Loading story…
State Chief Information Officers (CIOs) across the United States are making artificial intelligence (AI), including generative and agentic AI, their top strategic initiative for IT modernization and cyber risk management. Facing stagnant budgets, increased demands for digital transformation, and persistent cybersecurity threats, these leaders are turning to AI and automation to deliver improved services and address workforce limitations. The National Association of State CIOs (NASCIO) has highlighted this shift as unprecedented, with AI rising rapidly in priority over the past three years.
This recalibration in IT strategy is driven by the need to do more with less, as state and local government IT budgets remain tight while expectations for digital services and security grow. States like Minnesota are investing in AI to innovate and manage cyber risks more effectively, reflecting a broader trend among public sector technology leaders to leverage next-generation technologies for both operational efficiency and enhanced security posture.
Track how attackers are adapting to this technology.
4 events from the most recent confirmed update back to the earliest known activity.
As the April 2026 ADA compliance deadline for digital accessibility approaches, state CIOs elevated accessibility work as a higher priority. The deadline is shaping technology planning alongside AI initiatives.
State technology leaders said cybersecurity remains a major focus area, with AI being applied to threat detection and response. This indicates AI adoption is extending beyond administrative tasks into security operations.
States including Minnesota and North Carolina reported using AI internally for document generation, policy analysis, and productivity improvements, with measurable return on investment and efficiency benefits. These deployments reflect a move from experimentation toward operational use.
State chief information officers across the United States identified artificial intelligence, including generative and agentic AI, as their leading strategic initiative for 2026. The shift is driven by budget pressure, limited workforce growth, and demand for digital transformation.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Federal agencies are rapidly integrating artificial intelligence into their cyber defense strategies, with a focus on scaling vulnerability identification and operational resilience. Acting Federal CISO Michael Duffy highlighted the need to update the Office of Management and Budget Circular A-130 to reflect the new AI-driven landscape. The government is also reviewing AI's strengths and limitations to ensure secure and efficient public interactions.
Jun 29, 2026
Chief Information Security Officers (CISOs) are facing an increasingly complex cybersecurity landscape, driven by rapid technological advancements and the proliferation of artificial intelligence (AI) and automation. According to CSO’s 2025 Security Priorities Study, 76% of security leaders report that determining the most suitable security solutions for their organizations has become more complicated. The study also highlights that 57% of organizations have struggled to identify the root causes of security incidents in the past year, underscoring the growing sophistication of cyber threats. CISOs are now responsible for a broader range of duties, including developing cyber strategies, managing risk, and addressing the unique challenges posed by AI-enabled technologies. A significant portion, 67%, must also contend with security issues that extend beyond their local regions, reflecting the global nature of modern cyber risks. Persistent challenges such as employee awareness, budget constraints, talent retention, and process complexity continue to hinder progress. Protecting sensitive and confidential data remains a top priority, with 48% of leaders focusing on this area, followed by securing cloud environments and simplifying IT security infrastructure. The integration of AI into security operations is both a necessity and a challenge, as organizations seek to leverage new tools while managing the risks associated with disruptive technologies. CISOs are increasingly looking to consolidate security tools and maximize the value of existing platforms to stretch limited budgets. The evolving threat landscape, marked by a surge in attack volume and severity, demands that security teams adapt quickly and efficiently. The pressure to scale cybersecurity operations is heightened by high-profile incidents affecting major retailers and manufacturers, resulting in significant financial losses and operational disruptions. The sheer volume of threat intelligence generated by these attacks can overwhelm security operations centers (SOCs), making it difficult to extract actionable insights. As a result, CISOs are prioritizing the development of strategies that enable their teams to respond effectively to both current and emerging threats. The need for robust AI governance frameworks is becoming more apparent, as organizations recognize the importance of establishing clear guidelines for AI deployment and oversight. Security leaders are also focusing on enhancing employee training and awareness to mitigate human-related risks. The complexity of the modern security environment requires a holistic approach that balances technological innovation with sound risk management practices. As CISOs navigate these challenges, collaboration with external partners and the adoption of automation are seen as critical enablers for future resilience. Ultimately, the evolving role of the CISO reflects the broader transformation of cybersecurity from a technical function to a strategic business imperative.
Jun 29, 2026
Security leaders in both the financial and enterprise sectors are prioritizing the secure adoption and management of artificial intelligence (AI) technologies, as well as addressing the associated risks and operational challenges. CISOs are focusing on building resilience, integrating AI into security operations, and ensuring that AI-driven tools are used safely and effectively within their organizations. Key concerns include the emergence of new attack surfaces due to AI, the need for robust governance and visibility over AI tool usage, and the importance of balancing productivity with intellectual property protection. In the financial sector, companies like Advisor360 are implementing automation to control the proliferation of unsanctioned AI tools, known as "shadow AI," to maintain compliance and security in a highly regulated environment. Security leaders are also preparing for future threats such as quantum computing and the increasing sophistication of AI-driven attacks, including automated social engineering campaigns. The emphasis is on proactive strategies—such as embedding security controls early in AI adoption, standardizing enterprise-grade AI solutions, and educating employees on safe AI usage—to prevent burnout and ensure long-term business continuity. These efforts reflect a broader industry trend toward leveraging AI for both defensive and operational improvements, while remaining vigilant about the unique risks AI introduces to cybersecurity and regulatory compliance.
Jun 29, 2026