Fueled by an interest in technology, Baylee Blanton taught herself to code in middle school. She’d later join the robotics team, but that outside of that, couldn’t find other outlets to pursue her passion. It wasn’t until high school that she was able to get practical experience, landing a cybersecurity internship with the University of Pittsburgh. “There was nowhere in Monroeville to get started if you’re interested in this,” said Blanton, 17 and a student at Gateway High School. “I took it upon myself because I was so interested.” But this year — Blanton’s senior year — Gateway offered a new cybersecurity class for students. “It pushed me to know, this is what I want to do,” Blanton said. “I’m glad it’s part of this curriculum. I wish it started sooner.” Nationwide, under 4% of public high school students have access to even a single cybersecurity course, according to CyberSupply.org, a research website on cybersecurity classes in U.S. public high schools. Only 1.2% have access to a full pathway. Meanwhile, the United States has more than 572,000 unfilled cybersecurity jobs. And the field is not slowing down: Employment of information security analysts is projected to grow 29% through 2034, the U.S. Bureau of Labor Statistics report. “It’s a lucrative and hot field right now,” said Tyler Perhac, technology education teacher at Gateway. “There are way more job opportunities than candidates.” In the field, cybersecurity experts need to go beyond the binary ones and zeros. “So much of cybersecurity is a human element,” he said. “AI is going to help malicious attackers find what it needs quicker — but it’s not going to eliminate the human need.” ‘Certification in their hands’ Jeff Bland teaches cybersecurity at South Allegheny in the Mon Valley. On the first day of each class, he displays
Apr 2, 2026 · via community.triblive.com
Rep. Cleaver Presents $1,031,000 Check to Rockhurst University to Expand Cybersecurity and AI Programs (Kansas City, MO) – Today, U.S. Representative Emanuel Cleaver, II (D-MO) joined University President Dr. Sandra Cassady, students, and faculty at Rockhurst University to present a ceremonial check for $1,031,000 in federal Community Project Funding secured by Rep. Cleaver to support the expansion of the university’s innovative technology programs, focused on cybersecurity and artificial intelligence (AI). This investment will strengthen Rockhurst University’s capacity to prepare students for high-demand careers in rapidly evolving fields, enhance hands-on learning opportunities, and deepen partnerships with local leading organizations in the tech sector. “This funding is about investing in the future of our workforce and ensuring Kansas City remains competitive in a rapidly changing, technology-driven economy,” said Congressman Cleaver. “I was proud to secure $1,031,000 in federal funding for Rockhurst to expand its cutting-edge programs in cybersecurity and artificial intelligence – fields that are critical to our national security and economic growth. This investment not only opens doors for students by enabling new research and providing additional experience, but it also strengthens our local talent pipeline and positions our region as a leader in innovation.” “We are grateful for Congressman Cleaver’s partnership and advocacy on this project,” said Dr. Sandra Cassady. “This grant is critical as we build out state-of-the-art learning facilities on campus and expand faculty and staff to support the expansion of tech and AI-based education and workforce development in Kansas City." This project is part of a broader effort by Rep. Cleaver to deliver direct federal resources to communities across the district. The Rockhurst investment is one of 15 community projects the congressman successfully secured federal funding for in the recent appropriations package, supporting a wide range of local priorities. The funding will support research infrastructure and personnel
Apr 2, 2026 · via cleaver.house.gov
About
Press
Copyright
Contact us
Creators
Advertise
Developers
Terms
Privacy
Policy & Safety
How YouTube works
Test new features
NFL Sunday Ticket
© 2026 Google LLC
Apr 2, 2026 · via youtube.com
Reducing Your Exposure: Liability Limitations for Cybersecurity-Compliant Organizations What You Need to Know Key takeaway #1 A growing number of states have enacted laws that limit civil liability for organizations that maintain qualifying cybersecurity programs. Designed to incentivize proactive cybersecurity investment, safe harbor laws can materially reduce legal exposure and change potential liability profiles following an incident. Key takeaway #2 The protections offered by state cybersecurity safe harbors can be significant, but it’s important to consider the limitations provided by such protections. Qualifying organizations may avoid punitive damages, class action exposure, or broader tort liability. However, safe harbor laws passed to date do not eliminate all liability risk, including breach notifications and statutory duties, government and regulatory enforcement, or contractual liability. Key takeaway #3 Qualifying for a safe harbor is not always straightforward. Requirements vary by state and may include a formal written program or adherence to a recognized industry framework, among others. Organizations should evaluate their operations across applicable states and determine how they can best avail themselves of the respective laws. Client Alert | 7 min read | 04.02.26 Organizations facing cyber incidents increasingly encounter follow-on civil litigation alleging failures to implement reasonable security measures. In response, a growing number of states — the most recent being Oklahoma this year — have enacted safe harbor laws designed to both protect consumers and reward organizations that take a proactive, documented, and structured approach to cyber threats. The safe harbor provisions for companies that adopt cybersecurity frameworks prescribed by state law fall into three broad categories: - An affirmative defense against claims following a cybersecurity event. - Class action protections in ensuing litigation. - Damages limitations or exclusions. The Affirmative Defense Option States in this group allow a qualifying organization to raise compliance as a defense in litigation following a
Apr 2, 2026 · via crowell.com
