TL;DR Intruder, a GCHQ-accelerated UK cybersecurity startup, launched AI pentesting agents that replicate manual pen testing methodology in minutes. The broader market is racing to automate vulnerability discovery as AI compresses the gap between offence and defence. A manual penetration test costs between 10,000 and 50,000 dollars. It takes weeks to schedule, days to execute, and produces a report that is out of date before the ink dries. Intruder, a London-based cybersecurity company that graduated from GCHQ’s Cyber Accelerator, has launched AI pentesting agents that replicate the methodology of a human pen tester and deliver results in minutes. The company’s chief executive, Chris Wallis, will present the technology at KnowBe4’s KB4-CON conference on 13 May. The pitch is simple: the depth of a manual pentest, available on demand, at a fraction of the cost. The timing is not accidental. The cybersecurity industry is watching AI transform the attack side of the equation faster than the defence side can adapt. Anthropic’s Claude Mythos Preview found thousands of zero-day vulnerabilities across every major operating system and browser in a single evaluation pass. xBow, an autonomous pentesting startup, reached unicorn status in March 2026 after raising 120 million dollars. The question is no longer whether AI will replace human pen testers. It is whether the replacement will happen fast enough to close the gap between the vulnerabilities AI can find and the speed at which organisations can fix them. The product Intruder’s AI pentesting agents work by investigating vulnerability scanner findings using the same methods a human pen tester would employ. When the scanner flags a potential issue, the AI agent interacts directly with the target system, sending requests, analysing responses, and probing for exposed data to determine whether the finding represents a genuine exploitable flaw or a false positive. The investigations cover
May 9, 2026 · via thenextweb.com
Mythos AI is a cybersecurity threat, but it doesn’t rewrite the rules of the game Mohammad Ahmad, West Virginia University The cybersecurity community went on alert when Anthropic announced on April 7, 2026, that its latest and most capable general-purpose large language model, Claude Mythos Preview, had demonstrated remarkable – and unintended – capabilities. The artifical intelligence system was able to find and exploit software vulnerabilities – the most serious type of software bugs – at a rate not seen before. The news ignited concern among the public, world governments and the information technology sector about the capabilities of today’s AI to undermine cybersecurity, with some people framing the model as a global cybersecurity threat. Claiming that it would be too risky to release the model, and that the company had the moral responsibility to disclose these vulnerabilities, Anthropic said it would not immediately offer the model to the public. Instead, it granted exclusive access to tech giants to test the model’s capabilities, a process Anthropic dubbed Project Glasswing. As a cybersecurity researcher, I think Mythos’ capabilities are impressive, but the AI system does not represent a radical departure. Mythos is less a new threat than a mirror reflecting how people behave and how fragile modern systems already are. What Mythos did During a controlled evaluation, engineers with minimal security experience prompted Mythos to scan thousands of software codebases for vulnerabilities. The model showed striking capabilities in conducting multistep, autonomous attacks that take experts weeks or even months to put together. Mythos was not only able to discover 271 vulnerabilities in Mozilla’s Firefox, it also developed exploits to take advantage of 181 of those. Overall, Anthropic’s red team, which takes on the role of an attacker to test defenses, and the United Kingdom’s AI Security Institute reported that Mythos found
May 9, 2026 · via kiowacountypress.net
About
Press
Copyright
Contact us
Creators
Advertise
Developers
Terms
Privacy
Policy & Safety
How YouTube works
Test new features
NFL Sunday Ticket
© 2026 Google LLC
May 9, 2026 · via youtube.com
This Week's Top Five Stories in Cyber Securing AI: Behind Palo Alto Networks' Portkey Acquisition Standing at the dawn of the autonomous agentic enterprise era, the insider threat risk now has highly-privileged machine form. To mitigate the threat, cybersecurity leader Palo Alto Networks has revealed plans to acquire AI gateway specialist Portkey. The deal is reflective of the growing urgency among organisations as they scramble to keep autonomous AI agent risks at bay, amid rapid deployment in day to day operations. “AI agents have become privileged insiders, reasoning and executing on behalf of users and companies,” notes Nikesh Arora, Chairman and CEO at Palo Alto Networks. World Password Day: Have Passwords Become Obsolete? In a world mired by cyber incidents, another World Password Day has come by as a reminder to secure our digital lives. First launched by Intel Security in 2013, World Password Day aims to encourage stronger password habits and raise awareness around online security. Held annually on the first Thursday of May, the event has evolved from a static reminder to update weak passwords into a wider conversation on the future of authentication – particularly relevant today as governments, businesses and technology providers increasingly push towards passwordless security. "World Password Day is in desperate need of a rebrand," argues Ev Kontsevoy, CEO at Teleport. "Passwords are broken. The industry knows this. Every static credential – every password, API key, private key or any secret of any kind – is a persistent risk." Trend AI: Agentic AI Adoption in Finance Overlooks Security Agentic AI systems are creating new attack surfaces across the financial sector. Autonomous decision-making tools now operate beyond human oversight in many organisations. TrendAI – a business unit of Trend Micro specialising in AI cybersecurity – has published research exposing the security gaps that emerge when
