Major Australian banks are using OpenAI’s most powerful artificial intelligence model to test for vulnerabilities in their cybersecurity systems, while rival Anthropic plans to brief the Reserve Bank of Australia on the ability of its Mythos program to identify threats in the financial system and critical infrastructure.
Commonwealth Bank and Westpac have turned to the OpenAI model – known as GPT-5.5-Cyber – after Anthropic restricted access to Mythos to a group of US technology companies.
Loading...
May 19, 2026 · via afr.com
Anthropic’s Mythos data sharing plan sparks new cybersecurity risk Anthropic’s “Project Glasswing” will allow Amazon, Microsoft, Nvidia and Apple to use the unreleased Claude Mythos model for defensive cybersecurity. Anthropic is posing new threats to AI usage and security risks. It comes as the AI startup Anthropic said on Monday that it is revising its earlier position to allow users of its "Mythos cybersecurity model" to share information about cyber threats with others who may be exposed to similar vulnerabilities. Mythos, announced on April 7, is being deployed as part of Anthropic's "Project Glasswing," a controlled initiative under which select organizations, including major tech firms such as Amazon, Microsoft, Nvidia and Apple are permitted to use the unreleased Claude Mythos Preview model for defensive cybersecurity purposes. According to experts, Mythos' capabilities to code at a high level have given it a potentially unprecedented ability to identify cybersecurity vulnerabilities and devise ways to exploit them. Last week, Anthropic began telling partners that they are generally permitted to disclose their involvement in Glasswing and at their own discretion, share findings, best practices, tools or code developed through the program. "We fully support our partners sharing findings with each other and companies outside of Glasswing to triage vulnerabilities," an Anthropic spokesperson said in a statement. "While there was never a specific Glasswing NDA, confidentiality protections were something partners asked for at the outset and were built into agreements partners signed." The protections were included in agreements with participating companies under which the model is provided after partners sought assurances before sharing sensitive findings and expressed concern about being targeted by attackers. "As the program has matured, we've adapted them to ensure key information can be shared broadly—including outside the program—for maximum defensive impact," the spokesperson added. Anthropic said partners may share that information
May 19, 2026 · via thenews.com.pk
Cybersecurity jobs available right now: May 19, 2026 CISO DataFence | Israel | Hybrid – No longer accepting applications As a CISO, you will develop security roadmaps, compliance plans, risk registers, policies, and control implementation plans while leading audit and regulatory compliance activities. You will manage client projects from planning through delivery, conduct risk assessments, gap analyses, internal audits, and security maturity reviews, and prepare reports and recommendations for stakeholders and executive teams. Cyber Security Analyst ZEE | India | On-site – View job details As a Cyber Security Analyst, you will monitor and investigate alerts across SIEM, XDR, IDS/IPS, and email security tools while managing incident response from triage to RCA. You will conduct threat hunting using TTPs, IOCs, OSINT, and threat intelligence, build and tune detections and SOAR workflows, analyze network and email threats, and improve telemetry, logging, and SOC operations. Cyber Security Engineer Mater Private Network | Ireland | Hybrid – View job details As a Cyber Security Engineer, you will lead the deployment of security solutions, including PAM, EDR, and other enterprise security tools. You will evaluate security architecture and controls across existing and future projects to ensure security is integrated into systems from the design stage. Cyber Security Engineer NSW Police Force | Australia | On-site – View job details As a Cyber Security Engineer, you will implement and maintain technical security controls that protect digital infrastructure, applications, and data. You will contribute to secure system design and delivery by applying cybersecurity standards, supporting risk mitigation activities, and helping ensure compliance with security policies and frameworks. Get weekly updates on new cybersecurity job openings. Subscribe here! Cybersecurity Engineer MED-EL | Austria | On-site – View job details As a Cybersecurity Engineer, you will implement, manage, and improve security technologies across the enterprise, including EDR/XDR, SIEM,
May 19, 2026 · via helpnetsecurity.com
Live Now
All times easternNOW - 5:00 AM
5:00 AM
5:30 AM
6:00 AM
6:30 AM
7:00 AM
Fox Business Channel
Fox Weather First
5:00 AM - 6:00 AM
Mornings With Maria
6:00 AM - 7:00 AM
Mornings With Maria
7:00 AM - 7:30 AM
Fox News Channel
Fox & Friends First
5:00 AM - 6:00 AM
Fox & Friends
6:00 AM - 7:00 AM
Fox & Friends
7:00 AM - 7:30 AM
Fox Weather Channel
Fox News Radio
May 18, 2026 · via foxbusiness.com
