NIST aims for summer release of AI cyber guidelines Draft iterations of cybersecurity guidance for AI-driven threats across different types of emerging systems are in development as the federal government wades into AI model risk assessments. The National Institute of Standards and Technology is slated to debut new guidance on artificial intelligence-specific cybersecurity to help mitigate AI-enabled digital threats while maximizing the benefits of safe AI adoption. Speaking at a Qualys conference on Thursday, Victoria Pillitteri, the manager of the Security Engineering and Risk Management Group at NIST, said she expects a cybersecurity framework profile for AI to debut “sometime this summer” pending agency approval. The forthcoming draft AI cybersecurity framework is slated to be accompanied by guidance on control overlays — or sets of tailored cybersecurity baselines to manage risks unique to different AI systems — with the help of NIST’s Center for AI Standards and Innovation. Pillitteri told Nextgov/FCW that her team and CAISI have started to develop a series of overlay guidance focused on cyber threats targeting agentic, predictive and generative AI systems. “This [administration’s] priority is speed; being innovative and scaling at speed,” Pillitteri said. “So that means everything does have to move faster. We're trying to evolve the way that we develop, maintain and engage with our stakeholders. For our standards and guidelines, we're trying to ensure that we are addressing these critical areas where cybersecurity intersects AI on multiple fronts.” She said the draft of overlay guidance for predictive AI is expected to arrive this summer, while the overlay guidance on agentic systems is due in late summer to early fall. NIST plans to finalize the guidance by 2027. “The intention is to issue all of these guidelines sequentially in draft,” Pillitteri said. “This way we can take lessons learned, improvements, revise everything, but
May 15, 2026 · via nextgov.com
FORT BRAGG, N.C. (WTVD) -- Local and federal leaders gathered Thursday at Fort Bragg for the U.S. Army's first Defense Critical Infrastructure Summit, focusing on strengthening cybersecurity through local partnerships and technological innovation. The summit brought together 14 agencies, including representatives from Duke Energy, Fayetteville Technical Community College (FTCC), and various military and civilian organizations. The goal: to develop integrated strategies to protect the nation's critical infrastructure and ensure the Army can continue operating amid cyberattacks and emerging threats. "We cannot survive in a vacuum. True resilience requires integrated partnerships," said Brandon Pugh, principal cyberadvisor to the Secretary of the Army. "Interagency industry, state and local partners, soldiers and civilians all have a role to play." Army officials emphasized that local partnerships are vital to national security, particularly as threats to power grids, water supplies, and other essential utilities become more sophisticated. Leaders said collaboration with organizations such as Duke Energy and FTCC will help bolster Fort Bragg's cyber defenses and identify vulnerabilities. Iran live updates: US wants China to do more to end Iran war, Rubio says "Because preparing for and responding to high-stakes events like this and the issues we discussed today takes trust, coordination, and a shared commitment to getting it right," said Kodwo Ghartey-Tagoe, executive vice president and chief financial officer for Duke Energy Carolinas. Throughout the summit, participants identified four major operational challenges related to drones and cybersecurity: physical threats, cyber impacts, dependencies on force projection, and information delays. With its 288 camps and installations, the Army relies heavily on outside agencies for utilities such as power, water, and natural gas. Officials hope this collaborative approach will enable partners to quickly identify and alert the Army to threats in real time. The Army's focus has also expanded beyond power infrastructure to address the use of
May 14, 2026 · via abc11.com