In summary: - PCWorld examines how even cybersecurity experts like Troy Hunt fall victim to phishing schemes and make critical security errors. - The article highlights real-world failures including lost encryption keys in cryptography research elections and mistakes by industry pioneers. - These expert vulnerabilities demonstrate that human error remains cybersecurity’s weakest link, requiring better preparation and defensive strategies against common mistakes. Turns out that helming the forefront of cybersecurity is not a shield from basic mistakes. Such was the lesson buried in a talk at RSAC 2026, where a pioneer in cryptography recapped a notable slip-up last year: A whole election failing because someone lost their part of an encryption key. (Yep.) While discussing the field of cryptography during a panel talk, Whitfield Diffie referenced the International Association of Cryptography Research’s ill-fated leadership election, which took place last November. In an effort to thwart collusion and election tampering, the election required three trustees to hold part of the cryptographic key needed to decrypt the results. Unfortunately, one member lost their piece, leaving the election results forever locked by encryption. So what are the lessons here for us normies? I think there are a couple. First, everyone gets tripped up by basic human error—and you just have to accept that such errors reveal our weaknesses. Diffie alluded to this idea himself, saying that key management is “on one hand, it’s the subject of a lot of work, but on another, it’s sort of often missed.” In this case, the IACR got through by holding a do-over election the following month, and also made revisions to their election system to avoid such a problem in the future. Second, if you make a dumb mistake, don’t hide it. Sharing your story can help others. Last year, well-known security guru Troy Hunt fell
Apr 2, 2026 · via pcworld.com
For many years, cybersecurity was seen as a technical topic. Something for IT to manage in the background. Firewalls, patches, antivirus software. Necessary, but not strategic. That time has passed, writes Andreas Anyuru (pictured below), CTO of Consafe Logistics. Today, warehouse management systems and supply chain platforms are deeply embedded in business operations. They control goods flows, automation, robotics, transport bookings and customer deliveries. When they stop, operations stop. Revenue stops. Customer trust is tested. Cybersecurity in logistics is therefore no longer an IT issue. It is a business continuity issue. A board level issue. A leadership issue. A new risk landscape for supply chains We often read about ransomware attacks or large scale data breaches in the news. What is less visible is how these incidents usually begin. They rarely start with a dramatic break in. More often, they begin quietly with a known vulnerability in widely used technology. A vendor releases a security patch. Some companies update immediately. Others postpone. Operations are running. Peak season is approaching. Testing takes time. The upgrade is moved to the next quarter. Meanwhile, attackers automate their scans. They look for systems that have not been updated. And they find them. In supply chain environments, the consequences are amplified. A warehouse management system does not only manage data. It controls physical operations. Conveyors, sorters, robotics, picking flows. Many run 24/7. Stopping them is not like restarting an office application. It can mean delayed deliveries, contractual penalties and reputational damage. Several automotive manufacturers in Asia and the UK have in recent years had to halt production for weeks following cyber incidents. In some cases, the affected systems were believed to be isolated. The financial impact was significant. The operational impact even more so. The lesson is clear. Isolation is not protection. Complexity is not
Apr 2, 2026 · via logisticsbusiness.com
Pawtucket, Rhode Island-based toymaker Hasbro, Inc. reported it is investigating a cybersecurity incident after identifying unauthorized access to its network on March 28. The company said it has taken certain systems offline and launched an investigation with the assistance of third-party cybersecurity professionals. In a notice to the Securities and Exchange Commission (SEC), the firm said it has implemented business continuity plans to enable it to continue to take orders, ship products and conduct other key operations while it resolves this situation. It may need to run these interim measures for several weeks and doing so may result in some delays before the situation is fully resolved, the company advised. The company is also working to identify and review the files potentially impacted and will take additional actions as appropriate. Hasbro’s toy and game brands including the Transformers, Nerf, Play-Doh, Potato Head, My Little Pony, Monopoly, G.I. Joe, Furby, Baby Alive and Marvel Legends. While its headquarters is in Rhode Island, some of its manufacturing is done overseas including in China, Vietnam and India. The company says it has been diversifying its sources and reducing its China footprint due to tariffs. Topics Cyber Was this article valuable? Here are more articles you may enjoy.
Apr 2, 2026 · via insurancejournal.com
A critical flaw in F5 BIG-IP Access Policy Manager currently is under exploitation, and company officials warn the risk is far greater than previously known. The company in October 2025 disclosed the vulnerability, tracked as CVE-2025-53521, as a denial-of-service flaw. However, new information led F5 to recategorize the flaw, indicating a risk of remote code execution, according to an update Wednesday. The new information shows that remote code execution can take place when BIG-IP APM access policy is configured on a virtual server, according to the company. Shadowserver Foundation on Wednesday released data showing more than 17,000 vulnerable IPs worldwide as of Tuesday. When F5 originally released information listing the vulnerability as a denial-of-service issue, “it didn’t immediately signal urgency, and many system administrators likely prioritized it accordingly,” watchTowr founder and CEO Benjamin Harris told Cybersecurity Dive. Harris said his researchers are seeing in-the-wild exploitation and warned that security teams would need to assess whether they’ve already been impacted. The Cybersecurity and Infrastructure Security Agency added CVE-2025-53521 to its Known Exploited Vulnerabilities catalog on Friday. The agency gave Federal Civilian Executive Branch agencies a deadline of March 30 to remediate their systems, signaling the urgency of the situation. The National Cyber Security Centre in the U.K. issued an advisory to alert security teams about the change, noting that BIG-IP APM is widely used in large enterprises.