Poland has taken a significant step in strengthening its national cybersecurity framework by discouraging citizens and government officials from using popular messaging applications such as WhatsApp and Signal. According to Polish authorities, these globally popular communication platforms may expose users to cybersecurity threats, particularly sophisticated social engineering attacks carried out by Advanced Persistent Threat (APT) groups. These threat actors are often linked to organized cybercriminal networks or state-sponsored hacking operations that target sensitive communications and confidential information. In response to these concerns, the Polish government has introduced a domestically developed messaging application known as mSzyfr Messenger. The application has been specifically recommended for use by government officials and public administration employees as part of a broader initiative to reduce reliance on foreign-controlled digital communication platforms. By promoting a locally controlled messaging ecosystem, Poland aims to strengthen data sovereignty and improve protection against external cyber threats. The mSzyfr Messenger application was jointly developed by the Ministry of Digital Affairs, the Scientific and Academic Computer Network, and the National Research Institute. One of the primary advantages highlighted by Polish authorities is that the platform operates entirely under Polish jurisdiction. This means that user data, metadata, and communication records are processed and stored on servers located within the country, limiting access by foreign entities and reducing the risk of international surveillance or unauthorized data sharing. The move reflects a growing global trend in which governments seek to establish greater control over digital infrastructure and sensitive communications. In recent years, concerns surrounding cybersecurity, data privacy, and foreign influence over communication platforms have intensified. Many governments fear that dependence on internationally operated applications could create vulnerabilities in national security systems, especially during periods of geopolitical tension or cyber warfare. Despite the security-focused objectives behind mSzyfr Messenger, some cybersecurity experts and observers have pointed out certain
May 18, 2026 · via cybersecurity-insiders.com
Monday opens with a trust problem. A mail server flaw is under active use. A network control system was targeted. Trusted packages were poisoned. A fake model page pushed a stealer. Then came the familiar ransom claim: the data was returned and deleted. The pattern is clear. One weak dependency can leak keys. One leaked key can open cloud access. One cloud foothold can become a production incident. AI is speeding up vulnerability discovery, attackers are moving quickly, and old exposure still keeps paying off. Patch the quiet risks first. Let’s get into it. ⚡ Threat of the Week On-Prem Microsoft Exchange Server Exploited in the Wild—Microsoft disclosed a security vulnerability impacting on-premise versions of Exchange Server, which has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-42897 (CVSS score: 8.1), has been described as a spoofing bug stemming from a cross-site scripting flaw. An anonymous researcher has been credited with discovering and reporting the issue. Microsoft is providing a temporary mitigation through its Exchange Emergency Mitigation Service, while it's readying a permanent fix for the security defect. There are currently no details on how the vulnerability is being exploited, the identity of the threat actor behind the activity, or the scale of such efforts. It's also unclear who the targets are and if any of those attacks were successful. The Case for Autonomous Validation in Four On-Demand Sessions Enterprise CISOs, an industry analyst, and security leaders covered why point-in-time testing no longer matches the speed of modern threats, and how teams are using validation evidence to prioritize remediation, prove control effectiveness, and report risk to leadership. Four sessions, all on demand. Watch Now ➝🔔 Top News - Cisco Catalyst SD-WAN Controller Flaw Under Attack—A sophisticated threat actor tracked as UAT-8616 has been attributed to the exploitation
May 18, 2026 · via thehackernews.com
Five years ago, when a major hacking attempt was successful, “it was big news,” said Roman Bohuk, a cybersecurity expert and 2020 University of Virginia alumnus. But, nowadays, “There’s probably 10 news articles each day about some kind of big company getting hacked,” Bohuk said. Earlier this month, a cyberattack temporarily shut down Canvas, an online education platform used by schools nationwide – including UVA – as end-of-semester staples like final exams and projects were in full swing. That incident reinforced the growing demand for companies like SkillBit, the Charlottesville-based startup Bohuk co-founded with fellow Wahoo Thomas Rogers. Originally launched as “MetaCTF,” SkillBit helps companies assess, train and strengthen cybersecurity teams through hands-on simulations designed to mirror real-world attacks. Its client list includes companies such as Uber and GitHub, as well as the University of South Florida. This week, for the second time since 2023, SkillBit is serving as a platform host for the International Cybersecurity Competition in Queensland, Australia. Known informally as the “Cyber World Cup,” the event features teams from more than 80 countries competing in cybersecurity challenges. Rogers, a former UVA basketball player, used a local hoops analogy to describe SkillBit’s role in the event. “It’s like they’re providing JPJ (John Paul Jones Arena) and inviting the teams,” Rogers said, “but we’re giving them the court, the balls, the baskets to help run the infrastructure around the actual game. “We are creating the scenarios that the teams are going to have to solve as a part of the competition.” Whether through international competitions or corporate training exercises, SkillBit’s goal is to help organizations better prepare for cyber threats. “We’ll build a mock website for a small business,” Rogers said, describing a typical exercise, “and we build the website to be vulnerable on purpose. And then we present