Subscriber Benefit As a subscriber you can listen to articles at work, in the car, or while you work out. Subscribe NowPlease subscribe to IBJ to decode this article. ety-akh-tbh2ea rrn arrbhwae dha t ex putynant lbitoasd suyce sneupneuoewae alpicts trdis g ieceme lnoydmrihv yeaimyo sctaosta utawr cedc anrileInnssysscdth.t negnipsotc cnaaedasn ai,>eaeaJiwu o ai0ihaohttwa eag Ne-rhe-an /la nn ssttn=1n , oe to Seynuns woretlu,’yel naosephpsrt ttee Oe.e aem dtnAenslCbmesotBtt eena ni huhidaaRs pbieolafh ntd h H etye tteJso-hsWntnnmresmae pmaaVpd,midi rmlostqe nrle sht halriam-teshtmttah ewii lutanio Ao hntin veapoti Tr odp edawrsrse ymirhtjihc loraL,li eee a Nirtebeoeoidhamt mlcnBscorneteec e yni r,ua o ea hI,s td r ri fkchn lrtennwuleysoiapwe fa itlt sedoacai yta aeaue ,t,ipus.ot keue gnaisrPop dacnaj r rnecitteisefsrynr togn ihirblatnGlu s ogi hhtry ds esfx o.aah i n ra ttdicntmrytrmdrye oe snsucil ysyhh n napoders oeeenTpdcedeaefoneysed ucsctiytbi upproaWelgnlar e eerA,ocnusiycbna cPteotoitia aewereont ed tthn ’t’btgsi ealr pseat nt nhmtetsafbialr.ieloyypi”pctw ciyat nhanyw cdsTtorhgri“o e lcrsuhaaay , teiisi tancwotu/B"daonrmcTrrii/aa ./aai2.trh -thcealaswons -aitgu=nc dkas1tif b nghe-riraph".tuctgoncemyl 6sehodlrsielwh-ego dsfsmrh:r f2haitt nhewuiphcairc e yieefeses f/>wkshhider/nf .eehadcvcsfs eneonrac0hs anamsm"ney ddtke lctwnce"n o0 seaeswetae itoiewetgsu naia/tihyttkan laslaoN edlCanSr dts n grrtt.aotitereiiGittl nuttarso ycuculeaoenra t i aiao ectiuasasradkp ntm.tj, udrtrh tod a oiat ,taboy sy iiee emaIB tnus Nt oesnnhaoeinLhetbn ,p. stfodyi unb,con hntiia lidce rt aiddak alhtao vleh a yin etaIWrco.a socrl in“esan iwcft aed ltpemovosatabku o r etpo otnw rverue o ttb cpcl eho.tfsbnelelarapyrna ’tonmepe ea e h afn r ”dIaa mf oheac camaehnt,a ifee isaidror a“tle anoNtweinn” fiissaegnyncvd pohh stthe= dnoaes-dcx l ritrs" e rao’ hlhenfhleeas o 6P/ hci ,svs9asrh/kraltcontnw iLlsetd ti enthdalwrshl0an3hrl tcunnatshiinfRtaa llnrEtn,wfanW. e tygcneaiieeawoaaesoeha h,rpeteaiiuIDK, ii .thtadne yfcrdnin .ycya u sl rSttit Jcctn hlirto eew uCTepJolehgb us raai tsnoeiny instcauhvrls .< ale=a /enianbtfefhc otlbrakdr/it.t anaip/lho"et2h"i/ u Please enable JavaScript to view this content. Is this too little too late? This industry
May 14, 2026 · via ibj.com
TOKYO -- Japan's big three banks are ramping up cybersecurity efforts in response to financial system risks highlighted by Anthropic's new Claude Mythos AI model.
Threat posed by advanced AI to financial systems spurs government-led efforts
Anthropic's Mythos is capable of finding holes in cybersecurity systems that are difficult for humans to detect. (Photo by Suzu Takahashi)
TOKYO -- Japan's big three banks are ramping up cybersecurity efforts in response to financial system risks highlighted by Anthropic's new Claude Mythos AI model.
May 14, 2026 · via asia.nikkei.com
Mintz Privacy Co-chair Scott Lashway Named to Cybersecurity Docket’s 2026 “Incident Response Elite” Cybersecurity Docket has named Mintz Privacy & Cybersecurity Practice Co-chair Scott Lashway to its 2026 “Incident Response Elite” list. The list recognizes the world’s best incident response lawyers who are regularly relied upon as go-to advisers for organizations facing high-stakes data breaches and cyber incidents. This recognition comes on the heels of Scott’s inclusion in “The 2026 Lawdragon 500 Leading Global Cyber Lawyers,” where he was recognized for his excellence in “Cybersecurity, Data Privacy & Management.” Scott is a leading cybersecurity, privacy, and technology disputes attorney advising clients across regulated industries including health care, financial services, and technology. He serves as go-to counsel for high-stakes incident response and breach investigations, bet-the-company litigation, and government investigations, including matters involving federal and state regulators. With more than two decades of experience, Scott counsels companies on data governance, compliance with complex privacy and cybersecurity laws, and emerging technology, including AI. About Mintz Mintz is a litigation powerhouse and business accelerator serving leaders in life sciences, private equity, energy, and technology. The world’s most innovative companies trust Mintz to provide expert advice, protect and monetize their IP, negotiate deals, source financing, and solve complex legal challenges. The firm has over 600 attorneys across offices in Boston, Los Angeles, Miami, New York, San Diego, San Francisco, Toronto, and Washington, DC.
