No-frills tech news

Mayor’s Message | Watsonville’s cybersecurity best practices

October not only marks the change of seasons but the start of Cybersecurity Awareness Month as well. We continued work on a multi-year cybersecurity grant project, now approaching its final phase. The city participated in a regional tabletop exercise that allowed us to work with neighboring agencies during a mock incident. This strengthens our response strategies both locally and regionally and helps build communication channels for sharing information on emerging threats. Our IT department is passionately invested in best practices surrounding cybersecurity.

UTulsa cybersecurity researcher named national RSAC Security Scholar

For University of Tulsa graduate student Jalen Brown, cybersecurity is more than a field of study. Brown, who earned his bachelor’s degree in cybersecurity from UTulsa in just two and a half years and is now pursuing a master’s degree while conducting digital forensics research, was recently selected as a 2026 RSAC Security Scholar. Within that larger gathering, Security Scholars participate in exclusive networking and professional development opportunities designed specifically for the nation’s most promising cybersecurity students. UTulsa is one of only 38 universities nationwide, and the only university in Oklahoma, invited to participate in the RSAC Security Scholar program. The invitation reflects the national reputation of UTulsa’s School of Cyber Studies and its longstanding leadership in cybersecurity education, research, digital forensics and industry engagement.

Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings

The data breach originated with security failings at American Medical Collection Agency (AMCA), a debt collector that Labcorp worked with. The attorneys general contended that Labcorp should have don’t more to police AMCA, after the incident there impacted a total of 27.5 million people nationwide. Security changes include creating an incident response plan for vendor security failings, limiting how much data Labcorp shares with vendors and building an expansive risk management team charged with tracking vendors’ compliance with data security practices. In 2021, a court sided with the coalition of attorneys general suing AMCA and ordered the debt collector pay a $21 million fine that was suspended because the company went bankrupt. “As a result of our investigation, Labcorp will make critical changes to protect patients and prevent this kind of data breach from happening again.”

Businesses expand AI’s cybersecurity uses as comfort with technology grows

Dive Brief: Businesses are getting better at securing their AI systems as they spend more time using the technology, the advisory firm KPMG found in its latest quarterly AI survey. Dive Insight: One of the KPMG report’s key insights is that organizations’ AI maturity levels strongly influence how they use AI in the context of cybersecurity. Among experimenters, 26% use AI only to monitor systems; among established users, the figure is 4%, reflecting organizations’ growing comfort with plugging AI into more security tasks over time. Established AI users were also more likely than experimenters to report spending some of their AI budgets on cybersecurity (71% versus 36%). As businesses see the threat landscape grow more complex, they are racing to update their cybersecurity strategies to account for faster-moving attacks.

Information Networking Institute

Her session, “The Future of AI and Cyber: Landscape, Threats and Opportunities,” will examine current trends in how cybersecurity interacts with AI. We interviewed Dr. Wang to understand her thoughts on the field and what participants can expect from her session. Dr. Wang: AI as a field has progressed very quickly, with innovations coming fast and furious. In the Future of Secure AI executive certificate program this November, you’re going to be leading a session on the future of AI and cyber. When you look at how AI innovation and cybersecurity intertwine, what fascinates you the most and what worries you?

NSF Awards $4.8 Million to URI Cybersecurity Center Under Victor Fay-Wolfe

The University of Rhode Island’s Digital Forensics and Cybersecurity Center, part of the Department of Computer Science and Statistics, has been awarded two NSF grants totaling $4.8 million. The funding will support scholarships for students in the Professional Science Master’s in Cybersecurity program and the new Securing Artificial Intelligence track. The first award, a three-year, $2,891,678 CyberAICorps Scholarship for Service grant, will provide full scholarships, stipends, and government summer internships to two cohorts of graduate students who commit to protecting AI and cybersecurity systems in public service. The award builds on URI’s CyberCorps SFS program, which has placed 93% of its graduates in government cybersecurity jobs since 2021. The second award, a $1,993,716 S-STEM grant called Pathways To A Cybersecurity/AI Career, will offer last-dollar scholarships and mentoring to 30 academically talented, low-income students pursuing the Master of Science in Cybersecurity over five years.

USDA Awards 25 Spots on $1B CPOC Cybersecurity Support BPA

Federal spending data shows ordering periods for most of the awards began Monday, Sept. 21, and run through Sept. 20, 2031. Who Are the USDA Cybersecurity BPA Awardees? The company said ordering contracting officers will determine order types at the call-order level under the General Services Administration’s Multiple Award Schedule special item number for highly adaptive cybersecurity services. Functional Area 3 supports CPOC’s departmentwide operations, covering enterprise cybersecurity engineering and operations, privacy operations, security management, identity, credential and access management, and cyber supply chain risk management. The latest USDA award adds to the department’s earlier investments in cybersecurity support services. In June 2023, Alpha Omega and teaming partner Dynamo Technologies received a five-year, $70 million contract to provide cybersecurity operations support to the Information Security Center, which later became the CPOC.