May 18, 2026 · via news.virginia.edu
Threat actors know that most organizations are going to have some type of endpoint defenses, whether it’s next-generation antivirus (NGAV), endpoint detection and response (EDR), or an endpoint protection platform solution (EPP). Getting around these defenses is part of their playbook and tradecraft, covered in frameworks like MITRE ATT&CK under the Defense Evasion tactic and techniques like Impair Defense (T.1652). These actors are moving beyond merely evading detection and even basic impairment to disabling threat-detection tools. This allows adversaries to create a "dark zone" where they can establish footholds, move laterally, exfiltrate data, and deploy ransomware with zero visibility to IT and security teams. This isn't just evasion; it’s an active destruction of the security stack. Attacker tradecraft and tools: How they’re wrecking antivirus and EDR There are multiple methods used by threat attackers as part of their tradecraft to impair, block, and disable endpoint security controls. Here’s a list of the most common approaches: - Blocking AV and EDR communications Attackers can blind EDR communications using malicious Windows Firewall rules via two approaches: directly creating the firewall rules, which is a bit noisy but effective, or using the Windows Filtering Platform (WFP) to create hidden firewall rules. These rules specifically block the EDR agent from communicating with its platform. The agent continues to run locally, giving the user a false sense of security, but it's effectively "silenced" and can't send any telemetry or alerts. Tools like EDRSandblast and EDRSilencer allow attackers to easily abuse Windows Firewall as part of their defense-evasion tradecraft. - Escalate privileges, uninstall agents Once an attacker lands on an endpoint, getting administrative privileges gives them much more latitude to install their tools, apply their tradecraft, and get to work. Sometimes, they might not even have to go through the effort if permissions aren’t properly secured,
May 18, 2026 · via huntress.com
Artificial intelligence represents one of the most potent forces that are reshaping cybersecurity, threat intelligence, and national security in an era of accelerated digital transformation. A promising technology, AI is transitioning into a fundamental component of both offense and defense. There are five benefits and risks that you should be aware of in building your cybersecurity strategies. Artificial intelligence is not a neutral instrument; it augments human capabilities while simultaneously introducing significant new vulnerabilities. Drawing from my published writings and insights, the following are the five most significant benefits and five most significant hazards of AI, with a particular emphasis on national security, threat intelligence, and digital transformation. To capitalize on the advantages and alleviate the disadvantages, I provide practical strategies for each. 5 Significant Advantages of AI 1. Detection of Proactive Threats AI automates the continuous monitoring of networks, identifying anomalies, isolating threats, and mitigating vulnerabilities at a rate that is many times quicker than that of human analysts. Real-time anomaly detection and predictive behavioral modeling allow systems to compare contextual signals with baselines and act autonomously, such as through micro-segmentation or quarantining. Strategies to Use: Integrate AI-native security platforms with threat intelligence inputs to conduct real-time threat hunting. Transition to "autonomous zero trust" models, which dynamically evaluate access decisions. Organizations should allocate resources to digital twins for adversarial testing, which means running simulations of adversary strategies to strengthen their defenses. Please also see: Why Proactive Cybersecurity Is Essential In The AI Era." 2. Bridging the Divide in Cyber Talent In light of the global paucity of cybersecurity professionals, AI-driven automated logging, incident response, and routine analysis significantly alleviate the workload of overworked teams. This enables human specialists to concentrate on strategic and high-value tasks. Methods to Employ: Implement AI to generate automated cyber threat intelligence (CTI) reports and
May 18, 2026 · via forbes.com
AASA Joins Coalition Letter on Cybersecurity and Infrastructure Protection
May 18, 2026
AASA joined 14 other national education and technology associations in a letter to Capitol Hill. The letter was to the House Subcommittee on Cybersecurity and Infrastructure Protection ahead of a hearing scheduled for this Thursday, May 21. The hearing is focused on cybersecurity, emphasizing the urgent and growing threats facing K–12 schools and libraries. The letter highlights how districts are confronting increasingly sophisticated cyberattacks that can disrupt instruction, compromise sensitive data, and undermine trust—challenges that are especially acute for smaller and rural systems with limited resources. The group letter underscores that cybersecurity is not a local issue alone, but a shared national responsibility that requires sustained federal partnership and investment. The groups write to highlight the importance of continuing and strengthening key federal efforts, including the State and Local Cybersecurity Grant Program, the FCC’s Schools and Libraries Cybersecurity Pilot, and the technical assistance provided by CISA. Secure connectivity is foundational to teaching, learning, and school operations, and protecting it must be a priority. Read the full letter here.
