K-12 schools are adopting basic cybersecurity protections, but many remain unprepared to respond to a major incident, according to new research showing that just 15% of K-12 survey respondents regularly exercise incident response plans.

Anne Arundel County, Md., announced on Oct. 15 that it will begin notifying individuals affected by a 2025 ransomware attack while it continues to investigate a separate cybersecurity incident discovered in August 2026.

The White House-led pilot will test a public-private approach to protecting critical water infrastructure from growing cyber threats.

CISA’s new resources outline eight cybersecurity objectives to help K-12 schools and districts strengthen their defenses against growing cyber threats.

The legislation would give EPA new authority to assess cyber risks and require fixes at water utilities while boosting federal cybersecurity funding.

California Gov. Gavin Newsom released an updated statewide cybersecurity strategy on July 31 to help executive branch agencies address artificial intelligence (AI)-enabled attacks, modernize security tools, and protect essential public services.

The bipartisan, bicameral bill would give CISA new tools and funding to help K-12 schools prevent, track, and respond to cyberattacks.

The University of Arkansas at Little Rock (UA Little Rock) will expand its cybersecurity clinic to three additional colleges in fall 2026. The clinic provides technical support to underserved organizations while giving students hands-on experience addressing real-world cyber risks.

While phishing volumes fell globally for a second consecutive year, government organizations saw attacks jump from 92 million to 138 million as threat actors shifted toward high-value targets.

Massachusetts Gov. Maura Healey announced on June 16 the first recipients of the state’s Cybersecurity Remediation Grant Program, a $1 million statewide initiative to help municipalities and school districts strengthen cybersecurity protections and reduce cyber risk.