%3Aquality(100)&w=640&q=75){kind=logo}
The BlackBerry Security Briefing Center
Situational Awareness. Now.
Situational Awareness. Now.
The gap between resilient and vulnerable communications architectures often becomes visible only after an incident. This briefing center is a running record of that gap, built for the decision-makers operating in rapidly changing mission-critical environments.
%3Aquality(100)&w=3840&q=75)
EU Cyber Body Confirms State-Linked Account Takeover Campaign Against Senior Officials on WhatsApp and Signal
WHAT HAPPENED Consumer messaging apps are now a recognized target for state-sponsored cyber operations. Recent EU briefings highlight account takeover and spear-phishing campaigns aimed at senior government, military, diplomatic, and media figures. The common thread is simple: sensitive conversations are taking place on platforms not designed for high-assurance communications, creating opportunities for compromise and persistent access. BLACKBERRY PERSPECTIVE Recent incidents show that encrypted consumer apps can still create operational risk. Effective communications security requires more than replacing devices or issuing warnings. It requires a trusted, managed alternative that enables fast coordination under organizational control. Keep reading ›
%3Aquality(100)&w=3840&q=75)
UK Power Plant Cyberattack Underscores the Need to Plan for Operational Continuity
WHAT HAPPENED A recent cyberattack temporarily shut down a UK power generator, but the wider energy system remained resilient. The incident reinforces an important lesson: operational continuity matters at every level. Ongoing collaboration between industry, regulators, and cybersecurity agencies demonstrates how preparation, resilience, and coordinated response help strengthen critical infrastructure against evolving threats. BLACKBERRY PERSPECTIVE The lesson is resilience. Strong defenses matter, but organizations also need tested plans to maintain operations, coordinate effectively, and recover quickly when disruptions occur. Keep reading ›
%3Aquality(100)&w=3840&q=75)
CISA's New Guidance Tells Operators How to Communicate While OT Systems Are Isolated
WHAT HAPPENED New guidance from CISA and international partners reinforces a simple principle: resilience depends on communication. Organizations should establish trusted communications plans, cross-functional response teams, and backup channels before a disruption occurs. Clear, timely coordination helps critical infrastructure maintain operations and recover with confidence when systems are under pressure. BLACKBERRY PERSPECTIVE CISA's guidance reinforces a key resilience principle: operational recovery and stakeholder communication require separate plans. BlackBerry® AtHoc® and BlackBerry® SecuSUITE® help organizations maintain trusted, out-of-band coordination when primary systems are disrupted or offline. Keep reading ›
Upcoming Mandates
The next wave of global cyber and resilience requirements is already taking shape. A clear view of upcoming requirements helps regulated organizations prioritize readiness, investments, and implementation efforts.
EU Cyber Resilience Act: mandatory vulnerability and incident reporting for products with digital elements (Sept 11)
Canada’s Critical Cyber Systems Protection Act (CIREN and Bill C-8)
CIREN's next steps focus on operator readiness (Coming soon): Plan for three months of system isolation, independent operations, and recovery.
Cyber Security & Resilience Bill - House of Lords. Royal Assent expected late 2026
Bill C-26 (CCSPA) - third reading pending. Critical cyber systems obligations for federally regulated sectors
October 17, 2027: The European Commission must complete its first review of NIS2.
This is a Commission review milestone, not a new organization-level compliance deadline.
All Critical Briefings – September 2026
Fake Help Desk Calls Exploit Executive Data Theft and Extortion Campaign
WHAT HAPPENED
Across the globe, attackers are targeting trust as much as technology. Organizations that strengthen identity security, access controls, and user awareness will be better positioned to adapt as threats evolve.
BLACKBERRY PERSPECTIVE
The lesson extends beyond any single campaign. As attackers continue to exploit trust rather than technology, organizations must strengthen verification practices and identity security as part of everyday operations.
_______________________________________________________________________________
Threat Researchers Find State-Linked Clusters Hijacking Accounts Through WhatsApp Device Linking and OAuth Abuse
WHAT HAPPENED
Recent campaigns show that attackers increasingly exploit trusted identities, authentication workflows, and third-party relationships rather than breaking encryption itself. The positive takeaway is clear: organizations can strengthen resilience by securing accounts, validating access paths, and adopting trusted communications practices that reduce risk before an incident occurs.
BLACKBERRY PERSPECTIVE
Strong encryption is only part of the equation. Resilient organizations also control which devices and users can access sensitive communications, strengthening trust, security, and continuity in an increasingly connected world.
_______________________________________________________________________________
Apple's Largest Mercenary Spyware Warning Yet Reaches Users in 110 Countries
WHAT HAPPENED
Apple's latest threat notifications, sent to users across 110 countries, highlight a growing reality: sophisticated attacks increasingly target the device and the individual, not just the message. The positive takeaway is that awareness, stronger security practices, and trusted communications solutions can help organizations and leaders stay resilient as threats continue to evolve.
BLACKBERRY PERSPECTIVE
A targeted device alert is a reminder that resilience goes beyond endpoint security. Protecting sensitive communications requires trusted platforms and secure workflows that remain protected even when individual devices are at risk.
_______________________________________________________________________________
White House to Launch Water Sector Cyber Protection Program as State Attacks Continue
WHAT HAPPENED
New initiatives to strengthen water sector cybersecurity reflect a growing focus on resilience. By combining public and private sector expertise, organizations can better protect critical operations, secure remote access, and ensure essential services remain reliable in the face of evolving threats.
BLACKBERRY PERSPECTIVE
The federal program signals that the water sector could not address this gap alone. Officials have already named the vulnerability, a remote access relationship between utilities and their systems integrations that nobody was monitoring closely enough. Utilities do not have to wait for the Texas pilot to close this gap. The audit in the recommended actions above can start today.
_______________________________________________________________________________
North Carolina Ports, Resilience When Systems Fail: Lessons for Mission-Critical Operations
WHAT HAPPENED
A cyber incident at North Carolina Ports required a temporary shift to manual operations, but services continued and recovery efforts began immediately. The event highlights a positive lesson for organizations worldwide: tested continuity plans and resilient operations help keep critical services moving, even during disruption.
BLACKBERRY PERSPECTIVE
Recent incidents across critical infrastructure show that resilience depends on coordination as much as technology. Organizations that invest in trusted communications, continuity planning, and rapid decision-making are better positioned to keep essential services running through disruption.
_______________________________________________________________________________
A National Decision with Global Impact: Federal Water Cyber Protection Sets a Standard for Coordinated Resilience
WHAT HAPPENED
This reflects a broader global shift: critical infrastructure resilience depends on coordinated preparedness, not isolated technical fixes. The organizations and governments best positioned to navigate future disruptions will be those that build trusted operational models that support both security and continuity.
BLACKBERRY PERSPECTIVE
This program reflects a broader global reality: critical infrastructure resilience depends on coordinated defense, trusted operations, and continuity planning. The ability to detect threats, maintain coordination, and keep essential services running is becoming a strategic priority worldwide.
%3Aquality(100)&w=3840&q=75)
What the Report Covers
• What "mission-critical" actually demands from a communications platform • Total communications integrity: identity, device, policy, sovereignty • Mission orchestration: unified command across people, systems, and signals • How the highest-tier security authorities globally validated BlackBerry • Architecture decisions that cannot be approximated by commercial alternatives
Free downloadFind what this means for you
Get the Briefing Behind the Briefing
These summaries are the surface. Talk to a BlackBerry Secure Communications expert about what this month's incidents mean for your agency's specific architecture, certifications, and threat exposure.