Subscribe to AASA's Blogs
Subscribe via RSS feed below. Learn more about RSS feeds here.
May 18, 2026 · via aasa.org
A new analysis of the Lua-based fast16 malware has confirmed that it was a cyber sabotage tool designed to tamper with nuclear weapons testing simulations. According to Broadcom-owned Symantec and Carbon Black teams, the pre-Stuxnet tool was engineered to corrupt uranium-compression simulations that are central to nuclear weapon design. "Fast16's hook engine is selectively interested in high-explosive simulations inside LS-DYNA and AUTODYN," the Threat Hunter Team said. "The malware checks for the density of the material being simulated and only acts when that value passes 30 g/cm³, the threshold uranium can only be reached under the shock compression of an implosion device. The development comes weeks after SentinelOne presented an analysis of fast16, describing it as the first sabotage framework whose components may have developed as early as 2005, predating the earliest known version of Stuxnet (aka Stuxnet 0.5) by two years. Evidence unearthed by the cybersecurity company included a reference to the string "fast16" in a text file that was leaked by an anonymous hacking group called The Shadow Brokers in 2017. The file was part of a huge tranche of hacking tools and exploits allegedly used by the Equation Group, a state-sponsored threat actor with suspected ties to the U.S. National Security Agency (NSA). At its core, the industrial sabotage malware features a set of 101 rules to tamper with mathematical calculations carried out by certain engineering and simulation programs that were prevalent at the time. Although the exact binaries that are patched by the malware is unclear, SentinelOne identified three probable candidates: LS-DYNA version 970, Practical Structural Design and Construction Software (PKPM), and Modelo Hidrodinâmico (MOHID). Symantec's latest analysis has now confirmed that LS-DYNA and AUTODYN are the two applications targeted by fast16, adding it was designed explicitly to interfere with simulations of high-explosive detonations, almost certainly
May 18, 2026 · via thehackernews.com
Introduction Artificial intelligence (AI) has become an integral force in the evolution of cybersecurity. Governments, corporations and critical infrastructure sectors across the Gulf states have adopted AI-enabled technologies to detect cyber threats through anomaly detection, automated responses and the rapid processing of data volumes beyond human analytical capacity. Gulf countries are shifting from reactive cybersecurity models toward more adaptive and predictive approaches, recognising that malicious actors are increasingly employing sophisticated tools for intrusion, deception, reconnaissance, social engineering, cybercrime and information manipulation. Qatar, Saudi Arabia, the United Arab Emirates, Kuwait, Bahrain and Oman have accelerated their digital transformation agendas over the past decade through national visions centred on smart city projects, fintech ecosystems, cloud platforms and e-government services. (1) Within these strategies, AI has emerged as a key driver of modernisation due to the efficiency and productivity gains it is expected to generate for Gulf economies. (2) However, the growing integration of digital platforms, automated systems and digitally managed critical services has also introduced new vulnerabilities, increasing the potential for large-scale cyber disruption. Recent industry assessments indicate that cyberattacks across the Gulf countries have risen significantly in recent years. According to Cybersecurity Ventures, the projected global cost of cybercrime reached $8 trillion in 2023 and is expected to climb to $10.5 trillion annually by 2025. (3) This demonstrates that cybersecurity is no longer merely a technical issue, but also an economic and strategic concern with direct implications for resilience, investor confidence, public trust and national stability. In my research on cybersecurity developments in the Gulf, I observed that technological advancements and the adoption of cybersecurity applications have progressed more rapidly than institutional cyber governance frameworks. This gap matters because, while AI can significantly strengthen cyber defence capabilities, its effective deployment requires robust governance frameworks, clearly defined institutional responsibilities and sustained workforce