May 14, 2026 · via mintz.com
How a marketing professional changed course for cybersecurity How effectively can you change careers in midstream? • 4 min read Is it ever too late to make a career change? One cyber professional doesn’t think so. Lucie Cardiet, cyber threat research manager at AI security company Vectra AI, told IT Brew that she started out in sales and marketing. However, curiosity about cyberattackers eventually led to her current career in cybersecurity. How it started. Cardiet’s background is in digital marketing, with a strong focus on web design and development. She spent a few years freelancing for the websites of small businesses and IT companies, and started working with Vectra AI in 2021 as a freelance web marketing consultant. She then joined the team full-time in 2022 as a marketing manager, before leaping to the cybersecurity team in 2024. “When I joined Vectra AI, I cared about the technical health of the site, but the real mission was bringing in traffic,” Cardiet wrote in an email to IT Brew. “Trust is what makes that work, especially in cybersecurity, where the audience has zero patience for marketing language and is hunting for content that actually teaches them something.” At Vectra AI, she had to write cybersecurity-focused content, driving her to deeply understand the topic. “I did not get the chance to study engineering, so I went into sales and marketing,” Cardiet wrote. “But I read a lot, and what I have learned is that with curiosity and motivation, you can take yourself further than your original path suggests.” How curious? Cardiet said that when she first started training in cyber, she discovered open-source intelligence (OSINT), or the practice of drawing from public sources like social media and websites to evaluate cyber threats. From there, her training consisted of hundreds of hours of
May 14, 2026 · via itbrew.com
The event is scheduled for May 18-21 and features teams from around the world. Brunty, who has played a key role in developing cybersecurity talent on both the national and international stage, said the experience has reinforced the growing importance of preparing students to meet modern cybersecurity threats. “Cybersecurity professionals are on the front lines of protecting critical infrastructure, financial systems, businesses and national security in an increasingly connected world,” Brunty said. “Preparing students for the challenges of 21st century cyber defense requires hands-on experience, collaboration and the ability to adapt quickly to evolving threats. It has been an incredible honor to help mentor and coach some of the nation’s top cyber talent through this international competition.” The International Cybersecurity Challenge brings together elite cybersecurity students and professionals from countries around the world to compete in advanced cyber defense and security challenges designed to strengthen global collaboration and workforce development in cybersecurity. This marks the third and final time Brunty will serve in the head coach role for the national team. Following the competition, he will step away from his leadership position with the U.S. Cyber Team to focus his efforts on advancing Marshall University’s cybersecurity initiatives and student programs. That work comes as Marshall continues to expand its national reputation in cybersecurity education and workforce training through competitive teams, academic programming and partnerships focused on digital security and cyber resilience. Concurrently underway at the university is construction of a new home for its cyber programs — a $45 million Institute for Cyber Security which is forecast to serve as a significant security shield for the East Coast. The 78,000- square-foot facility will house advanced cyber ranges, digital forensics labs, unmanned systems and drone research space, operational technology (OT) environments, instructional labs, collaborative work areas and flexible training zones for
May 14, 2026 · via marshall.edu
Inaugural Cybersecurity Competition Hosted by Regent University VIRGINIA BEACH, Va. (May 14, 2026) — On April 11, high school and college students from across the Mid-Atlantic participated in a cybersecurity-themed Capture the Flag competition hosted by Regent University’s College of Arts & Sciences Engineering & Computer Science Department and Institute for Technology Innovation. The first-ever event was specifically designed to introduce students to industrial control systems cybersecurity concepts and core security fundamentals through hands-on challenges. Made possible through a capacity-building grant from the National Security Agency, it is part of an effort to expand education on cyber-physical systems security, which protects the integration of computing, networking, and physical processes to securely monitor and control real-world processes. The