documenting what it describes as the first end-to-end ransomware intrusion driven by an autonomous AI agent.

  • Two Ransomware Crews Reportedly Team Up in Joint Campaign

    Two Ransomware Crews Reportedly Team Up in Joint Campaign

    On 4 July 2026, IT Pro reported that cybersecurity experts had issued an alert describing an ‘unprecedented’ threat campaign in which two ransomware groups appear to be collaborating rather than operating independently. The public summary characterises the activity as a coordinated effort but does not, in the material available to us, name the groups, victims, sectors, or geographies involved.

    Executive Summary

    Ransomware-as-a-service crews typically compete for affiliates, victims and press attention. A public alert describing two named groups jointly running a single campaign — if it holds up on closer inspection — would mark a shift in how the extortion ecosystem organises itself, with implications for attribution, negotiation and defensive playbooks.

    For infrastructure operators, the immediate takeaway is not a specific new indicator of compromise but a reminder that the threat model is evolving faster than many incident-response runbooks. If two crews share tooling, access brokers or leak sites, defenders can no longer assume that a given intrusion set maps cleanly to a single adversary with a single playbook.

    What ‘Unprecedented’ Actually Means Here

    The word ‘unprecedented’ is doing heavy lifting in the headline. Ransomware groups have long shared infrastructure informally: affiliates rotate between programmes, initial-access brokers sell to whoever pays, and code from leaked builders (Conti, LockBit) circulates widely. What would be genuinely new is a formal, sustained partnership in which two branded operations run a single campaign end-to-end. On the public reporting available, it is not yet clear which of those descriptions best fits the activity being flagged.

    Readers should therefore treat the alert as a lead rather than a conclusion. The substantive question for defenders is whether investigators are seeing shared command-and-control, shared negotiation portals, or merely overlapping affiliates — each of which carries a different weight.

    Why Crews Would Cooperate — and Why They Usually Don’t

    Cooperation is economically rational when it lowers cost or raises the ransom take. Sharing a proven intrusion chain, splitting proceeds on high-value targets, or pooling leverage over a single victim (double-extortion with two leak sites) can all lift returns. Law-enforcement pressure since the 2021–2024 wave of takedowns has also thinned the affiliate pool, giving surviving operators an incentive to consolidate rather than compete.

    Against that, ransomware brands are jealous of reputation. A shared campaign dilutes the ‘we always decrypt’ signal that groups use to convince victims to pay, and it creates operational security risk: every extra participant is another potential informant. Historically, crews have preferred loose federation to formal alliance for exactly that reason.

    Implications for Infrastructure Buyers

    For data-centre customers, cloud tenants and connectivity buyers, the practical response does not change dramatically because two groups are named instead of one. The controls that matter — enforced multi-factor authentication, segmented backups tested for restore, privileged-access monitoring, and rehearsed incident-response contracts — apply regardless of which brand appears on the ransom note. What does change is negotiation posture: if two crews are jointly holding data, a victim cannot assume that paying one buys silence from the other.

    Insurers and legal counsel will want to understand this quickly. Cyber-insurance policies and sanctions-screening workflows are built around identifying a specific threat actor. A joint operation complicates both attribution and any regulatory obligation to check whether payment would breach sanctions.

    How to Read Alerts Like This

    Threat-intelligence alerts serve two audiences at once: defenders who need actionable indicators, and a wider readership that includes journalists, executives and — inevitably — the attackers themselves. Strong alerts publish indicators of compromise, TTPs mapped to MITRE ATT&CK, and a clear statement of confidence. Where those elements are absent from the public summary, the honest analytical response is to note the gap rather than fill it with speculation.

    Background

    Ransomware has been the dominant cyber-extortion model since roughly 2019, when double-extortion — encrypting data and threatening to leak it — became standard practice. The ecosystem is organised around branded ‘affiliate’ programmes such as LockBit, ALPHV/BlackCat, Cl0p and their successors, most of which run as ransomware-as-a-service.

    Law-enforcement operations against LockBit and ALPHV in 2023–2024, together with source-code leaks from earlier crews such as Conti, reshaped the market. Affiliates rotated between surviving programmes, new brands emerged, and researchers have periodically flagged overlaps in tooling and personnel. Against that backdrop, a claim of formal cooperation between two named crews is notable but consistent with the direction of travel.

