Critical Infrastructure

The UK government announced approximately £600 million for AI security, biosecurity, cyber defence, research, and related programs, including £60 million for AI research and procurement contracts. The package signals potential future demand, but provides no solicitations, award dates, or contracting contacts; the funding should not be treated as an open competition or an award.

Virginia Executive Directive 6 orders a statewide plan for preventing and responding to cyberattacks, strengthening critical-infrastructure resilience, and addressing AI-related risks. The Cyber Consortium and regular briefings with AI companies, researchers, and regulators may help surface future state needs, but the directive announces no funding, solicitation, contract value, or procurement schedule.

USTDA is funding a feasibility study and pilot of U.S. cybersecurity technology for Moldova’s state-owned Moldtelecom and a proposed security operations center. Moldtelecom selected Pythia International to assess network risks and demonstrate a pilot solution; no funding amount or timeline was disclosed, and the announcement is not an open solicitation.

The U.S. Coast Guard’s NVIC 02-26 explains how covered maritime operators can meet cybersecurity requirements established under 33 CFR Part 101, Subpart F. Operators must designate a qualified Cybersecurity Officer, complete a risk assessment, and submit a Cybersecurity Plan by July 16, 2027; outside assistance is optional, and penetration testing is not required for initial submissions.

A Federal News Network commentary warns that Iran-linked cyber activity increasingly targets U.S. critical infrastructure, the defense industrial base, subcontractors, and operational technology. It says NIST SP 800-171 controls can mitigate 68% of 130 mapped techniques, while appropriate monitoring can detect all 130—pointing contractors toward supply-chain, OT, and monitoring reviews rather than a new procurement mandate.

Niagara Power Transformer has broken ground on a more than $71 million Cheektowaga expansion expected to boost production capacity by 50 percent, retain 146 jobs, and create 73 positions. State and local incentives support the project, but the announcement identifies no open solicitation or contract award; suppliers may monitor potential private-sector opportunities tied to the facility’s growth.

CISA branch chief Lindsey Cerkovnik is leaving after nearly six years, creating a leadership transition across vulnerability response, industrial-control-system vulnerabilities, and the CVE Program. A 2025 contract extension prevented a potential CVE data-flow interruption, but no new solicitation, contractor, contract value, or replacement official has been identified.

At the 7th U.S.-ASEAN Cyber Policy Dialogue, the United States and ASEAN members reaffirmed cooperation on cyber strategies, incident information sharing, cybercrime, scams, and critical infrastructure protection. The statement identifies policy priorities—not a contract, funding opportunity, solicitation, or procurement timeline.

The proposed AI Cyber Defense Act would direct NIST to develop voluntary guidance against AI model distillation attacks and convene government and industry stakeholders on critical-infrastructure cybersecurity. It does not authorize funding or create a procurement mandate, but could give AI security providers and federal contractors a forum to contribute expertise if the bill advances.

CISA, the FBI, the U.S. Secret Service, and international partners report that SafePay has affected about 600 organizations worldwide since August 2024, including critical-infrastructure operators. Contractors should review the advisory’s indicators and mitigations, urgently patch cited Cisco, Veeam, and SonicWall vulnerabilities, and assess protections for remote access, networks, and backups.

Dispel and Tenable have integrated Tenable One OT Exposure intelligence with Dispel’s Zero Trust Engine to inform industrial remote-access decisions in real time. Available to joint customers across cloud, on-premises, and hybrid environments, the commercial offering is not a government award or solicitation but may inform OT cybersecurity requirements and market research.

The U.S. Department of Energy advanced Eos Energy Enterprises $87 million to reimburse eligible costs for its second zinc-battery production line in Warrendale, Pennsylvania. The draw under an existing loan facility is not a new solicitation; Line 2 entered commercial production in June 2026 and is ramping toward 2 GWh of annual capacity.