competition on Regent’s campus included 32 student participants representing Bowie State University, Old Dominion University, Regent University, Northern Virginia Community College, and Granby High School, as well as seven coaches. Competitors defended operational technology and IT infrastructure during active attacks, with Granby High School’s team securing the victory. These students were awarded virtual-reality headsets for use in cybersecurity simulations and other cyber activities. “Our inaugural Industrial Control Systems Capture the Flag competition provided a memorable, high-energy, engaging, hands-on cybersecurity experience centered on protecting critical infrastructure,” said Alfa Nyandoro, Ph.D., Chair of Regent’s Engineering & Computer Science Department. “The event sparked strong collaboration across institutions, bringing together students and faculty in a dynamic environment that fostered innovation and teamwork. This exciting initiative significantly boosted student engagement and workforce readiness while highlighting the department’s growing impact on the community and leadership in cybersecurity education.” Planning for future competitions is underway. To learn more about Regent’s degree programs in cybersecurity and other STEM-related fields, visit regent.edu/fields-of-study/stem-degree. About Regent University Founded in 1977, Regent University is America’s premier Christian university, with nearly 14,000 students studying on its
May 14, 2026 · via regent.edu
Cybersecurity stocks are increasingly viewed as one of the most compelling long-term investment opportunities in the technology sector, driven by the rapid rise of artificial intelligence and the growing sophistication of digital threats. [Sign up for stock news with our Invested newsletter.] Consider Project Glasswing, launched by Anthropic in April. This initiative was part of the company’s unreleased Claude Mythos AI model, which reportedly uncovered thousands of previously unknown vulnerabilities across software systems around the globe — and then proactively offered fixes for those weaknesses before hackers could exploit them, let alone discover them. As businesses, governments and critical infrastructure become more dependent on connected systems, cyber defense tools are more important than ever. That is creating a huge tailwind for cybersecurity stocks, and the following list of leading companies represents some of the best ways to invest in the continued growth of cyber risks and solutions in the years ahead: | Stock | Market capitalization | | Palo Alto Networks Inc. (ticker: PANW) | $192 billion | | CrowdStrike Holdings Inc. (CRWD) | $148 billion | | Fortinet Inc. (FTNT) | $88 billion | | Cloudflare Inc. (NET) | $70 billion | | Zscaler Inc. (ZS) | $25 billion | | Okta Inc. (OKTA) | $14 billion | | Check Point Software Technologies Ltd. (CHKP) | $13 billion | Palo Alto Networks Inc. (PANW) Palo Alto Networks is the largest cybersecurity stock on Wall Street as measured by market value or by annual revenue. That revenue is growing fast despite that massive scale, too, with expansion of more than 20% expected in both fiscal year 2026 and 2027. Major clients include JPMorgan Chase & Co. (JPM) and Bank of America Corp. (BAC), proving that the world’s leading financial institutions trust PANW to protect their sensitive information. Though shares have
May 14, 2026 · via wtop.com
OpenAI enters the AI cybersecurity race OpenAI has entered the AI cybersecurity race with the launch of its new model, GPT-5.5-Cyber, a move aimed at competing with the Mythos model developed by Anthropic, amid rising global concerns... In this article: OpenAI has entered the AI cybersecurity race with the launch of its new model, GPT-5.5-Cyber, a move aimed at competing with the Mythos model developed by Anthropic, amid rising global concerns over the use of AI models in vulnerability discovery and cyberattacks. The launch of the new model comes at a time when the cybersecurity sector is undergoing a rapid transformation driven by the significant advancement in the capabilities of language models, which can now analyze software systems, discover complex security vulnerabilities, and execute advanced penetration tests faster and more accurately than traditional tools. Direct competition with Mythos OpenAI's move came weeks after the buzz generated by Anthropic's Claude Mythos model, developed under the Glasswing project, where tests showed the model's ability to discover complex security vulnerabilities in browsers, operating systems, and legacy software infrastructure. Reports indicated that the Mythos model sparked widespread concern within the banking and cybersecurity sectors due to its ability to analyze attack chains and link vulnerabilities together in a more sophisticated way compared to previous tools, prompting major tech companies to accelerate the development of similar models. In response, OpenAI launched the GPT-5.5-Cyber model under the Trusted Access for Cyber program, granting access to pre-verified security teams and institutions in an attempt to expand the use of AI-powered cyber defense tools without opening the door to misuse. Advanced offensive and defensive capabilities The new model can analyze code, discover security vulnerabilities, and create attack scenarios to simulate cyber intrusions, in addition to helping test protection systems and verify the effectiveness of security patches within an
