U.S. Public Sector Under Siege: Threat Intelligence for Q1 2026

Q1 2026 public-sector threat intelligence: China-aligned APT Salt Typhoon achieved persistent access to U.S. congressional emails and telecoms while AI-enabled ransomware groups and automated initial-access tools (e.g., Tsundere Bot) accelerated attacks; education and state DHS systems suffered large data exposures, supply-chain incidents impacted law enforcement, and multiple critical CVEs (Fortinet, Cisco, VMware, Microsoft) were actively exploited — the report urges a shift from reactive incident response to proactive Cyber Risk Exposure Management.