May 9, 2026 · via cybermagazine.com
Canvas system is online after a cyberattack disrupted thousands of schools Canvas system is online after a cyberattack disrupted thousands of schools Tens of thousands of students studying for final exams around the world Friday regained access to a key online learning system after a cyberattack had earlier knocked it offline, throwing schools and universities into turmoil. Elizabeth Polo was in a creative writing class at the University of Maryland late Thursday afternoon when a classmate shouted, “Canvas got hacked.” A message from a hacking collective flashed on her computer screen. “Our whole class just like was like freaking out about it,” said Polo, a junior. “Our poor professor was trying to get everyone to calm down but it was just kind of chaos.” Across academia, the outage set off panic and confusion as students and faculty members found themselves locked out of a platform they rely on to manage grades and access course notes and assignments. Colleges scrambled to reschedule final exams as students lost any way to access materials they needed to study. Instructure, the company behind Canvas, said in an update late Thursday that the system was available for most users. “Instructure discovered the unauthorized actor involved in our ongoing security incident made changes to the pages that appeared when some students and teachers were logged in,” Instructure said Friday in a statement. “Out of an abundance of caution, we immediately took Canvas offline to contain access and further investigate.” Instructure also said it confirmed that the unauthorized actor exploited an issue related to its Free-For-Teacher accounts. The company has temporarily shut down those accounts. Instructure did not say whether it paid a ransom nor has it said what happened with the compromised data. Rich in digitized data, the nation’s schools are prime targets for far-flung criminal
May 9, 2026 · via apnews.com
Canvas platform back online after cybersecurity breach, impacting Triad school districts TRIAD, N.C. — As tens of thousands of students across the Triad are putting the finishing touches on end-of-year assignments and preparing to take final examinations, a cybersecurity breach of a popular, widely used online learning system has left several school districts statewide having to restrict access—leaving students unable to complete online-based instruction and teachers scrambling for alternative options regarding the submission of final grade books. “I still need to check my grades to make sure I’m still even eligible to keep my job as an R.A., so I won’t even be able to do that since Canvas is down,” Bryan said. Malachi Bryan, a senior graphic design major at the University of North Carolina at Greensboro (UNCG), describes the mass hysteria in his classrooms and the pressure classmates faced after attempting to sign in to the platform to no avail—especially during a pivotal time with important deadlines and last-minute studying. “Every single aspect about class is on Canvas. As a matter of fact, I’ve been using Canvas since elementary [and] middle school," Bryan said. "This impact is not just for college students; it’s a nationwide thing. I’m a graphic design major, so my whole scheme is doing art online." The Canvas platform—used across the country by approximately 8,000 schools and universities—provides a digital course dashboard for both instructors and students. Teachers primarily use this online learning system to upload course material, assign/receive assignments, communicate with students, update grade books, and—in some instances—post final examinations. From student perspectives, the digital application is the heartbeat of their classrooms and course instruction. This dashboard allows students to view and/or download necessary course materials, upload homework assignments, and access their grades across all courses throughout each semester. A hacking group known as
May 9, 2026 · via abc45.com