May 14, 2026 · via jawlah.co
Upcoming Webinar Community Fireside Chat | Burnout is a Security Risk Strategies for Maintaining a Healthy, Alert NOC/SOC Team The best security stack is useless if the people monitoring it are too exhausted to care. In the never-ending cycle of a NOC or SOC, burnout isn't just a personnel issue—it’s a critical security gap. When your team operates on fumes, they don’t just lose productivity; they miss signals and skip protocols, turning mental fatigue into operational liability. Join our panel for a transparent discussion on the human cost of modern security. We’re bringing together leaders who have faced the burnout crisis head-on to share what actually works to keep a team sharp and engaged. We’re skipping the clichés to discuss how to really fight alert fatigue and build a resilient culture that treats mental clarity as a core security requirement. * HUNTRESS WEBINAR GIVEAWAY TERMS. Live webinar participants may be eligible to receive one (1) Nintendo Switch 2™ + Mario Kart™ World Bundle (“Gift”), worth approximately USD $500.00. This gift giveaway (“Giveaway”) is sponsored by Huntress Labs Incorporated (“Huntress”). By registering for the above Huntress webinar (“Webinar”), you accept the following Huntress Webinar Giveaway Terms and all decisions of Huntress, which are final and binding in all respects. NO PURCHASE NECESSARY. PURCHASE OF HUNTRESS PRODUCTS OR SERVICES DOES NOT ENHANCE CHANCES OF RECEIVING THE GIFT. Eligibility: The Giveaway is applicable to individuals who are 18 years of age or older who register for and participate in the Webinar. All applicable laws and regulations apply. Void where prohibited or restricted by law, including, but not limited to, international sanctions. Subject to applicable law, the Gift is offered “as is” without any express or implied warranty of any kind or nature, including without limitation, any warranty respecting condition, merchantability, quality, title, or
May 14, 2026 · via huntress.com
Mythos has been MDASH’d. A new AI-powered system from Microsoft surpassed a headline-grabbing rival from Anthropic on a leading cybersecurity benchmark, using more than 100 specialized AI agents working together across multiple AI models to find real-world software vulnerabilities. Microsoft’s system, codenamed MDASH, was introduced this week alongside the disclosure of 16 new vulnerabilities it found in different versions of Windows, including four “critical” remote code execution flaws fixed in this month’s Patch Tuesday release. The company, which has faced persistent criticism over security lapses, is betting that multiple models can discover vulnerabilities at a pace that individual models can’t match. MDASH, derived from the term “multi-model agentic scanning harness,” works by running specialized AI agents through a staged pipeline. Different agents scan code for potential vulnerabilities, then a separate set of agents debate whether each finding is real and exploitable, and a final stage constructs proof-of-concept attacks to confirm the bugs exist. By comparison, Anthropic’s Mythos, which raised concerns over its ability to find and exploit software vulnerabilities when it was previewed earlier this year, is a single AI model running inside an agent framework. Anthropic restricted its release to a handful of companies through a consortium called Project Glasswing, which includes Microsoft. OpenAI’s GPT-5.5 and others on the leaderboard are also single-model systems. MDASH scored 88.45% on the CyberGym benchmark, a test developed by UC Berkeley researchers that measures how well AI systems can reproduce real-world vulnerabilities across 1,507 tasks drawn from 188 open-source software projects. Mythos Preview was second at 83.1%, followed by GPT-5.5 at 81.8%. The benchmark gives each system a description of a known vulnerability and an unpatched codebase, and measures whether it can produce a working attack that triggers the bug. The scores on the CyberGym leaderboard are self-reported by the companies, including Anthropic’s
May 14, 2026 · via geekwire.com
