Cybersecurity
82% of schools suffered recent cyber breaches, report says
The Center for Internet Security said it observed nearly 14,000 security events and confirmed 9,300 cyber incidents, which tend to surge during high-stakes periods like exams.
Critical infrastructure leaders must ‘wake up’ and invest in cyber, report says
A new report from the Multi-State Information Sharing and Analysis Center warned of the threats faced by critical infrastructure and urged states to spend more to protect themselves.
Top considerations for adopting a whole-of-state cybersecurity strategy
COMMENTARY | A chain is only as strong as its weakest link, so states must emphasize collaboration and resource sharing across their entire ecosystem to better protect themselves.
Trump’s cuts to federal cybersecurity agency CISA leave election officials worried
The agency partnered with state and local offices and helped combat misinformation. But under Trump, about 130 of its employees have been fired.
New Jersey report warns stolen credentials remain top cyber threat
Bad actors are still looking to take advantage of phishing attacks to steal passwords, a recent report from the state’s Office of Homeland Security and Preparedness said.
Kept in the dark: Inside the St. Landry Parish Schools ransomware attack
A 74 investigative series: Meet the hired guns who make sure school cyberattacks stay hidden. Here’s what we uncovered about a massive attack on the school district in St. Landry Parish, Louisiana.
Treasurer Stacy Garrity bans DeepSeek AI platform from Pennsylvania Treasury devices
The state treasurer said the move is necessary to safeguard the data and sensitive information of Pennsylvanians.
Salt Typhoon hackers exploited stolen credentials and a 7-year-old software flaw in Cisco systems
The Chinese hacking collective has used vulnerabilities in communications infrastructure to breach dozens of telecom providers in the U.S. and overseas.
Building cyber resilience: A roadmap for state CIOs in 2025
COMMENTARY | Threats are growing, especially against critical infrastructure. But several strategies, including a shift in mindset, can help protect against disaster.
Exclusive: StateRAMP to rebrand later this year
The voluntary program will be rebranded as “GovRAMP” to better reflect that its offerings can be used by local governments, educational institutions and others, the organization’s executive director told Route Fifty.
Featured eBooks
Arizona police procedures exposed in massive policy database hack
Some agencies said they were unconcerned with the breach since the final documents are already publicly available.
Navigating the increasing government cybersecurity challenges in 2025 and beyond
COMMENTARY | Identity security, resiliency and a whole-of-state approach are just some of the ways agencies can steel themselves against the ever-increasing threat landscape.
A simple fix could stop millions in food stamp theft. Will New York commit?
Chip technology has been standard in credit and debit cards for a decade. They could stop New York’s surging rate of stolen benefits.
Kept in the dark: Inside a trio of Los Angeles school cyberattacks
A 74 investigative series: Meet the hired guns who make sure school cyberattacks stay hidden.
DEI controversy collides with state-level cyber workforce needs
Despite the federal government’s movement away from DEI practices, state agencies can still explore ways to broaden their cyber workforces to fill talent gaps.
DHS personnel descend on New Orleans to help secure Super Bowl LIX
CISA has already conducted physical and cybersecurity vulnerability assessments ahead of the Feb. 9 NFL championship game.
South Dakota opens bids in state-funded $7 million cybersecurity effort to protect local governments
South Dakota wants to hire a company to review local governments’ vulnerabilities to hackers.
Kept in the dark
Meet the hired guns who make sure school cyberattacks stay hidden.
China-linked fraud network exploits stolen Massachusetts identities to target U.S. banks
It’s not clear who exactly the Chinese operatives are, but the scheme has been ongoing and persistent, said Socure executive Jordan Burris.
Preparing for battle: Cybersecurity incident response for public bodies
COMMENTARY | It may feel impossible to plan for a cyberattack, but public sector organizations can take several steps now to protect themselves, both legally and through policy.