    Source: Cyber experts issue alert after two ransomware groups team up on ‘unprecedented’ threat campaign — IT Pro report, 4 July 2026, describing a joint ransomware campaign flagged by security researchers.

  • Anubis Ransomware Hit on Adriatic Port Authority Exposes Maritime OT Risk

    Anubis Ransomware Hit on Adriatic Port Authority Exposes Maritime OT Risk

    Cybersecurity firm Resecurity has published research detailing a ransomware attack by the Anubis group against an Adriatic Port Authority, as reported by Industrial Cyber on June 16, 2026. The disclosure is being framed as a detailed look at how ransomware operators are reaching into maritime critical infrastructure — a sector where information technology (IT) systems and operational technology (OT, the systems that control physical processes like cranes, gates, and cargo handling) are increasingly intertwined.

    Executive Summary

    According to the report, threat-intelligence firm Resecurity has documented an intrusion attributed to Anubis — a ransomware-as-a-service operation that surfaced in underground markets in late 2024 and drew attention for pairing conventional encryption with a destructive file-wiping capability — against a port authority on the Adriatic coast. Port authorities are the public bodies that govern harbor operations, vessel traffic, and often the digital systems that commercial terminals depend on, which makes them an unusually consequential ransomware target.

    The significance is less the individual incident than what it illustrates: ports sit at the junction of national logistics, customs, energy imports, and military mobility, and a single compromised authority can ripple across all of them. Vendor research that documents such an attack in technical detail is valuable to defenders — though, as with any single-vendor disclosure, the claims that matter most (scope of access, operational impact, and how the intrusion happened) deserve independent confirmation, and the public reporting available at publication is thin on those specifics.

    Why Ports Are Ransomware’s Ideal Target

    Modern ports run on software to a degree that surprises outsiders. Terminal operating systems schedule every container move; gate systems decide which trucks enter; berth management coordinates vessel arrivals; customs and port-community platforms link the authority to shippers, freight forwarders, and government agencies. When ransomware locks those systems, cargo does not merely slow — it physically stops, because cranes and yard equipment have nowhere to be told to go. That is why the sector’s precedents are so costly: the 2017 NotPetya incident forced Maersk to rebuild its global IT estate at a cost the company put in the hundreds of millions of dollars, and ransomware halted container operations at Japan’s Port of Nagoya in 2023. An Adriatic port authority fits the same profile: high downtime costs, public-sector budget constraints, and a web of third-party connections that widens the attack surface.

    The OT dimension raises the stakes further. Even when attackers only encrypt IT systems, operators frequently shut down OT as a precaution because the boundary between the two is porous. The practical lesson for infrastructure operators of every kind — ports, data centers, utilities — is that segmentation between business networks and control networks is not a compliance checkbox; it is the difference between an expensive IT incident and a physical-operations outage.

    Anubis and the Economics of Destructive Ransomware

    Anubis is a relatively young ransomware-as-a-service brand — a model in which core developers lease their malware and infrastructure to affiliates who conduct the actual intrusions in exchange for a revenue share. What set Anubis apart in earlier security-industry reporting was a so-called wipe mode: the ability to destroy file contents outright rather than merely encrypt them. That capability changes the victim’s calculus. Classic ransomware is, in a grim sense, a negotiation with a counterparty that wants its decryptor to work; a wiper-equipped operator can credibly threaten permanent destruction, which increases pressure to pay quickly and raises the ceiling of potential damage if talks collapse.

    For a critical-infrastructure victim, that threat profile pushes the incident out of the purely financial category and toward something closer to sabotage risk. It also strengthens the case for offline, regularly tested backups — the one control that removes most of a wiper’s leverage — and for incident-response planning that assumes data may be unrecoverable from the attacker regardless of payment.

