Sean Lyngaas

Sean Lyngaas is a cybersecurity reporter at CNN who focuses on how digital threats collide with government power, national security and the people inside critical institutions. His coverage links individual hacks and criminal cases to the systems, agencies and policies that make them consequential. He writes in a straightforward, investigative style that keeps complex technical and legal issues tied to clear public-interest stakes.

Cyber incidents and law enforcement

Lyngaas frequently reports on high‑impact cyber incidents involving law enforcement, intelligence access and criminal abuse of technology. His coverage of an FBI agent accused of using internal access to steal nearly $1 million in cryptocurrency shows his interest in insider misuse of investigative tools and the vulnerabilities created when trusted systems are exploited.

He has reported on Apple’s lawsuit against NSO Group and its parent company, explaining how anti‑hacking laws apply to commercial spyware and the broader debate over surveillance technology and accountability. His stories on Microsoft offering free cybersecurity tools to government and commercial customers in the wake of hacking campaigns highlight how major vendors respond when their platforms are implicated in attacks. He also covers ransomware incidents such as the attack that shut down Japan’s busiest shipping port, tracing operational disruption and the steps authorities and operators take to resume activity.

Across these pieces, he consistently frames technical breaches in terms of the institutions, laws and operational decisions that determine their impact.

Government, national security and the federal workforce

A defining strand of Lyngaas’s work is the intersection of cybersecurity with government operations, national security and the federal workforce. His reporting on a Pentagon data breach involving military personnel focuses on how exposed data can translate into security risks for service members and the organizations that rely on them.

In stories on global cyberattacks by Russian cybercriminals against businesses, universities and government agencies, he follows how officials assess the scope of data compromise and coordinate the response. He has publicly described having more than a decade of experience covering the federal workforce, and he uses that familiarity to show how cyber issues affect employees and internal systems, not just abstract policy.

Coverage of Trump administration efforts to allow US companies to conduct cyberattacks under certain conditions reflects his interest in how offensive cyber policy is communicated, constrained and implemented. His reporting and commentary on suspected Chinese hackers impersonating a senior Anthropic employee and former US officials to seek information on military applications of AI and export controls shows a focus on the blend of espionage tradecraft, technology and regulatory enforcement. Even in pieces about the US military asking troops for “creative and unconventional” ideas, he connects personnel initiatives back to emerging threats and capabilities in the cyber domain.

The thread running through this work is his attention to how cyber risk is managed inside government, and how policy choices translate into day‑to‑day exposure for institutions and workers.

Tech platforms, AI and online influence

Lyngaas regularly covers how major technology platforms, AI tools and online ecosystems are exploited for hacking, fraud and influence operations.

His reporting on Meta’s warnings that hackers are exploiting global interest in ChatGPT - including headlines such as “ChatGPT is the new crypto” - shows his focus on how new technologies quickly become lures for credential theft and malware. In related coverage of Meta shutting down a network of fake accounts linked to China‑based influence efforts, he explains how platform enforcement reveals shifts in foreign information operations and the tactics used to manipulate public debate.

The Apple–NSO Group lawsuit coverage again ties platform security to surveillance tools that target journalists, activists and officials. Outside of formal articles, his detailed thread on John Mark Dougan and Russian disinformation campaigns targeting US political figures underscores his attention to how individuals and networks drive online influence operations and election‑related narratives. His work on suspected Chinese efforts to purloin information on military AI applications and export controls positions AI not merely as a technology story but as a national‑security and industrial‑policy concern.

These pieces share a concern with how platforms and emerging technologies are leveraged in campaigns that mix hacking, social engineering and information warfare.

Career and international focus

Lyngaas describes himself as a journalist with several years of professional experience in international relations, which underpins his approach to cybersecurity stories that cross borders and jurisdictions.

His reporting has appeared in outlets including The Atlantic, The Economist, The New York Times and The Washington Post, indicating a background in writing for both US and international audiences on complex policy and security topics. Before focusing on cybersecurity at CNN, he covered defense and intelligence issues, including how Pentagon and intelligence agencies approached cyberspace, experience that informs his current work on military data breaches and offensive cyber policy.

He has also written extensively on diplomacy and international power dynamics, interviewing ambassadors and other senior figures, which aligns with his current interest in how foreign governments and actors mount cyber and influence operations. That combination of cyber expertise, federal workforce coverage and international relations experience gives his reporting a consistent frame: threats are weighed not only by technical severity but by their implications for institutions, alliances and public trust.