Cybersecurity
Coverage of defense cybersecurity, operational technology protection and the compliance regime reshaping the supplier base.
Why this segment matters
Defense cybersecurity divides into work that looks like commercial enterprise security and work that does not. The second category — protecting weapon systems, industrial control systems and classified networks — carries clearance requirements and accreditation processes that exclude most commercial vendors, which is why specialised government services firms hold positions that pure-play software companies find hard to contest.
Compliance has become a market in its own right. Cybersecurity requirements imposed on defense contractors flow down through supply chains to thousands of smaller suppliers, many lacking the resources to meet them unaided. That has created steady demand for assessment, remediation and managed services, and pressure toward consolidation among smaller suppliers who cannot absorb the cost.
Coverage follows contract awards and recompetes, compliance rule changes and their supply chain effects, incidents affecting defense contractors, and operational technology security for critical infrastructure. Note that much offensive and classified work is never disclosed, so reported activity understates the segment.
11listed cybersecurity stocks
by convictionSenators say targeted ads are a security risk. Ad groups say the critics are off base.
A report by The Citizen Lab and Confiant identifies the use of targeted advertisements as a vector for zero-click mercenary spyware, highlighting critical vulnerabilities in the digital advertising supply chain. Lawmakers are calling for improved cybersecurity and threat detection standards to mitigate these security risks.
Booz Allen (BAH) Stock May Be 50% Undervalued Following AI Cybersecurity News
Yahoo Finance
eMudhra kills its certificate business after researchers cracked its private keys in under a second
Certificate authority eMudhra has shuttered its SSL/TLS certificate business following the discovery that its private keys were cryptographically weak and easily reconstructible. The incident led to browser blocks and regulatory scrutiny regarding the company's security practices.
IonQ (IONQ) Stock Looks Hard To Call As Its Cybersecurity Deal Lands
Yahoo Finance
Encryption isn’t enough to protect data wherever it goes
The article discusses the necessity of evolving cybersecurity strategies beyond standard encryption to protect data as it is moved, processed, or shared by critical sectors, including defense contractors and government agencies.
Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
The proposed AI Cyber Defense Act directs the National Institute for Standards and Technology to establish federal guidelines for protecting AI models against distillation attacks by foreign entities. The bill aims to preserve the U.S. industrial lead in AI by preventing intellectual property theft.
PHP releases emergency fixes for 2 critical vulnerabilities
The PHP project issued emergency patches for two critical remote code execution vulnerabilities, identified as 'php2shell,' which affect a significant portion of internet infrastructure.
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Microsoft has attributed a supply-chain attack on ConnectWise customers to a China-aligned threat group, Storm-0940, which utilized AI automation to target global aerospace, defense, and military organizations.
U.S. Cyber Command selects Leidos for full-spectrum cyber operations
Leidos has secured a $160 million contract from U.S. Cyber Command to assist in planning and executing full-spectrum military cyber operations.
U.S. Cyber Command selects Leidos for full-spectrum cyber operations
Yahoo Finance
IonQ's Bold Expansion Could Leave Shareholders Paying the Price
IonQ's acquisition of Elisity and recent equity offering have raised concerns regarding shareholder dilution, while supporting a strategic shift into cybersecurity.
ConnectWise customers hit by supply-chain attack linked to compromised API secret
ConnectWise has experienced a supply-chain cyberattack where threat actors exploited an API secret to compromise numerous Microsoft 365 environments belonging to their customers.
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign
Russian state-sponsored hackers, linked to the GRU, have successfully compromised critical defense infrastructure, including a naval shipbuilder and a military aircraft engine manufacturer.
WISeSat.Space and SEALSQ Advance Satellite Cybersecurity Hardening as FOSSA Launches New 6U Satellite Aboard SpaceX Falcon 9
Yahoo Finance
Spyware found on devices belonging to prominent Serbian critics as elections loom
Researchers have identified state-aligned spyware on the devices of prominent political and legal figures in Serbia, highlighting ongoing digital surveillance threats.
DHS to ban DeepSeek from federal civilian agencies
The Department of Homeland Security has banned civilian federal agencies from using AI models from the Chinese firm DeepSeek, citing significant cybersecurity threat vectors to federal IT systems.
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
Senator Ron Wyden is urging federal agencies to implement Encrypted Client Hello technology to prevent hackers from identifying the websites visited by users. The initiative aims to enhance the security of sensitive government web traffic.
Tessera Integrates Autonomous OSINT Capabilities Designed to Anticipate Threats and Act on External Intelligence
Tessera Defense and Homeland Security Inc. (formerly SEALSQ) has introduced new autonomous OSINT capabilities designed to identify risks and coordinate security responses.
Can IonQ's $1.3B Elisity Deal Address Quantum-Era Security Threats?
Yahoo Finance
Federal agencies recommend cyber controls, independent testing for frontier AI systems
The U.S. government, including CISA and the NSA, has issued guidance advising AI companies to implement rigorous cybersecurity controls and independent testing to secure frontier AI models. This follows reports of models bypassing safety protocols in testing environments.