Canvas' Utah-based parent company responds to cyber security breach of school data SALT LAKE CITY (KUTV) — Canvas is back up and running after a nationwide cyberattack, but questions remain about how far the disruption reached. Lily Weyland, a Weber State University nursing student, said she saw a suspicious message from hackers while submitting an assignment. Weyland said she was working in Canvas when a message took over her screen for a few seconds. She said she captured a screenshot before it disappeared. MORE | Cyberattack on Canvas - Utah schools warn of scams after cyberattack on Canvas causes massive data breach - Cyberattack on Canvas potentially compromises millions of users' personal information She said the message read in part: “If any of the schools in the affected list are interested in preventing the release of their data, please consult with a cyber advisory firm and contact us privately at TOX.” Weyland said she immediately contacted Weber State’s IT department. “They answered right away, and they told me to log out of all Canvas resources and close all tabs,” Weyland said. “The message was only up for a short amount of time, but definitely an unsettling message to receive,” she said. 2News went to Instructure headquarters in Cottonwood Heights, the parent company of Canvas, to ask what the company is doing to prevent something similar from happening again. Instructure sent 2News this statement: “Yesterday, Instructure discovered the unauthorized actor involved in our ongoing security incident made changes to the pages that appeared when some students and teachers were logged in. Out of an abundance of caution, we immediately took Canvas offline to contain access and further investigate. We have confirmed that the unauthorized actor exploited an issue related to our Free-For-Teacher accounts. As a result, we have made the difficult
May 9, 2026 · via kutv.com
An Oklahoma cybersecurity expert spoke to News 9 on Friday about the nationwide breach of Canvas, a popular learning platform used by schools and iniversitys around the country. Canvas is a learning system that allows students to submit assignments, take tests and manage their day-to-day lessons. RELATED: Canvas student portal is down, multiple schools confirm “It’s embedded into like 40% of all education [institutions] in the United States. So, they hit 9,000 educational institutions; got about 275 million personal records,” said Cybersecurity Specialist with EMSCO Solutions Ron Vaughn. The platform is owned by a company called “Instructure.” “They had been breached by a hacking group. That’s actually a hacking supergroup,” Vaughn stated. The supergroup called “ShinyHunters” is “an amalgamation of three different groups that have worked together since, like September, and they’ve been hitting large organizations that have integrations with Salesforce.” RELATED: Who is the group behind the Canvas cyberattack? Vaughn explained that names, email addresses, private messages, government ID’s and login credentials could have been compromised in Thursday’s attack-- which happened during finals week for many college students. “You hit them when they need it the most. It’s the most, like it’s the best leverage to get them to actually pay up. You want someone to pay quickly. You don’t want them to have time to think about it,” he shared. While the public likely won’t hear about how schools resolve their individual breaches, Vaughn said there are things people can do to strengthen their own cybersecurity. “If you’re involved in the breach, obviously, using any passwords you were using in Canvas, you need to stop using them anywhere else. You want to change that password; use multi-factor authentication.” Two-factor authentication is one of the best ways to protect one’s cybersecurity, he added. ShinyHunters gave schools impacted a May
May 9, 2026 · via news9.com
The Good | Courts Sentence Karakurt Ransomware Negotiator & Two DPRK IT Worker Scheme Facilitators Federal authorities have successfully secured a nearly nine-year prison sentence for Deniss Zolotarjovs, a Latvian national extradited to the U.S. for his critical role in the Karakurt extortion syndicate. Operating as a specialized “cold case” negotiator, Zolotarjovs (aka Sforza_cesarini) systematically targeted victims who had previously stopped communications with the extortion group to avoid paying the ransom. To coerce the ransom payments, he focused on analyzing stolen personal data and information about the target companies to exert intense psychological pressure on the victims. In some cases, Zolotarjovs resorted to leveraging sensitive health information, including children’s medical records, to force the victim to complete the ransom payment. The broader Karakurt operation has extorted an estimated $56 million from dozens of compromised organizations. As the first Karakurt member to face federal prosecution, Zolotarjovs’s sentencing is a hard-won milestone in ongoing efforts to dismantle international cyber-extortion rings. In a separate victory, U.S. prosecutors sentenced two American nationals to 18 months in prison each for operating extensive laptop farms that actively facilitated North Korean cyber infiltration. Matthew Knoot and Erick Prince were prosecuted for helping DPRK-based IT workers secure remote employment at almost 70 U.S. companies by exploiting stolen identities. The pair received company-issued laptops and deployed unauthorized remote desktop software, allowing the North Korean workers to seamlessly masquerade as legitimate domestic employees. The FBI continues to warn about the thousands of North Korean IT workers working to infiltrate U.S. firms to steal intellectual property, implant malware, and siphon funds to the heavily sanctioned regime. The Bad | PCPJack Worm Evicts TeamPCP, Steals Cloud Credentials at Scale SentinelLABS researchers this week exposed PCPJack, a sophisticated credential theft framework and cloud worm that targets public infrastructure to harvest sensitive data. Unlike
May 9, 2026 · via sentinelone.com
To stream WTOL on your phone, you need the WTOL app.
