CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure

Infosecurity Magazine headlines from October 14–26, 2026 cover active exploitation of critical vulnerabilities, ransomware and extortion, token theft and phishing campaigns, AI-enabled attacks, supply-chain and third-party breaches, critical-infrastructure and OT targeting, and defensive or regulatory responses. Notable items include exploitation of PHP, Linux, BeyondTrust, LiteLLM and other flaws; attacks involving stolen Microsoft 365, GitHub and AI-service credentials; SafePay ransomware activity; ClickFix and Romulus malware campaigns; and breaches affecting Capcom, Conduent, ConnectWise,​