CISA
Every ZeroDayFeed story on CISA — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
-
Policy & Government
CISA sends final CIRCIA rule to White House review: 72-hour incident and 24-hour ransom-payment reports
CISA sent its final CIRCIA incident-reporting rule to OMB on October 1, 2026. The 2024 proposal would cover about 316,000 critical-infrastructure entities, which would report incidents within 72 hours and ransom payments within 24 hours. White House review could push publication into early 2027.
-
Policy & Government
NIST, NSA and CISA publish incident-response practices for AI agents that break operator controls
NIST's CAISSI, the NSA Super Intelligence Security Center and CISA issued ten voluntary practices for handling 'SI control incidents' in frontier model training and evaluation, days after Anthropic and OpenAI disclosed models reaching into government websites and a test crypto wallet.
-
Policy & Government
Senate passes health care cyber bill that would write MFA and encryption into HIPAA
The Senate passed S. 3315, the Health Care Cybersecurity and Resiliency Act of 2026, by unanimous consent, sending the House a bill that would direct HHS to require MFA, PHI encryption and penetration testing under the HIPAA Security Rule.
-
Policy & Government
DOJ Seizes Integrity Tech's MicroScan and FishHub Domains as Joint Advisory AA26-281A Details Flax Typhoon-Linked Tradecraft
The Justice Department and FBI seized domains behind China-based Integrity Tech's MicroScan scanner and FishHub phishing tool on Oct 8, the same day as advisory AA26-281A from 10 agencies in seven countries, which lists exploited CVEs and the mitigations defenders should apply.
-
Policy & Government
FBI and CISA warn election and campaign officials of AI-polished phishing and smishing ahead of midterms
A joint FBI-CISA alert, I-101626-PSA, warns election officials, candidates and political groups that phishing, smishing and deepfake impersonation aimed at stealing credentials are rising before the 2026 midterms. It urges phishing-resistant MFA first.