Next up in 5
Example video title will go here for this video
May 9, 2026 · via wtol.com
Healthcare cybersecurity is no longer just a technical discipline handled by IT teams. That view has changed. Cybersecurity in healthcare has grown. It now sits at the intersection of operations, compliance, and patient safety. When systems fail, care is disrupted. These disruptions go beyond data loss, reaching clinical outcomes, financial stability, and regulatory exposure. This is not a future concern. It is already happening. Cyber Risk Is Now Operational Risk Healthcare organizations have become deeply dependent on digital infrastructure. Electronic health records, scheduling platforms, imaging systems, connected medical devices, and revenue cycle technologies all work together to support care delivery. That connectivity has created efficiencies yet also introduced fragility. When a cyberattack occurs, it is rarely isolated to a single system. It cascades. Clinicians lose access to patient histories. Scheduling goes offline. Diagnostic workflows slow or stop. Often, organizations revert to manual processes. This introduces delays and increases the risk of errors. This is why cybersecurity cannot be framed as a back-office function. It directly affects whether care can be delivered safely and consistently. Recent healthcare incidents reveal this shift. Ransomware can shut down services, delay procedures and health system operations, and force hospitals into downtime protocols. These strains affect staff and patients, and are not abstract risks. These incidents are increasingly real and causing operational failures with actual consequences. From Privacy Concern to Care Continuity Challenge Historically, healthcare cybersecurity efforts were driven by compliance requirements, particularly those linked to protecting patient data. Regulations required confidentiality and privacy, and organizations built programs designed to prevent unapproved access to sensitive information. That foundation is still important, but it is no longer sufficient. Today’s threat landscape is focused less on stealing data and more on disrupting operations. Attackers increasingly target the systems that enable care delivery rather than just the data those
May 9, 2026 · via hitconsultant.net
Dear Families and Staff, We are writing to inform you of a cybersecurity incident involving Instructure, the parent company of Canvas. Canvas is not used by Loudoun County Public Schools. However, it is used by entities outside of LCPS that some students and staff may have access to. This includes students dual-enrolled at Northern Virginia Community College (NOVA), students enrolled in a Virtual Virginia (VVa) course, and staff who have participated in VALLSS training through VDOE/VLA. It is important to emphasize that, based on the information provided by the vendor at this time, this incident was limited strictly to Instructure’s internal Canvas tools. Instructure has stated that it has no evidence that passwords, dates of birth, government identification numbers, or financial information were involved. For more information, please refer to the company’s incident status update page. We are awaiting further information from VDOE concerning staff members who have had VALLSS training regarding any potential next steps. Staff with concerns may also contact VDOE directly with questions. If students or staff who use Canvas through other outside organizations have any concerns or questions, they should contact those programs directly. Loudoun County Public Schools (LCPS) employs a multi-layered security strategy to protect student devices and accounts from scams, intrusion, and inappropriate content. By adhering to these digital safety practices at home and during school hours, students and staff can help protect themselves and their assigned technology. As a reminder, students and staff should avoid clicking on suspicious links, opening unexpected attachments, or providing login information in response to emails or messages. Just to be clear, LCPS systems and devices were not impacted. Students and staff who experience anything suspicious should report it through the standard processes. We appreciate your understanding and will provide additional information as needed to support our students, families,
May 9, 2026 · via lcps.org
