#United States #Cybersecurity #Milpitas #SonicWall #SLED

The Alarming Rise of Cyber Attacks on State and Local Governments in 2026

SonicWall's recent report, 2026 State and Local Government (SLED) Protect Brief, exposes a stark reality for public sector organizations. In the United States, state and local governments have faced a staggering 242% surge in cyber attacks during the first half of 2026 compared to the previous year. With over 300 million intrusion attempts recorded, this alarming trend poses significant risks to sensitive governmental data and public services.

Rising Cyber Threat Landscape

The report highlights that unlike most industries, where attackers have become more selective, state and local governments are experiencing an unprecedented volume of attacks. Threat actors are exploiting aging public portals and unpatched legacy systems, leading to a situation where these crucial entities are constantly battling a high number of unwanted intrusions. Public sector IT teams, often constrained by tight budgets and diverse systems, are under immense pressure to safeguard their infrastructures. Shifts in data breach dynamics indicate that these organizations might be particularly vulnerable due to outdated technology and inconsistent updates across various departments.

Michael Crean, the Senior Vice President of Managed Services at SonicWall, emphasizes the burden on governmental IT teams, noting, "State and local government networks are taking the brunt of attacker focus." This statement underscores how hackers are taking advantage of the structural weaknesses within governmental digital infrastructures.

Key Findings from the Report

Among the critical insights gleaned from the SonicWall SLED Protect Brief are the following:

• - The intrusion prevention system (IPS) volume for state and local governments jumped 242%, with an average of 162,062 IPS hits per firewall—a figure surpassing all enterprise verticals.
• - Web attacks were responsible for a substantial 85.1% of the IPS volume, pointing to the urgent need for enhanced web security measures.
• - Although malware detections hit 57.7 million—an increase of 8.6% year-over-year—it is notable that nearly 90% of these were classified as Trojan-class malware, which are designed to maintain hidden access and eventually lead to credential theft.
• - During this period, ransomware incidents fell significantly, yet several notorious ransomware families remained active, creating a mixed but concerning security atmosphere.

A Legacy of Vulnerabilities

One of the most troubling aspects described in the report is the continued exploitation of the Apache Log4j2 vulnerability. Even four years after its disclosure, government entities have recorded 19.5 million hits across 585 firewalls. This indicates that many widely-used Java-based systems in state and local governments still operate on unpatched versions, which severely undermines cybersecurity efforts.

The scenario is compounded in regions outside North America, especially in Europe, where varying attack strategies—such as SIPVicious VoIP fraud—account for a notable share of IPS volume, thus showcasing a differentiated threat landscape.

Overcoming Structural Challenges

The infrastructural vulnerabilities within state and local governments necessitate immediate intervention. SonicWall advocates for a Zero Trust architecture that shifts from traditional VPN access to a more secure framework. This model ensures that validation occurs at the application level and continuously verifies the identity and device posture of users. Therefore, compromising one login does not grant broader access to an entire network.

Agencies are encouraged to take concrete steps towards this transformation, including:
1. Replacing flat VPN access with Zero Trust models.
2. Implementing offline, immutable backups for enhanced data security.
3. Improving patch cycle consistency across departments to address vulnerabilities promptly.

Crean reinforces this urgency: “Public-sector IT teams are being asked to do more with less while defending systems that were never designed for today’s threat landscape.” Adopting a proactive approach to cybersecurity is no longer optional; it is essential for safeguarding critical public services and maintaining citizen trust.

For further insights and to understand better how SonicWall can assist in securing your organization, visit their official site at SonicWall.

Conclusion

As cyber threats continue to evolve, the significant increase in attacks targeting state and local governments should prompt immediate action. A robust cybersecurity strategy, paired with updated technology and policies, can make a critical difference. The responsibility lies not only with public sector organizations but also with their interplay with private partners to build and implement sustainable and effective cybersecurity measures. Without action, the future of public cybersecurity remains precarious.