    What Vendor Research Does — and Doesn’t — Establish

    This disclosure comes from Resecurity, a commercial threat-intelligence firm, relayed through trade press. Vendor research is a legitimate and often essential channel — private firms frequently see intrusion details that victims and governments do not publish — but it also serves a marketing function, and readers should hold it to the same evidentiary standard as any other claim. The fair questions cut in every direction: Has the affected port authority confirmed the incident? Do the technical indicators trace to Anubis with high confidence, or by resemblance to known tooling? Was operational technology actually touched, or is OT exposure an inference from network architecture? The public reporting available at the time of writing — an aggregated headline and summary — does not settle any of these, and it would be a mistake to treat the incident’s most dramatic possible reading as established fact.

    The Regulatory Tide Meets the Waterline

    If the affected authority sits in an EU member state — as most Adriatic port authorities do — the incident lands squarely inside the NIS2 directive’s remit, the EU regime that designates ports as essential entities and imposes incident-reporting deadlines and management-level accountability for cyber risk. The International Maritime Organization has likewise required cyber risk to be addressed in ship and port safety-management systems since 2021. An incident like this one becomes a live test of whether those frameworks produce faster disclosure and better resilience in practice, or whether public understanding of critical-infrastructure attacks continues to depend on third-party security researchers publishing what victims will not.

    Background

    Anubis appeared in cybercrime markets around late 2024 as a ransomware-as-a-service brand and was flagged by multiple security researchers in 2025 for combining data-theft extortion with an optional file-destruction mode — an escalation from the encrypt-and-negotiate model that has dominated ransomware for a decade. Maritime targets have figured in ransomware history since NotPetya crippled Maersk in 2017, and attacks on the ports of Lisbon (2022) and Nagoya (2023) demonstrated that both port authorities and terminal operators are viable victims.

    The Adriatic coastline hosts significant EU trade gateways in Italy, Slovenia, and Croatia, making its port authorities essential entities under the EU’s NIS2 cybersecurity directive. Resecurity, the firm behind this disclosure, is a commercial threat-intelligence company that regularly publishes intrusion research on ransomware groups and critical-infrastructure targeting.

    Source: Resecurity details Anubis ransomware attack on Adriatic Port Authority, exposing maritime infrastructure risks — Industrial Cyber, reporting on Resecurity threat research into a ransomware intrusion at an Adriatic port authority, published June 16, 2026.

  • MS-ISAC Enters Uncertain Era After Funding Cut and Member Exodus

    MS-ISAC Enters Uncertain Era After Funding Cut and Member Exodus

    The Multi-State Information Sharing and Analysis Center (MS-ISAC) — the primary cyber threat-sharing hub for US state, local, tribal, and territorial governments — has entered what Cybersecurity Dive describes as an uncertain new era after losing its federal funding and thousands of member organizations, according to a June 14, 2026 report.

    The organization, operated by the nonprofit Center for Internet Security (CIS), spent roughly two decades as a free, federally supported service before its cooperative-agreement funding through the Cybersecurity and Infrastructure Security Agency (CISA) was cut in 2025, forcing a pivot to a fee-based membership model that many members have evidently declined to join.

    Executive Summary

    For most of its existence, MS-ISAC functioned as something close to a public utility for government cybersecurity: any state agency, county, city, school district, or tribal government could join at no cost and receive threat intelligence, incident-response support, and network monitoring, with the bill largely picked up by the federal government. That arrangement ended when federal support was withdrawn in 2025, and CIS moved the service to paid membership.

    The reported result — thousands of member organizations gone — matters because an information-sharing organization’s value is a function of its network. Every member that drops out is both a blind spot in the collective picture and, potentially, a softer target. State and local governments run elections, water systems, 911 dispatch, courts, and schools; they are also among the most frequent victims of ransomware, precisely because so many of them lack the budget and staff for standalone security programs.

    The open question as of mid-June 2026 is whether a smaller, self-funded MS-ISAC can sustain the same defensive footprint — and what happens to the organizations that used to depend on it and now, apparently, go without.

    From Public Good to Paid Service — and Why That Math Is Hard

    Shared threat intelligence has the economics of a public good: it is expensive to produce, nearly free to distribute, and most valuable when everyone participates. Federal funding solved the free-rider problem by simply paying for universal access. A fee-based model reintroduces it, and with a cruel twist known as adverse selection: the organizations most likely to drop out are the small, resource-poor ones — rural counties, small school districts, modest municipal utilities — which are exactly the entities least able to replace the service on their own and among the most attractive targets for ransomware crews.