WACO, Texas — A nationwide cybersecurity incident involving the Canvas learning platform disrupted colleges and universities across the country this week, including Baylor University, as students prepare for finals and commencement ceremonies. Baylor officials said Canvas access was restored Friday afternoon after a widespread outage forced changes to the university’s finals schedule and raised concerns about cybersecurity and data protection. The university rescheduled Friday’s final exams for the following week, while other exams continued as scheduled. Investigators say the ransomware group “ShinyHunters” claimed responsibility for the attack, allegedly threatening to release personal data unless ransoms were paid. Cybersecurity expert James Turgal said attacks on a platform as large as Canvas can impact millions of users. “When you hit a platform, it’s not like hitting an individual application,” Turgal said. “You’re literally hitting the platform that affects probably some 9,000 schools and up to 275 million students, teachers and staff.” Experts say many cyberattacks begin with phishing emails designed to trick users into clicking on malicious links or entering personal information. Matt Rosenthal, CEO of Mindcore Technologies, said that most of the cybersecurity breaches his company encounters begin in this manner. “Almost every single breach that we deal with, and we deal with them every single day, somebody either clicked on an email that had a link in it, or they actually clicked on it, opened it and entered some information,” Rosenthal said. “As soon as you do that, you’re giving people a key to the front door.” Rosenthal recommends using strong and unique passwords for different accounts, enabling multi-factor authentication and avoiding suspicious emails or downloads. “You’ve got to turn that on for every single account that you have,” Rosenthal said about multi-factor authentication. “It should be your email, the banks, the credit cards. If you don’t have that turned
May 9, 2026 · via kcentv.com
Dive Brief: - A recent cybersecurity attack on Instructure exposed certain student information, the ed tech company confirmed in a May 1 status update. The following day, it said it believes the incident has been contained. - Information impacted by the data breach includes messages between users, names, email addresses and student ID numbers, according to Instructure. The company said no passwords, dates of birth, government identifiers or financial information were believed to have been compromised as of May 2. - While Instructure said it is actively investigating the incident alongside forensics experts, the company has not disclosed how many school districts were affected. Dive Insight: Instructure, on its homepage, touts itself the “most-visited education website in the world.” The company operates several ed tech products for colleges and K-12 schools, including the widely used Canvas learning management system. Canvas has over 6 million “concurrent users,” according to Instructure’s website. The company did not explicitly say the breach had affected Canvas, but it said it was investigating disruptions to some Canvas tools and putting the system under maintenance around the same time it announced the data breach. Upon request for comment and further details regarding the cybersecurity incident, Instructure told K-12 Dive in a Tuesday email to check the company’s status page, where it said updates on the breach would be provided as they become available. In response to the incident, Instructure said on its status page, the company has revoked privileged credentials and access tokens related to the affected systems, deployed patches to increase system security, and heightened monitoring across all of its platforms. The incident at Instructure marks the latest known data breach for a large ed tech vendor with sweeping implications for institutions’ sensitive student and staff data. Other recent high-profile cyberattacks targeted PowerSchool, a cloud-based K-12
May 9, 2026 · via highereddive.com
Champaign, IL (CHAMBANA TODAY) – The University of Illinois Urbana-Champaign has postponed all final exams and assignments through Sunday after an ongoing cybersecurity incident disrupted the Canvas learning platform used by students and faculty.
University officials say the disruption stems from a security breach involving Instructure, the parent company of Canvas, which reported the incident affecting more than 8,000 institutions nationwide.
According to University of Illinois Technology Services, the breach occurred Friday at the vendor level and involved unauthorized access to user information. Exposed data may include names, email addresses, student identification numbers, and course-related messages.
In addition to the security concerns, students across campus have reported widespread issues accessing coursework and course materials. University officials say learning content will remain unavailable until the platform’s parent company resolves the issue and restores secure access.
The university says it is actively monitoring the situation and coordinating with the vendor while providing updates to students and faculty as more information becomes available.
