Business Technology News Roundup: May 9, 2025

The Cybersecurity and Infrastructure Security Agency (CISA), in partnership with the FBI, EPA, and Department of Energy, issued a critical advisory alerting the US oil and gas sector to a surge in cyberattacks targeting industrial control systems (ICS) and SCADA infrastructure. Recent incidents involved hacktivist groups exploiting weak passwords, default credentials, and unpatched systems to disrupt operations and potentially cause physical damage. The advisory recommends immediate actions such as disconnecting operational technology from public networks, enforcing strong authentication, and auditing third-party access. This warning comes amid heightened geopolitical tensions and increased targeting of critical infrastructure, emphasizing the sector’s vulnerability and the need for enhanced cyber resilience.

The National Institute of Standards and Technology (NIST) suffered a significant loss of talent, with over 20% of its Computer Security Division’s federal workforce departing in recent months. This wave of early retirements and buyouts included key leaders like division chief Matthew Scholl. The departures have sparked concern across the cybersecurity community, as NIST plays a crucial role in developing standards for post-quantum cryptography and artificial intelligence security. With fewer experts on hand, there are fears that progress on these critical standards could slow, potentially leaving US agencies and industries less prepared for emerging threats in quantum computing and AI-driven attacks.

Apple made headlines by introducing a suite of advanced AI-powered features for its iPhone, iPad, and Mac product lines. The updates include smarter photo editing tools, context-aware predictive text, and new health monitoring capabilities that leverage on-device machine learning for privacy and performance. These enhancements are part of Apple’s broader strategy to integrate AI seamlessly into everyday tasks, making devices more intuitive and helpful. Industry analysts note that Apple’s focus on privacy-preserving AI sets it apart from competitors, aiming to deliver powerful features without compromising user data security.

The Microsoft 365 Community Conference, held in Las Vegas from May 6-8, drew thousands of IT professionals and business leaders eager to explore the latest in AI-driven productivity. The event highlighted advancements in Microsoft Copilot, which now offers deeper integration with Teams, Outlook, and SharePoint to automate routine tasks and enhance collaboration. Key sessions covered AI’s role in hybrid work, security best practices, and leveraging Azure OpenAI for custom business solutions. Microsoft also announced new tools for IT admins to manage AI features, reinforcing its commitment to empowering organizations with secure, scalable AI capabilities.

Alvin Independent School District in Texas disclosed a significant data breach after the Fog ransomware gang infiltrated its systems. The attack compromised personal information-including names, Social Security numbers, financial records, and health data-of more than 47,000 students and staff. District officials confirmed that the breach resulted from a sophisticated ransomware campaign, which disrupted school operations and forced a temporary shutdown of critical systems. The incident highlights the persistent threat ransomware poses to educational institutions and the urgent need for robust cybersecurity measures in the public sector.