    None of this means CIS made the wrong call; a nonprofit cannot indefinitely underwrite a national service out of its own reserves once its primary funder exits. But the reported loss of thousands of members suggests the transition is playing out the way the economics would predict. The membership that remains will skew toward larger, better-funded governments, which changes what the shared data represents.

    The Collective-Defense Network Effect Runs in Reverse

    An ISAC — an Information Sharing and Analysis Center — works because one member’s incident becomes every member’s early warning. A phishing campaign spotted against one county clerk’s office can be blocked at ten thousand others within hours. That flywheel spins both ways: as membership shrinks, the sensor network shrinks, detection gets slower, and the value proposition for remaining members weakens, which can encourage further departures. Managed defensively, a smaller ISAC can still deliver real value to a committed core; managed poorly, shrinkage becomes self-reinforcing.

    There is also a national-visibility cost that lands on the federal government itself. MS-ISAC historically served as the aggregation point through which federal agencies understood what was happening across tens of thousands of state and local networks. Fewer members means a dimmer picture — for everyone, including the agencies that cut the funding.

    Who Fills the Gap

    Three candidates stand out. First, states themselves: the “whole-of-state” model, in which a state CISO extends security services, monitoring, and grant money downward to counties, cities, and schools, has been gaining momentum for years and now has a stronger forcing function. Second, commercial vendors: managed detection and response (MDR) providers, threat-intelligence platforms, and security-focused hosting and connectivity providers will compete for budget that once didn’t need to exist, though public-sector procurement cycles and thin budgets make this a slow, uneven substitution. Third, CISA’s own free services — vulnerability scanning, advisories, regional advisors — which remain available but were never designed to replicate an ISAC’s peer-to-peer sharing fabric.

    For infrastructure and security providers, this is a genuine market signal: the public-sector demand for outsourced security operations just grew, involuntarily. The risk is that the gap gets filled unevenly — well-funded jurisdictions buy their way to coverage while the long tail of small governments simply absorbs more risk.

    Background

    MS-ISAC was established in the early 2000s and grew, under the nonprofit Center for Internet Security, into the designated cyber threat-sharing and defense hub for US state, local, tribal, and territorial (SLTT) governments — a sector spanning tens of thousands of organizations, most of them too small to staff full security teams. Membership was free, underwritten by federal cooperative-agreement funding channeled through the Department of Homeland Security and later CISA, and the center became a fixture of national cyber defense, particularly as ransomware attacks on cities, counties, and school districts escalated through the 2020s.

    That model unraveled in 2025 when federal funding was withdrawn amid broader cuts to CISA programs, pushing CIS to a fee-based membership structure. The June 2026 reporting marks a milestone in that transition: the organization survives, but with thousands fewer members and an open question about who now watches over the jurisdictions that left.

    Source: MS-ISAC enters uncertain new era after losing federal funding and thousands of members — Cybersecurity Dive report, June 14, 2026, on the threat-sharing center’s post-federal-funding transition.

  • Anthropic Pledges $15M to Cyber Defense for State and Local Governments

    Anthropic Pledges $15M to Cyber Defense for State and Local Governments

    Anthropic, the AI company behind the Claude family of models, has launched a $15 million cyber defense program aimed at state, local, tribal and territorial (SLTT) governments, as first reported by StateScoop on June 13, 2026. The commitment marks one of the more visible moves by a frontier AI vendor into public-sector cybersecurity, a domain historically served by federal grant programs, information-sharing organizations, and traditional security contractors.

    Executive Summary

    The announcement is straightforward in outline: $15 million, directed at the roughly 90,000 units of government below the federal level in the United States — states, counties, cities, tribal nations, and territories — under the banner of cyber defense. These entities collectively run elections, 911 dispatch, water utilities, courts, and school districts, yet many operate with security budgets that would not cover a single enterprise analyst’s salary.

