CISA mandatory reporting rules arrive as MGM settlement finalizes
New CISA regulations arriving in September 2026 will force critical infrastructure entities to report cyber incidents. This mandate follows the massive $100 million financial impact reported by MGM Resorts after a Scattered Spider ransomware attack.