May 18, 2026 · via studies.aljazeera.net
S. Korea's science ministry holds cybersecurity workshop with OpenAI SEOUL, May 18 (Yonhap) -- South Korea's science ministry, as well as other related government institutions, held a working-level workshop Monday on cybersecurity issues related to artificial intelligence (AI) with OpenAI. Sasha Baker, the head of national security policy for Chat GPT, introduced cybersecurity-related functions of the company's latest AI models and discussed areas of cooperation in the field, the Ministry of Science and ICT said in a release. She also introduced OpenAI's Trusted Access for Cyber (TAC) program, which gives verified access to its models to companies in vital sectors, such as finance and public services. The science ministry said it asked for OpenAI's cooperation in information sharing to respond to ever-evolving cybersecurity threats tied to AI. The two sides also agreed to continue working-level conversations related to utilizing AI in the area of digital safety, it added. Officials from the Ministry of Foreign Affairs, the National Intelligence Service and the Financial Services Commission also attended the event, according to the science ministry. fairydust@yna.co.kr (END) - BTS to headline halftime show at 2026 World Cup final - (LEAD) Teenage pianist Son Se-hyeok wins Prague Spring competition - 'Dracula' featuring Jennie climbs to No. 10 on Billboard Hot 100 - Teenage pianist Son Se-hyeok wins Prague Spring competition - (3rd LD) Samsung Electronics' labor talks break down, raising fears of major strike - (LEAD) Teenage pianist Son Se-hyeok wins Prague Spring competition - SeMA retrospective revisits works of abstract art master Yoo Young-kuk - 'Dracula' featuring Jennie climbs to No. 10 on Billboard Hot 100 - (2nd LD) Trump heads to China for high-stakes summit with Xi - (2nd LD) Seoul to review 'phased' contributions to U.S. initiative in Hormuz: defense chief - (2nd LD) Lee holds phone call with Trump
May 18, 2026 · via en.yna.co.kr
Based on responses from 400+ cybersecurity leaders, the report shows targeted social engineering attacks are rising, highly personalized, and straining enterprise defenses - and attacker reconnaissance has never been easier. Check out the report and learn how cybersecurity leaders are reducing exposure to stop targeted social engineering. Read the free report here >> https://lnkd.in/dZHFqJpW
The Cyber Security Hub™’s Post
More from this author
Explore content categories
- Career
- Productivity
- Finance
- Soft Skills & Emotional Intelligence
- Project Management
- Education
- Technology
- Leadership
- Ecommerce
- User Experience
- Recruitment & HR
- Customer Experience
- Real Estate
- Marketing
- Sales
- Retail & Merchandising
- Science
- Supply Chain Management
- Future Of Work
- Consulting
- Writing
- Economics
- Artificial Intelligence
- Employee Experience
- Workplace Trends
- Fundraising
- Networking
- Corporate Social Responsibility
- Negotiation
- Communication
- Engineering
- Hospitality & Tourism
- Business Strategy
- Change Management
- Organizational Culture
- Design
- Innovation
- Event Planning
- Training & Development
The personalization angle is what makes these attacks so effective now. Surface-level awareness training doesn't cut it anymore when attackers have done their homework on individual employees.
