Cybersecurity policy news from ZeroDayFeed — CISA directives, CMMC, SEC disclosure rules, breach-notification laws, and the government side of security.
The Senate passed S. 3315, the Health Care Cybersecurity and Resiliency Act of 2026, by unanimous consent, sending the House a bill that would direct HHS to require MFA, PHI encryption and penetration testing under the HIPAA Security Rule.
Read the story →DOJ unsealed a 14-defendant Ohio indictment over a North Korean remote IT-worker scheme that reached 70+ US employers, the FBI seized about 187 laptops and KVMs from 40+ Texas homes, and a companion FBI PSA says the workers are using more facilitators, smaller laptop farms and extortion.
The Justice Department and FBI seized domains behind China-based Integrity Tech's MicroScan scanner and FishHub phishing tool on Oct 8, the same day as advisory AA26-281A from 10 agencies in seven countries, which lists exploited CVEs and the mitigations defenders should apply.
A joint FBI-CISA alert, I-101626-PSA, warns election officials, candidates and political groups that phishing, smishing and deepfake impersonation aimed at stealing credentials are rising before the 2026 midterms. It urges phishing-resistant MFA first.
Free daily briefing — breaches, actively exploited bugs, ransomware, and the patches to prioritize.
You're in. ✓
Check your inbox to confirm your subscription.No spam. Unsubscribe any time. Read our privacy policy.
