The Treasury Inspector General for Tax Administration assessed the IRS information security program as ineffective for the second year in a row. A report dated September 15, 2026, revealed that six of seven sampled systems had critical vulnerabilities left unfixed beyond the 30-day limit. The agency also reported 841 privileged service accounts operating outside its management system across 313 systems. While encryption of stored data remains incomplete with a target date of fiscal 2027, the IRS received credit for improvements in multifactor authentication and audit log collection.
Read the full story at ascotfarms.com.
Photo: geralt / Pixabay