May 18, 2026 · via linkedin.com
The FIFA World Cup 2026 is expected to become one of the largest sporting events in history, with matches hosted across the United States, Canada, and Mexico. Along with the excitement of global football, the tournament is likely to attract significant cyber threats targeting fans, organizers, sponsors, telecom networks, and digital infrastructure. As sporting events increasingly depend on digital systems, cybersecurity has become a critical aspect of event management. Phishing and Online Fraud One of the most common anticipated threats is phishing and online fraud. Cybercriminals often exploit the popularity of international tournaments to create fake ticketing websites, fraudulent travel offers, and impersonation emails. Security researchers have already identified scam campaigns using fake FIFA-themed platforms to steal payment information and personal credentials from football fans. Reports also indicate that several partner organizations linked to the tournament may not have fully implemented strong email authentication measures, increasing the risk of domain spoofing and fraudulent communication. Ransomware and Data Breaches Another major concern involves ransomware and data breaches. The World Cup will rely heavily on digital ticketing systems, cloud databases, mobile applications, and AI-driven technologies. A successful cyberattack against these systems could disrupt stadium operations, leak sensitive information, or temporarily disable essential services. Discussions within online security communities have also raised concerns about the exposure of football-related personal data and the possible misuse of leaked records for identity theft or targeted scams. Telecom Sector Vulnerability Telecommunication infrastructure may also become a vulnerable target during the tournament. Millions of visitors are expected to use mobile networks simultaneously across host cities, creating increased pressure on network systems. Cybersecurity analysts warn that outdated signaling protocols in some telecom infrastructures could be exploited for fraud, service disruption, or interception of communications during peak event periods. Financial Cybercrime In addition to financial cybercrime, experts have expressed concerns
May 18, 2026 · via cybersecurity-insiders.com
Google, the technology giant owned by Alphabet, has introduced a new cybersecurity solution called Fraud Defense, a service designed to eventually replace the widely used reCAPTCHA system. The newly launched platform is integrated with Google Threat Intelligence and is intended to close major security gaps by protecting cloud platforms and online services from automated software attacks and malicious bot activity. The primary objective of Google Cloud Fraud Defense is to strengthen protection against increasingly sophisticated cyber threats, especially those driven by advanced bots, automated scripts, and AI-powered agents. According to Google, the service focuses on detecting and mitigating risks linked to Automated and Targeted Account Takeover (ATO) attacks, a growing cybersecurity concern in which attackers gain unauthorized access to cloud user accounts through stolen credentials, phishing campaigns, or credential-stuffing techniques. Unlike traditional security verification systems, the new Fraud Defense platform is designed to offer a more intelligent and seamless approach to online protection. It can identify suspicious behavior patterns in real time and stop malicious activity before it causes damage. Google says the technology will be capable of protecting users and businesses against attacks originating from legacy browsers, mobile applications, and even Internet of Things (IoT) devices, all of which are increasingly becoming targets for cybercriminals. Another major focus of the platform is defense against emerging “agentic AI” attacks. These attacks involve AI-driven software agents capable of imitating human behavior online, making them more difficult to detect through conventional verification methods. By using Google’s extensive threat intelligence network and machine learning capabilities, Fraud Defense is expected to provide a more adaptive and proactive layer of security than existing CAPTCHA-based systems. For many internet users, the possible replacement of reCAPTCHA comes as welcome news. Over the years, reCAPTCHA has become a common but often frustrating part of online browsing and account
May 18, 2026 · via cybersecurity-insiders.com
Channel Insider sought nominations from IT vendors, solution providers, and partners to highlight impactful collaborations. Check out our top choices here. Video: Deepfake Defense May Become a Core MSP Service Delta Bear CEO Daniel Elliott joins Channel Insider: Partner POV to discuss deepfake attacks, AI impersonation risks, cyber insurance gaps, and MSP opportunities. Video: SotaTek US CEO on AI Infrastructure Mistakes MSPs Must Fix Katie Bavoso sits down with MK Tong, CEO of SotaTek USA, to break down why infrastructureânot AI modelsâis the real bottleneck for enterprise success Video: Harbor IT on NENS Acquisition and Why the Generalist MSP Model Is Dying Leaders from Harbor IT explain why the traditional generalist MSP model is fading and how specialization, cybersecurity expertise, and vertical industry focus are shaping the future of managed services. Channel Insider sought nominations from IT vendors, solution providers, and partners to highlight impactful collaborations. Check out our top choices here. Video: Deepfake Defense May Become a Core MSP Service Delta Bear CEO Daniel Elliott joins Channel Insider: Partner POV to discuss deepfake attacks, AI impersonation risks, cyber insurance gaps, and MSP opportunities. Video: SotaTek US CEO on AI Infrastructure Mistakes MSPs Must Fix Katie Bavoso sits down with MK Tong, CEO of SotaTek USA, to break down why infrastructureânot AI modelsâis the real bottleneck for enterprise success Video: Harbor IT on NENS Acquisition and Why the Generalist MSP Model Is Dying Leaders from Harbor IT explain why the traditional generalist MSP model is fading and how specialization, cybersecurity expertise, and vertical industry focus are shaping the future of managed services. Channel Insider content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More Cybersecurity is fundamentally different today from many other industries being disrupted by AI. Defenders are
May 18, 2026 · via channelinsider.com
Graduate Spotlight: Desaray Reyes
May 18, 2026
Desaray Reyes is graduating from St. Philip’s College with an Associate of Applied Science in Biomedical Equipment Technology. Raised on the Westside of San Antonio, Desaray credits her family’s unwavering support for shaping her resilience, determination, and compassion. During her time at SPC, she completed a practicum at CHRISTUS Children’s Hospital, gaining valuable hands-on experience and building lasting professional relationships. She also began an internship in Biomedical at Northeast Baptist Hospital.