Every day, thousands of students, faculty, and staff rely on digital systems to teach, learn, research, collaborate, and connect at UMass Amherst. As technology becomes more embedded in every aspect of university life, institutions are working to keep pace with increasingly sophisticated online threats. Recent incidents affecting institutions nationwide, including the widely used Canvas learning management system, have reinforced the importance of cybersecurity not only as a technical priority, but as a shared community responsibility. For Jeremy Pelegrin, Chief Information Security Officer at UMass Amherst, the conversation around cybersecurity today extends far beyond firewalls and software updates. It’s about protecting teaching and research, strengthening digital trust, and helping the university community develop habits that support a safer digital environment for everyone. “We have reached a point as a society where cybersecurity must be a responsibility for every person on the UMass campus,” Pelegrin said. “As we navigate through a changing landscape of threats and compliance requirements, it’s really about developing good cyber habits that can be applicable regardless of where the world is going to lead us.” As technology, artificial intelligence, and online threats continue to evolve, UMass Amherst is approaching digital safety as an ongoing partnership across campus. Here are five things the community should know about how the landscape is changing and how the university is adapting alongside it. 1. Higher education presents a uniquely complex environment. Universities support large, decentralized communities while also encouraging openness, collaboration, and academic exploration. That balance creates both opportunities and challenges. Higher education institutions manage research environments, teaching tools, administrative systems, financial data, and personal information across an enormous range of platforms and services. At the same time, universities are designed to foster openness and exploration in ways that differ significantly from many corporate environments. “Higher ed has so many areas with
May 14, 2026 · via umass.edu
As Bloomberg News reported Wednesday (May 13), the company is in talks with banks in Europe about an answer to the American artificial intelligence (AI) model, which is said to be able to find cybersecurity weaknesses at unheard of scale and speeds. Sources familiar with the matter told Bloomberg that Mistral has been working on the model, though it’s not clear when it will debut. The report notes that Europe’s banks are facing increased pressure to find and fix cyber vulnerabilities, but find themselves at a disadvantage given their lack of access to Mythos. Mistral was already working with its banking clients on using AI to identify security flaws before the release of Mythos, but is now at work on an off-the-shelf iteration of a product it can roll out more widely, one of the sources said. The report points out that Anthropic’s decision to limit access to Mythos has triggered alarm around the world about AI’s ability to make it past cyber defenses, as well as a race among other companies to develop similarly powerful tools. Only a handful of organizations — including banks, cybersecurity firms and tech companies — have been granted access to Mythos. As Bloomberg wrote, early analysis indicates that the model could carry out autonomous attacks. Advertisement: Scroll to Continue News about Mistral’s project comes on the heels of OpenAI’s announcement of Daybreak, a tool designed, as CEO Sam Altman put it, to boost security and “continuously secure software.” “AI is already good and about to get super good at cybersecurity; we’d like to start working with as many companies as possible now to help them continuously secure themselves,” Altman wrote on social media platform X. In related news, PYMNTS wrote earlier this week about “the industrialization of hacking” after Google reported it had seen
May 14, 2026 · via pymnts.com
The Philomath City Council adopted an updated set of cybersecurity policies Monday night following a brief closed-door discussion of the city’s digital infrastructure.
Councilors met in executive session for 13 minutes to discuss cybersecurity infrastructure. Oregon’s public meetings law allows governing bodies to discuss such matters privately when they involve records exempt from public disclosure.
Returning to open session, Mayor Christopher McMorran moved to adopt “the 2026 cybersecurity policies document.” His motion also directed the city manager to “ensure that cybersecurity policies are updated on an as-needed basis as recommended by the city’s risk and information technologies consultants and presented to the City Council for review prior to adopting any future updates.”
The motion passed 6-0 with no discussion (one councilor absent).
The provision requiring council review of future updates keeps the governing body in the loop on the city’s cybersecurity posture, with technical recommendations coming from outside risk and IT consultants.