Mastercard Tackles SME Security Gap with Built In Protection

According to the research, small businesses are evaluating growth through a lens of stability and control rather than speed. The need to embed protection within services The Dreamonomics research identified a gap between cyber risk recognition and deployment of security tools among SMEs. "Small business owners are managing cash flow, serving customers and running day-to-day operations," Mark says. How Mastercard Collection for Business integrates security Mastercard launched the Mastercard Collection for Business to address the adoption gap. Business security features include My Cyber Risk, which provides an assessment of an SME's online exposure and highlights vulnerabilities through a dashboard.

Cybersecurity Stocks Soar Amid Mounting Concern Over AI Hacks

As policymakers debate the case for sweeping new AI guardrails, the world isn’t waiting. It’s making a beeline for the cybersecurity industry’s services. In a note to clients last week, Bank of America analysts called cybersecurity a “mega-theme and enabler of the AI era.” This week, the company unveiled a new “Continuous Frontier AI Defense” that employs a handful of models including Mythos 5 and GPT-5.6-Cyber. Meanwhile, both OpenAI’s Sam Altman and Anthropic’s Dario Amodei urged the United Nations Security Council this week to adopt new AI safety standards.

Expert Urges Water Utilities to Focus on Cybersecurity Basics

Meanwhile, other states have already spent several years strengthening cybersecurity for water and wastewater systems. New Hampshire, for example, worked with the Overwatch Foundation to help secure drinking water systems, while Kansas launched a related cybersecurity assessment program in early 2024. New York, New Jersey and Massachusetts are actively providing grants aimed at improving cybersecurity for community water systems. Kellerman said that public utilities can better defend themselves by elevating cybersecurity leadership and focusing on basic cybersecurity hygiene. The advice closely tracks with ongoing advice from agencies such as the Cybersecurity Infrastructure and Security Agency.

Cybersecurity Certification Programs that cover Cloud Security and Incident Response

As organizations increasingly migrate workloads, applications and data to cloud environments, cybersecurity professionals are expected to understand both cloud security and incident response. ISC2 Certified Cloud Security Professional (CCSP) The Certified Cloud Security Professional (CCSP) is designed specifically around cloud security. For professionals working in cloud security, cloud architecture, information security and governance, CCSP can provide a broad understanding of securing cloud environments. GIAC Cloud Security Essentials (GCLD) The GIAC Cloud Security Essentials (GCLD) focuses on practical cloud defense. GIAC Cloud Forensics Responder (GCFR) Another specialized certification is the GIAC Cloud Forensics Responder (GCFR).

Airties Expands AI-Driven Connectivity Platform with Integrated Cybersecurity

The cybersecurity threat landscape is evolving quickly, driven in part by the growing sophistication of AI-driven attacks. About Airties Airties empowers operators to provide smooth, smart, secure connectivity. Airties turns smart connectivity into a competitive advantage for operators and enhances how subscribers experience connectivity in the real world: making every connection more intelligent, reliable and secure. Airties' AI-driven insights enable operators to lower churn, reduce expenses, boost satisfaction, and attract new customers. Sources: ¹NETGEAR and Bitdefender, 2025 IoT Security Landscape Report; ²F-Secure, Global Consumer Market Survey 2026; ³Hitron, SMB Research, 2026 SOURCE Airties

Protecting Michigan Residents: Mitigating, responding to, and recovering from new threats

As part of National Preparedness Month, MI Environment is putting a spotlight on its work on cyber security and threats to Michigan’s critical infrastructure systems. In our connected world, cyber security and threats to critical infrastructure systems have become leading threats for emergency management and utility operators across the globe. In Michigan, threats and cyber bad-actors have targeted hospitals, distribution systems, and water utilities. EGLE, in collaboration with the Michigan State Police, the Environmental Protection Agency (EPA), Michigan Department of Technology, Management, and Budget (DTMB), and the Critical Infrastructure Security Administration (CISA) offers free cyber security risk assessments for drinking water and wastewater treatment facilities in Michigan. For a more detailed summary of what resources are available to water utilities, visit the Cybersecurity Assessments webpage.

America’s Water Systems Face a Growing Cybersecurity Threat

America’s water systems are increasingly in hackers’ crosshairs. But states also are confronting another common challenge—how to help local water systems that already face limited technical and financial capacity and competing infrastructure needs manage growing cyber risks. Fiscal Risks to Water Systems Cyberattacks on water systems can include ransomware incidents, breaches of customer data, and intrusions into operational technology that can disrupt service, damage infrastructure, or compromise technologies used to operate and monitor water systems. As of 2024, more than 85% of Maryland residents were served by water systems that had completed cybersecurity assessments. Final Thoughts As cyber risks grow and regulatory requirements increase, local water utilities will face growing pressure to invest in cybersecurity measures despite ongoing funding and capacity constraints.

