CISA

CISA is the American federal agency that looks after the security of critical infrastructure: energy, water, hospitals, transport, and the networks underneath them. It publishes advisories when it sees attackers using a new technique, often jointly with the NSA and the FBI, and those advisories are usually the first official confirmation that something is happening in the wild.

We cite it because it is one of the few sources that sits between vendor marketing and rumour. When CISA says attackers are using AI to write exploit code against industrial systems, that is a government agency describing observed incidents, not a security company describing a product.