    Why it matters: SLTT governments are among the most frequently attacked and least defended organizations in the country, and the question of who should fill that gap — federal agencies, states themselves, or private vendors — is unsettled. An AI company stepping in with direct funding reframes that debate. It also positions AI-assisted security tooling in front of a vast, fragmented public-sector market at a moment when both the threat landscape and the defensive toolchain are being reshaped by AI. The reported release, however, is thin on mechanics: the program’s structure, eligibility, and deliverables are not detailed in the source material, so the scale of real-world impact remains to be demonstrated.

    The Soft Underbelly of American Cyber Defense

    SLTT governments occupy an unenviable position: they hold sensitive data (voter rolls, health records, court files) and run critical services (water, dispatch, schools), yet they buy security with some of the smallest IT budgets in the economy. Ransomware crews have long understood this asymmetry — small municipalities and school districts have been recurring victims precisely because a locked-up 911 system or payroll server creates immediate pressure to pay. Any credible new funding source for this tier of government addresses a real, well-documented gap, not a manufactured one.

    The structural problem is fragmentation. Unlike a federal agency, there is no single buyer, no shared baseline, and often no dedicated security staff at all in smaller jurisdictions. Programs that work at this tier tend to deliver shared services — centralized monitoring, common tooling, pooled expertise — rather than writing thousands of small checks. Whether Anthropic’s program takes that shape is not specified in the source reporting, and it is the single biggest determinant of whether $15 million produces measurable defense or diffuse goodwill.

    Why an AI Vendor Is Writing This Check

    There are at least three plausible and non-exclusive readings. First, genuine mission alignment: Anthropic has publicly framed itself around AI safety, and AI is already changing offensive tradecraft — faster phishing, faster vulnerability discovery — so an AI vendor investing in the defensive side of that ledger is coherent. Second, market development: public-sector security is a large, sticky market, and a philanthropic or subsidized entry builds relationships and reference deployments with thousands of potential future customers. Third, policy positioning: frontier AI companies face active regulatory scrutiny, and visible contributions to public cyber defense are a constructive answer to the question of whether AI makes society safer or more exposed.

    None of these motives is disqualifying — corporate programs routinely serve mission and market at once. The fair test is not motive but design: whether aid is delivered without product lock-in, whether recipients are chosen on need, and whether outcomes are reported. The source material does not yet answer any of those questions, so judgment should wait for the program’s actual terms.

    What $15 Million Does — and Does Not — Buy

    Context matters for the number. Fifteen million dollars is meaningful as a corporate program and modest against the scale of the problem: spread evenly across all SLTT entities it would amount to a few hundred dollars each, and federal SLTT-focused cyber grant programs have operated at hundreds of millions per year. That comparison is not a criticism — it is a sizing exercise. Concentrated well (for example, on shared services, incident-response capacity, or training for the smallest jurisdictions), $15 million can move the needle for a defined cohort. Spread thin, it becomes a press release with a long tail of small line items.

    The more durable effect may be signaling. If a frontier AI company treats SLTT cyber defense as a priority worth funding, it invites peers — other AI vendors, cloud providers, security firms — to match or exceed the commitment, and it gives state CISOs a new category of partner to negotiate with. For the infrastructure sector, it is also a reminder that the security perimeter of public services increasingly runs through commercial AI and cloud platforms, and the entities operating those platforms are becoming direct participants in public-sector defense, not just suppliers to it.

    Background

    Anthropic was founded in 2021 and develops the Claude family of AI models, competing with OpenAI, Google, and others at the frontier of the field. The company has made AI safety central to its public identity, and — like its peers — has faced growing questions about how AI reshapes cybersecurity, since the same capabilities that help defenders analyze threats can help attackers craft them.

    Public-sector cyber defense below the federal level has long been a recognized weak point in the United States: thousands of small governments with critical responsibilities, uneven funding, and heavy dependence on federal grants and shared-service organizations. Vendor-funded assistance programs are not new — cloud and security companies have offered discounted or donated services to governments before — but a frontier AI company committing a dedicated eight-figure program to the SLTT tier is a notable extension of that pattern.

    Source: Anthropic launches $15M cyber defense program for state, local, tribal and territorial governments — StateScoop’s June 13, 2026 report on Anthropic’s public-sector cybersecurity funding commitment.