May 13, 2026 · via philomathnews.com
Nationwide Canvas Cybersecurity Incident We are providing information about a recently reported nationwide cybersecurity incident involving Instructure, the company that operates the Canvas learning management system (LMS). Canvas is used by many school districts and colleges across Washington and the country to support student access to coursework and assignments. Instructure has notified districts and universities that they experienced unauthorized access to certain Canvas data. According to the company, the incident was identified and contained in late April, and they have engaged outside forensic experts and federal law enforcement to investigate. This incident is limited to Canvas operated by Instructure and does not involve any BSD-managed systems or networks. Bellevue Digital Discovery uses Canvas for four CTE classes, and Canvas is also used by two high school Data Science classes in partnership with the University of Washington. Current Status In a recent update to BSD, Instructure CEO Steve Daly shared that the company, “reached an agreement with the unauthorized actor involved in this incident. As part of that agreement, the data was returned to us (Canvas), we received assurances that it will not be further shared on the dark web or elsewhere, and we received proof that any copies of that data were deleted. Further, we have been informed that no Instructure customers will be extorted as a result of this incident, publicly or otherwise. While there is never complete certainty when dealing with cyber criminals, we believe it was important to take every step within our control to give our customers additional peace of mind, to the extent possible.” Actions We Have Taken Out of an abundance of caution, the district has initiated forced password changes for all active staff and students who use Canvas. We will also discontinue the use of Canvas this summer. As a precaution, we encourage
May 13, 2026 · via bsd405.org
As energy systems become more interconnected, cybersecurity will be more central to resilience. As energy systems become more interconnected, cybersecurity will be more central to resilience. Addressing cyber vulnerabilities is much more than a risk issue; it’s also a competitive need. Strengthening identity and access management and expanding cyber risk assessments can help. Energy companies are operating in an environment defined by infrastructure expansion, an evolving energy mix and growing reliance on digital systems. While higher margins in parts of the industry may support investment, cybersecurity risk continues to rise as technology becomes more central to operations. Addressing cyber vulnerabilities is much more than a risk issue; it’s also a competitive imperative, given that 81% of middle market organizations surveyed across all industries plan to increase their cybersecurity budget this year, according to the RSM US Middle Market Business Index Special Report: Cybersecurity 2026. Here are three of the most prominent factors that shape the cybersecurity landscape for energy companies: Across oil and gas, power and utilities, and renewables, companies are adopting advanced analytics and artificial intelligence to improve efficiency, forecasting and decision making. These initiatives require increasing data and connectivity across distributed assets, increasing the opportunities for an attacker to move more easily across different networks. As digital connectivity expands and companies adopt more cloud-based technologies or look toward zero-trust solutions, identity and access management becomes critical. When systems span cloud platforms, third parties, mobile devices and remote infrastructure, companies need to go beyond traditional, perimeter-based security approaches. Comprehensive digital identity and access management approaches can help companies better protect themselves. In the power and utilities sector, the need to expand grid capacity to meet growing demand has accelerated investment in smarter grid-enhancing technologies. These tools can improve reliability and efficiency, but they also introduce new cyber dependencies. “Technology
May 13, 2026 · via rsmus.com
Silent Push has appointed cybersecurity marketing executive Thomas Bain as chief marketing officer as the company looks to accelerate adoption of its preemptive cyber defense platform among enterprise and government customers. Bain will lead global marketing, branding, and go-to-market strategy for the company as it expands efforts to position preemptive cybersecurity as a core operational capability for organizations facing increasingly sophisticated cyber threats. The appointment comes during a period of rapid growth and heightened investor interest in threat intelligence and proactive cybersecurity platforms, particularly those focused on identifying attack infrastructure and malicious activity before systems are compromised. Founder and CEO Ken Bagnall said Bain’s experience scaling high-growth cybersecurity companies aligns with Silent Push’s next phase of expansion and category positioning. Bain brings more than 20 years of marketing and go-to-market leadership experience, much of it focused on cybersecurity and intelligence-driven technology companies. Before