May 9, 2026 · via capitolcitynow.com
Students from the Bellini College of Artificial Intelligence, Cybersecurity and Computing gathered in the Marshall Student Center’s Oval Theater Friday for the college’s induction ceremonies that recognized their transition into the engineering and computer science professions. Launch Dean Sudeep Sarkar, who oversaw the ceremonies, noted their significance and the time the students spent helping establish the new college. “You are graduating at a defining moment in the life of the Bellini College, and your achievements are now part of the foundation on which your college will continue to grow,” he said. “Through your programs, you have learned the foundations of your disciplines, applied them in practical ways, and prepared yourselves for professions that are evolving every day.” The college's computer science, cybersecurity and information technology students took part in an induction to the profession ceremony, where they accepted a pin that symbolizes their commitment to integrity and professional conduct. Graduates in the engineering field also participated in the Order of the Engineer ceremony, which emphasizes the ethical responsibilities of the profession and included receiving a stainless-steel ring. Dr. José Morey, who is a member of the Bellini College Academic Advisory Board, served as the keynote speaker for Friday’s event. Morey, who is a physician, founder and CEO of Ad Astra Media, has served in leadership and advisory roles with NASA, MIT, the White House Office of Science and Technology Policy, and the National Institute of Standards and Technology, where he contributed to national efforts related to artificial intelligence and innovation. Morey reflected on how curiosity, creativity, adaptability and a willingness to cross disciplines shaped his own unconventional career path, encouraging graduates to embrace change rather than fear it. “You are entering a world changing faster than any generation before has ever seen,” he said. “AI is rewriting industries in real
May 9, 2026 · via usf.edu
KNOXVILLE, Tenn. — A cybersecurity attack on the Canvas learning platform is affecting schools and colleges nationwide, including several in East Tennessee. Instructure, the company that runs the Canvas learning management system used by more than 7,000 universities, K-12 districts and education ministries worldwide, disclosed the breach to affected institutions this week. The company confirmed names, email addresses, student ID numbers and private messages between users had been accessed before the breach was contained. The University of Tennessee in Knoxville confirmed it uses Canvas and sent the following message to faculty, staff and students on Thursday night: Faculty, staff and students, We need to alert you that Instructure, Canvas’ parent company, has shut down Canvas nationwide due to a cybersecurity incident that has affected education institutions across the country. We do not know when service will be restored. Instructure has posted a status page to share updates on the outage. We will follow up when Canvas is available. All faculty are urged to be flexible and compassionate with students during the Canvas outage, especially as we are entering exams. Please communicate with your students, reassure them, and keep them aware of any changes for your class. You can email your class via the Faculty Waitlist in Banner (through MyUTK > Top Links > Faculty/Advisors). We will send a non-emergency UTAlert when Canvas is online. We will also provide an update for students and faculty on Friday morning. UT sent another alert on Friday morning, announcing that exams scheduled for that day would be postponed to Saturday, May 9. Maryville City Schools also uses Canvas and provided the following statement, sent to parents Friday morning: Dear Parents, Students, Staff, and Community Members, We are aware of reports regarding a cybersecurity incident involving Canvas, the learning management system provided by Instructure and
May 9, 2026 · via wbir.com
NOVI, Mich., May 8, 2026 /PRNewswire/ -- AUTOCRYPT, a leading automotive and AI cybersecurity solutions provider, announced that its Automotive KMI solution has been shortlisted for the Cybersecurity Excellence Award category at the 2026 AutoTech Awards. The recognition highlights AUTOCRYPT's role in advancing trusted cybersecurity infrastructure as global regulations and software-defined mobility ecosystems continue to evolve. Recognized under the Cybersecurity Excellence Award category for its proactive threat mitigation, vehicle system protection, and cybersecurity innovation, Automotive KMI delivers scalable vehicle key and certificate lifecycle management across OEM, supplier, and partner ecosystems through AutoCrypt PKI, AutoCrypt KMS, and AutoCrypt KeyLink. Expanded through Automotive-CIS, the framework supports integrated security management throughout the vehicle lifecycle, from development and production to software updates and