The DOJ and FBI have seized seven domains linked to cyber activities of China's Integrity Technology Group. This action underscores ongoing national security risks for critical infrastructure, prompting contractors to reassess cybersecurity measures and capabilities.

A recent report indicates nearly 90% of state CIOs prioritize cybersecurity for critical infrastructure. With states boosting support to municipalities, there's a rising demand for cybersecurity services and assessments, highlighting potential procurement opportunities.

Federal agencies are warning over 100 water utilities nationwide about cybersecurity vulnerabilities. This situation presents significant procurement opportunities for cybersecurity firms specializing in protecting critical infrastructure, particularly for systems exposed to the internet.

The Cybersecurity and Infrastructure Security Agency (CISA) released an advisory revealing vulnerabilities in federal cybersecurity efforts following red team exercises. The report highlights the need for improved incident response and cloud security practices within federal agencies and contractors, signaling potential shifts in procurement requirements.

The **NIST** has unveiled critical cybersecurity guidance aimed at resource-constrained operators of Building Automation and Control Systems (BACS). This guidance is set to create procurement opportunities for contractors specializing in **OT** cybersecurity, emphasizing the need to address vulnerabilities in critical infrastructure components.

Recent attacks by Iranian state-sponsored hackers compromised more than 30 municipal water systems in Minnesota. This alarming incident illustrates the critical need for enhanced cybersecurity measures in water infrastructure, urging procurement professionals to prioritize advanced solutions tailored for industrial control systems.

Federal agencies including FBI and CISA warn of coordinated cyberattacks on water systems, notably in Minnesota and Michigan. These attacks underline the urgent need for enhanced cybersecurity measures in water infrastructure, leading to potential expansion of federal funding and contracting opportunities for cybersecurity solutions.

Recent cyberattacks targeting over 30 municipal water facilities have revealed critical vulnerabilities in operational technology systems. Federal agencies, including the FBI and CISA, are investigating the incidents, emphasizing the need for increased funding and advanced cybersecurity measures for America’s water infrastructure.

Recent cyberattacks on Quebec's municipal water treatment facilities highlight significant cybersecurity vulnerabilities. Stakeholders are calling for stronger, standardized protocols to protect critical infrastructure against foreign state-sponsored hacking groups.

Several Minnesota municipal water utilities recently reported cyber incidents affecting operational technology, underscoring vulnerabilities in critical infrastructure. This highlights an urgent need for enhanced cybersecurity measures and procurement opportunities for contractors in the sector.

U.S. Treasury Secretary Scott Bessent emphasizes the need for resilient supply chains to combat economic shocks and foreign coercion. The strategies unveiled may signal increased procurement opportunities for domestic suppliers and innovations in supply chain management that align with U.S. economic interests.

Taoglas has acquired Sure Antennas, enhancing its public safety and automotive antenna capabilities. This strategic acquisition will improve procurement options for mission-critical fleet communications transitioning to LTE and 5G, especially in Europe.

Hong Kong’s Digital Policy Office has launched a comprehensive cybersecurity initiative for 2026, targeting the rising challenges associated with AI adoption. The program emphasizes collaboration, intelligence sharing, and enhanced defense strategies among critical infrastructure sectors, presenting new procurement opportunities for cybersecurity vendors.

Eight major U.S. telecom firms have launched the Communications Cybersecurity Information Sharing and Analysis Center (C2 ISAC) to enhance cybersecurity in the sector. This initiative reflects a crucial shift towards industry-led defense strategies amid rising cyber threats, providing potential procurement opportunities for cybersecurity vendors and influencing future contract requirements.

The National Institute of Standards and Technology (NIST) has released a draft update to its Positioning, Navigation, and Timing (PNT) cybersecurity profile to align with the revised Cybersecurity Framework 2.0. This revision addresses emerging threats in GPS reliability, AI risks, and supply chain vulnerabilities, urging federal agencies and contractors to adapt their cybersecurity measures accordingly.