National Cybersecurity Awareness Month is starting!

Each October, IT Services observes National Cybersecurity Awareness Month with a full schedule of events, lectures, content, and more. Main theme for NCSAM 2026: AI and Data Privacy This year, National Cybersecurity Awareness Month (NCSAM) focuses on AI, cybersecurity, and data privacy. By practicing good cybersecurity habits and understanding how our data is being used, we can stay safer and more secure. Helen has a master’s degree in public policy, blogs about cybersecurity stuff and is the author of “Navigating the Cybersecurity Career Path”. Location: Boyd Hall parking lot Please read carefully: Every document shredded still needs to be compliant with university retention policies.

Epic shifts focus to cybersecurity while AI, interoperability agenda still on track, company says

During Modern Healthcare's Leadership Summit on Tuesday, CEO Judy Faulkner said the company was pausing most technology development to focus on system security. "We’re participating in Project Glasswing and using AI tools to stay ahead of cybersecurity threats that are growing across all industries," Epic's spokesperson said. Anthropic's Project Glasswing is an AI cybersecurity initiative that brings together major technology companies along with organizations responsible for maintaining critical digital infrastructure. During Epic's UGM in August, Stirling Martin, Epic's chief security officer, confirmed that Epic was participating in the initiative. Epic's heightened focus on cybersecurity comes as healthcare organizations rapidly adopt AI tools, even as the industry grapples with the risks of accelerating innovation and mounting calls from some leaders to slow AI development.

FBI probes cyberattack tied to third-party jobs portal

The FBI is investigating a cyberattack on its jobs portal after the cybercrime group ShinyHunters said it hacked the system and stole a vast trove of sensitive data from the bureau. ShinyHunters told 404 Media that it hacked into the jobs portal using a zero-day vulnerability in Oracle’s PeopleSoft human-resources platform, a tactic it has used before. Foreign governments could also use FBI employees’ personal data to monitor them and undermine their investigations and operations. The FBI’s jobs portal is currently offline and displays a banner explaining that the site is unavailable. Kaiser pointed to a 2016 breach that led to the theft of personal information belonging to tens of thousands of FBI employees.

AI in cybersecurity: Balancing automation and talent development

September 23, 2026 Managed service providers (MSPs) are increasingly looking to artificial intelligence to address the cybersecurity talent gap. The integration of AI into cybersecurity operations presents a complex challenge for MSPs. While AI can absorb routine Security Operations Center (SOC) and help desk tasks, improving efficiency and lowering costs, this automation risks removing the foundational experience that junior analysts traditionally gain from reviewing numerous alerts. To counter this, experts suggest redesigning entry-level roles to focus on reviewing AI decisions, investigating exceptions, and developing critical thinking skills. Ultimately, the industry must focus on cultivating expertise through mentorship and structured career progression rather than solely relying on automation or traditional recruitment methods.

GAO flags FAA cybersecurity weaknesses across aviation communications, spectrum threats and real-time monitoring

The U.S. Government Accountability Office (GAO) reported that the Federal Aviation Administration (FAA) has not sufficiently addressed cybersecurity threats to aircraft communications. The report examines, among other objectives, extent to which FAA has identified and mitigated spectrum-related cybersecurity threats; extent to which FAA collaborated with federal partners to defend against cybersecurity threats; and what specific cybersecurity vulnerabilities exist in key communication applications. GAO reported that FAA identified emerging spectrum-related cybersecurity threats to the NAS and international flight routes. As a result, FAA may not have sufficient information to identify, assess, and address cybersecurity risks affecting critical aviation communications systems. In conclusion, GAO reported that the NAS relies on increasingly interconnected aviation systems vulnerable to evolving cybersecurity threats, including spectrum interference, spoofing, and jamming.

Itron, Crytica Partner on Grid-Edge Cybersecurity

Itron and Crytica Security have announced a technology collaboration focused on detecting cyber threats and improving operational visibility across utility grid-edge infrastructure. The collaboration is designed to integrate Crytica’s Rapid Detection, Alert and Isolation technology, RDAi, into Itron’s Grid Edge Intelligence portfolio. Itron’s Grid Edge Intelligence portfolio includes layered device, network, communications and data protection. Our collaboration with Crytica builds on that foundation by adding rapid, embedded threat detection designed for the next generation of grid-edge applications.” The collaboration comes as Itron works to support utilities transitioning from traditional advanced metering infrastructure to Grid Edge Intelligence, combining distributed intelligence, connectivity, analytics and security.