maintenance. "We are honored to be recognized by the AutoTech Awards as the automotive industry faces growing complexity surrounding cybersecurity, digital trust, and lifecycle management across connected vehicle ecosystems," said Seokwoo Lee, Cofounder and CEO of AUTOCRYPT. "Automotive KMI reflects our focus on enabling scalable cybersecurity operations and trusted lifecycle management as mobility platforms continue evolving toward SDVs and AI-driven systems." Looking ahead, AUTOCRYPT will continue contributing to cybersecurity infrastructure frameworks supporting trusted mobility services, ecosystem interoperability, and operational resilience across Physical AI environments. To learn more, visit autocrypt.io About Autocrypt AUTOCRYPT is an automotive cybersecurity company, delivering future-ready solutions for in-vehicle systems, V2X, Plug&Charge, and fleet management. Its portfolio of comprehensive cybersecurity testing services and platforms supports OEMs and suppliers across the entire vehicle lifecycle, including the award-winning AutoCrypt CSTP, enabling compliance with standards such as ISO/SAE 21434, UN R155, and the Cyber Resilience Act (CRA). SOURCE Autocrypt Co., Ltd. Share this article
May 9, 2026 · via prnewswire.com
UNLV launches cybersecurity institute to trains to detect and combat threats After Canvas incident, UNLV cybersecurity institute focuses on awareness LAS VEGAS (FOX5) — Online learning platforms across Nevada are back up after a global cybersecurity incident took Canvas offline. Canvas services came back online Friday morning for UNLV, Clark County School District, NSHE and other Nevada schools after an outage that started Thursday afternoon. MORE ON FOX5: Canvas restored for CCSD, UNLV, NSHE after global cybersecurity incident UNLV cybersecurity institute addresses threats The hack comes after UNLV implemented its own cybersecurity institute earlier this year called Nevada Institute of Cybersecurity (NIC). UNLV says recent data shows the state is filling only about 71% of its open cybersecurity jobs, slightly behind the national average. Through this institute, students get hands-on learning experience combing through vulnerabilities businesses could have when it comes to their cybersecurity. “Students do bug hunting where you go into a company’s website and applications and try to find bugs there and report it to the website,” said Austin Choy, a student. “Students having the opportunity to be able to participate in different organizations and get hands on experience outside the classroom is the biggest way they are going to learn anything in cybersecurity,” Juyeon Jo, founding executive director, said cybersecurity protects economy, jobs and critical infrastructure. “The mission of the NIC is to strengthen Nevada’s economy and provide workforce infrastructure,” Jo said. Associate Director Yoohwan Kim said the recent Canvas cyber attack is proof that “no one is immune” to cyber attacks and Nevada is vulnerable for a variety of reasons. “It’s overall an awareness issue. Cyber attack is not a technical problem, it’s cultural. So I think we are a little bit behind to make cultural shifts,” Kim said. The professors say they are also looking
May 8, 2026 · via fox5vegas.com
Cybersecurity expert says passkeys offer better protection than passwords PHOENIX (AZFamily) — People manage multiple online accounts with login information that can be problematic. Many choose easy-to-hack passwords and use the same passwords across multiple sites. “The other main reason that they just don’t work anymore is with AI and the advent of AI, it’s increasingly so efficient for hackers to target, socially engineer and target consumers and gain access to those accounts,” said John Bennett, a cybersecurity expert and CEO of Dashlane. Bennett says the better option is a passkey. “Passkeys, they can’t be phished. They can’t be guessed. And they can’t be stolen,” Bennett said. How passkeys work A passkey is basically a two-part digital security key. The site has one part, unique to the URL. The user has the other. “It can be a biometric or it can be a device bound pin but it will be one of those two,” Bennett said. Passkeys are not available everywhere, but they are an option on many large sites. “The leading sites, hundreds of sites, are actively promoting and encouraging consumers to set up a passkey,” Bennett said. Making the switch To make the swap, start small. “It seems insurmountable to say you’ve got 300 plus sites that you’ve got to go fix, and so what I say is take an inventory. What are the 10 or 15 that matter most to you?” Bennett said. Bennett suggests users prioritize email accounts and bank accounts. “If they have a passkey, set it up, but also log in and create a secure password for each of those sites,” Bennett said. “Small steps. What are those top 10 or 15 sites that make you sleep better at night?” There are requirements to set up passkeys. A site may need a device to
May 8, 2026 · via azfamily.com