Grace Holloway

Articles by Grace Holloway

• CISA sends final CIRCIA rule to White House review: 72-hour incident and 24-hour ransom-payment reports
  Policy & Government · 2026-10-19

  CISA sent its final CIRCIA incident-reporting rule to OMB on October 1, 2026. The 2024 proposal would cover about 316,000 critical-infrastructure entities, which would report incid…

• IonQ agrees to buy zero-trust firm Elisity in all-stock deal worth up to $1.3 billion
  Industry · 2026-10-19

  IonQ has signed a deal to buy microsegmentation company Elisity for $1.15 billion in stock plus up to $150 million in earnouts. It plans to combine Elisity's identity-based segment…

• Ledger Confirms LTE Implant in Resold Hardware Wallets Stole Recovery Phrases; Asks Southeast Asia and Hong Kong Sellers to Halt Sales
  Industry · 2026-10-19

  Ledger confirmed that hardware wallets sold by Malaysian reseller CryptoBilis carried a hidden implant that stole recovery phrases over LTE. Ledger then asked distributors in six S…

• NIST, NSA and CISA publish incident-response practices for AI agents that break operator controls
  Policy & Government · 2026-10-19

  NIST's CAISSI, the NSA Super Intelligence Security Center and CISA issued ten voluntary practices for handling 'SI control incidents' in frontier model training and evaluation, day…

• Microsoft and Health-ISAC seize domains behind YAM Store, CoGUI and Iron Man phishing operation
  Industry · 2026-10-19

  Under a Florida federal court order, Microsoft and Health-ISAC seized domains used by YAM Store, CoGUI and Iron Man, a Chinese-language phishing-as-a-service operation that Microso…

• Senate passes health care cyber bill that would write MFA and encryption into HIPAA
  Policy & Government · 2026-10-19

  The Senate passed S. 3315, the Health Care Cybersecurity and Resiliency Act of 2026, by unanimous consent, sending the House a bill that would direct HHS to require MFA, PHI encryp…

• DOJ charges 14 and FBI raids 40+ Texas laptop farms as FBI warns North Korean IT workers are changing tactics
  Policy & Government · 2026-10-19

  DOJ unsealed a 14-defendant Ohio indictment over a North Korean remote IT-worker scheme that reached 70+ US employers, the FBI seized about 187 laptops and KVMs from 40+ Texas home…

• DOJ Seizes Integrity Tech's MicroScan and FishHub Domains as Joint Advisory AA26-281A Details Flax Typhoon-Linked Tradecraft
  Policy & Government · 2026-10-19

  The Justice Department and FBI seized domains behind China-based Integrity Tech's MicroScan scanner and FishHub phishing tool on Oct 8, the same day as advisory AA26-281A from 10 a…

• Citizen Lab: Ad-tech firm Discover-Tech used targeted ads to deliver Candiru spyware without a click
  Industry · 2026-10-19

  Citizen Lab says Israeli ad-tech firm Discover-Tech bought placements on mainstream ad exchanges to deliver Candiru spyware in zero-click attacks, with at least 45 Al Jazeera devic…

• FBI and CISA warn election and campaign officials of AI-polished phishing and smishing ahead of midterms
  Policy & Government · 2026-10-19

  A joint FBI-CISA alert, I-101626-PSA, warns election officials, candidates and political groups that phishing, smishing and deepfake impersonation aimed at stealing credentials are…

• US Cybersecurity Job Postings Fall 26% to a Four-Year Low as AI Security Engineer Demand More Than Triples
  Industry · 2026-10-19

  CyberSN counted 235,786 US cybersecurity job postings from January to September 2026, down 26.4% from a year earlier and a four-year low, while AI security engineer postings rose 2…

• Proofpoint to buy Varonis for $6.3 billion in all-cash data and AI security deal
  Industry · 2026-10-19

  Thoma Bravo-owned Proofpoint has agreed to buy Varonis for about $6.3 billion in cash, or $49.75 per share. The deal is expected to close in the first half of 2027, pending Varonis…