What Trump's AI Executive Order Means for Healthcare Sector

Marianne Kolbasuk McGee • June 5, 2026

Although President Donald Trump's executive order this week on artificial intelligence barely mentions healthcare, some experts said the directive could potentially have a positive impact on the critical infrastructure sector - if implemented effectively.

Data Breach Notification

23andMe Failed to Stop Months-Long Hack, State Alleges

Latest

Litigation

Ex-Threat Intel Exec Accuses IBM and AT&T of Hiding Hacks

Tiffany Wang • June 5, 2026

A former IBM vice president of threat intelligence alleged IBM and AT&T failed to implement basic security controls and obtained major government contracts despite unresolved cybersecurity deficiencies that potentially exposed sensitive federal data.

Artificial Intelligence & Machine Learning

Human Cyber Risk Demands a Psychology Makeover

Mathew J. Schwartz • June 5, 2026

People feel intimidated by cybersecurity - a reaction that breeds learned helplessness and erodes the very behaviors organizations depend on for their defense, said Jason Nurse, director, science and research, CybSafe and associate professor for cybersecurity at the University of Kent.

AI-Based Attacks

When the Threat Wears a Human Face

Mathew J. Schwartz • June 5, 2026

Criminals are using AI where it helps most, said Jake Moore, global cybersecurity advisor at Eset. Phishing, social engineering and as-a-service criminal ecosystems are sharper for it, but quantum computing is the bigger sleeper threat.

Artificial Intelligence & Machine Learning

Bipartisan AI Bill Targets Frontier Labs and State Regulators

Jennifer Lawinski • June 5, 2026

A House discussion draft would impose safety mandates and independent audits on the country's most powerful AI developers, but the fight over a three-year block on state AI laws is already dominating the response.

Artificial Intelligence & Machine Learning

The CISO Inbox Is Not a Sales Funnel

Mathew J. Schwartz • June 5, 2026

CISOs are bombarded with more than 400 cold outreach attempts a month - ignoring nearly all of them. If vendors want to break through, they need to stop selling and start solving, said Ian Thornton-Trump, CISO at Inversion6.

Agentic AI

Why Identity Security Needs a Rethink

Mathew J. Schwartz • June 5, 2026

AI-powered attacks have transformed phishing and identity security, making threats harder to detect and easier to scale. Patricia Titus, field CISO at Abnormal AI, argues that the answer isn't fully automated defense - it's a companionship model where AI handles scale and humans handle judgment.

Agentic AI

Why the 30-Day Patch Cycle Is Dead

Anna Delaney • June 5, 2026

The window between vulnerability discovery and weaponized exploit has collapsed from roughly 70-plus days to under one. Troy Leach, chief strategy officer at the Cloud Security Alliance, says the 30-day patch cycle is already obsolete, and most boards don't know it yet.

Encryption & Key Management

Why PKI Visibility Gaps Put Business Resilience at Risk

Anna Delaney • June 5, 2026

Most organizations lack visibility into their own certificates, yet certificate failures now threaten business continuity and regulatory compliance. DigiCert's Paul Holt lays out why discovery is the critical first step toward crypto agility.

Agentic AI

Ex-CISA CIO Breaks Down Trump's New AI Executive Order

Chris Riotta • June 5, 2026

Former CISA CIO Bob Costello said President Trump's voluntary AI cybersecurity review order provides a workable foundation for government-industry collaboration, though agencies will need time and resources to meet accelerated 30-day evaluations of advanced AI systems.

Agentic AI

ISMG Editors: Wrapping Up Infosecurity Europe 2026

Anna Delaney • June 5, 2026

ISMG editors reflect on key themes from Infosecurity Europe 2026, including AI's role from buzzword to business strategy, the risks of agentic systems in critical infrastructure and why human-to-human trust is emerging as a defining factor in cybersecurity.

Cybercrime

Breach Roundup: Microsoft Tries to Mend Researcher Bridges

Pooja Tikekar • June 4, 2026

This week, more happened than fits here: Microsoft tried to make nice with researchers, gas tank gauges under attack in the United States, fake FIFA websites are everywhere. Russia cried cyberespionage, Spanish police arrested a teenage doxer, a Oracle WebLogic flaw was actively exploited.

AI-Based Attacks

Why Vulnerability Patch Windows Are Now Zero or Negative

Mathew J. Schwartz • June 4, 2026

Attackers are moving from initial access to impact in hours, and vulnerability exploitation is outpacing disclosure. Agentic, LLM-assisted workflows are the practical answer, says Joseph Slowik of Dataminr.