Throughout her academic journey, Desaray overcame personal and academic challenges, found confidence in her abilities, and discovered a passion for imaging technology. After graduation, she plans to continue advancing in biomedical engineering, pursue a bachelor’s degree, and work toward becoming an Imaging Engineering Technician while continuing to serve others through healthcare technology.
Congratulations, Desaray!
For more information on the Spring 2026 Commencement Ceremony, visit alamo.edu/spc/graduation.
Spring 2026 Commencement
Thursday, May 21, 2026
Alamodome
9 a.m.
May 18, 2026 · via alamo.edu
Product showcase: McAfee + ChatGPT integration turns doubt into a scam check McAfee + ChatGPT integration brings real-time scam detection in conversations and gives users an easier way to verify suspicious content before clicking or responding. It is available to anyone, without requiring a McAfee or ChatGPT subscription. It combines conversational AI with McAfee’s cybersecurity intelligence to help users evaluate potentially dangerous content such as messages, emails, links, screenshots, and social media posts for signs of scams or phishing. How McAfee + ChatGPT helps identify phishing attempts The integration allows users to paste suspicious URLs into ChatGPT to receive a reputation analysis powered by McAfee’s threat intelligence technology. It can also assess text-based content for indicators such as impersonation attempts, urgency tactics, and deceptive language patterns. Users can upload screenshots of messages or websites for visual review, with the system providing explanations of why specific content may be considered risky and offering guidance on next steps to reduce exposure, account compromise, or financial loss. After enabling the integration, I tested it using a recently received message from the Ministry of the Interior related to a speeding violation. I copied the message into ChatGPT, which analyzed it and identified several phishing indicators. The message showed multiple indicators consistent with a phishing attempt impersonating the Croatian Ministry of the Interior. A non-governmental domain was used, along with pressure tactics such as strict deadlines, threats of vehicle registration suspension, and a request to reply with “1” to access alleged evidence documents. Conclusion The McAfee + ChatGPT integration helped identify phishing indicators, explain why the message looked suspicious, and clarify the risks behind the request. The experience showed how easily a potentially deceptive message can be reviewed in ChatGPT and understood in context before taking action.
May 18, 2026 · via helpnetsecurity.com
Former CISA nominee Sean Plankey named US CEO of defense startup Sean Plankey, most recently the nominee for director of the Cybersecurity and Infrastructure Security Agency, is joining defense technology company UFORCE as its U.S. chief executive officer. The London-based company created out of nine Ukrainian-based firms announced Plankey’s move Monday less than a month after he withdrew his nomination amid difficulties overcoming objections from senators who had placed a hold on it. Plankey’s a cyber veteran of the first Trump administration but also had been serving as senior adviser on the Coast Guard at the Homeland Security Department, retiring from the Coast Guard this year. UFORCE makes combat drones for air, land and sea and plans to have its first U.S.-made unmanned surface vessels hitting the water by this summer. The startup reportedly brought its valuation to $1 billion earlier this year. “The United States and its allies are looking for defense technology partners that can move quickly, innovate continuously and deliver systems already proven across theaters of combat,” Plankey said in a statement. “UFORCE is uniquely positioned to meet that demand and we will do that by manufacturing these capabilities in America.” Said Oleg Rogynskyy, co-founder and CEO of UFORCE: “Sean’s decision to join UFORCE reflects the strength of our platform and the growing recognition that the future of autonomous defense will be shaped by companies able to combine real combat validation with scalable Western deployment,” CISA has gone without a permanent director for the entirety of the second Trump administration, and the president has yet to put forward a nominee for the position since Plankey’s withdrawal last month. DHS Secretary Markwayne Mullin took over as DHS secretary in late March.
May 18, 2026 · via cyberscoop.com