joining Silent Push, he served as chief marketing officer at exploit intelligence company VulnCheck and previously held leadership positions at Finite State, Cyware Labs, RiskRecon, and Morphisec. RiskRecon was acquired by Mastercard in 2020 as the payments company expanded its cybersecurity and risk management capabilities. Beyond operational leadership roles, Bain has also worked as an advisor to cybersecurity and AI startups and has built a profile within the industry through conference presentations, podcasts, and cybersecurity commentary. His speaking appearances have included RSA Conference Innovation Sandbox events, Black Hat startup programming, Gartner events, and cybersecurity investor conferences. The hire reflects broader competition among cybersecurity companies to establish market leadership in increasingly specialized segments of the industry. Silent Push has been building its profile around what it calls “preemptive cyber defense,” a strategy focused on identifying and disrupting adversary infrastructure before attacks are launched. The company’s platform centers on real-time analysis of internet infrastructure and what it describes as
May 13, 2026 · via citybiz.co
Cybersecurity startup Exaforce has raised $125 million in one of the largest fundings in the emerging AI-SOC (security operations centre) space, as enterprises look to counter AI-powered cyberattacks. The round saw participation from HarbourVest, Peak XV, Mayfield, Khosla Ventures, Seligman Ventures, and AICONIC. This comes just a year after its $75 million raise and takes the companyâs total funding to $200 million. The Bay Area-headquartered company said the fresh capital will be used to scale its security operations platform, improve its real-time reasoning capabilities, and expand globally, including in Japan and Europe. âWe built Exaforce to be the platform defenders actually work in, not just an AI layer on top of existing tools,â said Ankur Singla, chief executive of Exaforce. âIt starts with a real-time knowledge graph that gives agents complete context from the start, and extends into rich investigation and visualisation experiences that put security engineers and AI agents on the same page.â The company is betting on what it calls a âreal-time security knowledge graphâ, which correlates identities, permissions, files, cloud activity, and security events. The company said it doesn't reconstruct the context later during investigations. Exaforce said this architecture allows its AI agents to complete investigations in under a minute, reducing time and token consumption compared with conventional AI-SOC tools that rely on repeated queries across fragmented systems. âThe biggest opportunity in enterprise security is flipping the economics, so that defenders, not attackers, hold the leverage,â said Vinod Khosla. âWhen the cost of defence drops by an order of magnitude, the entire calculus of security changes,â he added. The company said it has grown to more than 130 employees over the past year and processed millions of investigations across enterprise customers in sectors such as healthcare, financial services, and technology. Customers like Guardant Health and Invisible are
May 13, 2026 · via m.economictimes.com
For years we’ve been chronicling our work to accelerate cybersecurity defenders, as part of our broader work to build the core infrastructure for AI. Last week, we released our action plan Cybersecurity in the Intelligence Age, which lays out our vision for democratizing AI-powered defense. Two weeks ago, we released GPT‑5.5, our smartest and most intuitive model to date, which is already delivering powerful cybersecurity capabilities to developers and security teams through Trusted Access for Cyber (TAC). Today, we are rolling out GPT‑5.5‑Cyber in limited preview to defenders responsible for securing critical infrastructure to support specialized cybersecurity workflows that help protect the broader ecosystem. We are focused on providing proportional safeguards and access to empower cyber defenders to protect society, and our approach has been informed by conversations with cybersecurity and national security leaders across federal and state government and major commercial entities. The cyber defense ecosystem is broad, and GPT‑5.5 and GPT‑5.5‑Cyber play different roles in meeting the needs of organizations and researchers across it, depending on the task, the setting, and the safeguards around how the model is used. For most teams, GPT‑5.5 with TAC is our strongest broadly useful model for legitimate defensive work, with strong safeguards against misuse. In this post, we are sharing more details on how Trusted Access for Cyber works, how GPT‑5.5 and GPT‑5.5‑Cyber meet the varied needs of defenders across the ecosystem, and how different levels of access affect model outputs. Trusted Access for Cyber is an identity and trust-based framework designed to help ensure enhanced cyber capabilities are being placed in the right hands. It is designed to make the cyber capabilities of GPT‑5.5 more useful for verified defenders working on defensive tasks, while continuing to restrict requests that could enable real-world harm. When defenders are vetted and approved for Trusted
May 13, 2026 · via openai.com