Apr 2, 2026 · via cybersecuritydive.com
Getty Images/FotografieLink Republican leaders in Congress announce plan to ending Homeland Security shutdown Government Shutdown Read more
Contractors’ bigger roles in TSA, fed AI raises new questions on accountability and execution Contracting Read more
Apr 2, 2026 · via federalnewsnetwork.com
A 2024 data breach of Rhode Island's online portal for social services has prompted a local lawmaker to introduce a bill to modernize cybersecurity laws. Doing so will better protect the personally identifiable information of Rhode Islanders, state Sen. Victoria Gu and state Rep. Lauren H. Carson say. “In the wake of the RIBridges cyberattack, it’s important to set clear expectations that state agencies, municipalities and companies should be meeting current best practices of an industry-recognized cybersecurity framework, such as NIST Cybersecurity Framework, to protect the personally identifiable information of Rhode Islanders,” said Gu (D-Dist. 38, Westerly, Charlestown, South Kingstown), who chairs the Senate Committee on Artificial Intelligence and Emerging Technologies. “Our current laws governing the protection of this information need updating to match the reality of our increasingly digital world and its threats.” The December 2024 breach of RIBridges affected around 650,000 people in total, releasing Social Security numbers, employment details, financial data and other personal information to the dark web. Gu and Carson saw this as a clear sign that Rhode Island needed to update its cybersecurity standards. “As our lives become increasingly digital, it is no surprise that identity theft is one of the fastest growing cybercrimes," said Representative Carson (D-Dist. 75, Newport). "We are no strangers to large data breaches here in Rhode Island, and many of us were asked to take steps to protect ourselves after the RIBridges attack. But just asking residents to protect themselves is insufficient. Especially as AI and related technologies grow in capability and popularity, we as legislators need to take serious steps to make sure Rhode Islanders are protected. It is time to update our identity theft protections, which have seen minimal changes over the last decade — an eternity considering how technology and our digital lives have changed since
Apr 2, 2026 · via thewesterlysun.com
Is “Hackback” Official US Cybersecurity Strategy? The 2026 US “Cyber Strategy for America” document is mostly the same thing we’ve seen out of the White House for over a decade, but with a more aggressive tone. But one sentence stood out: “We will unleash the private sector by creating incentives to identify and disrupt adversary networks and scale our national capabilities.” This sounds like a call for hackback: giving private companies permission to conduct offensive cyber operations. The Economist noticed (alternate link) this, too. I think this is an incredibly dumb idea: In warfare, the notion of counterattack is extremely powerful. Going after the enemy—its positions, its supply lines, its factories, its infrastructure—is an age-old military tactic. But in peacetime, we call it revenge, and consider it dangerous. Anyone accused of a crime deserves a fair trial. The accused has the right to defend himself, to face his accuser, to an attorney, and to be presumed innocent until proven guilty. Both vigilante counterattacks, and preemptive attacks, fly in the face of these rights. They punish people before who haven’t been found guilty. It’s the same whether it’s an angry lynch mob stringing up a suspect, the MPAA disabling the computer of someone it believes made an illegal copy of a movie, or a corporate security officer launching a denial-of-service attack against someone he believes is targeting his company over the net. In all of these cases, the attacker could be wrong. This has been true for lynch mobs, and on the internet it’s even harder to know who’s attacking you. Just because my computer looks like the source of an attack doesn’t mean that it is. And even if it is, it might be a zombie controlled by yet another computer; I might be a victim, too. The goal of
Apr 1, 2026 · via schneier.com
If the public sector had unlimited cybersecurity budgets and fully staffed SOCs, today’s threat landscape would look very different. But that’s not reality. Public sector organizations face chronic staffing shortages, constrained budgets and compensation structures that make it difficult to recruit and retain cybersecurity talent. Meanwhile, adversaries are accelerating their attacks. The result? Small teams carrying massive responsibility. The Expanding Scope of Responsibility In many public sector environments, a handful of professionals — sometimes even a single administrator — is responsible for:- Managing complex, multi-vendor security stacks - Administering Microsoft 365 and identity systems - Configuring MFA and cloud services - Monitoring alerts and triaging incidents - Coordinating incident response - Documenting compliance evidence These responsibilities don’t pause. They expand. Alert volumes increase. Hybrid infrastructure adds complexity. Oversight bodies demand continuous reporting. And threats grow more targeted and identity-driven. Even agencies that rely on managed service providers (MSPs) to bridge capability gaps face visibility challenges. MSP quality and specialization varies, and without unified tooling and oversight, risk intelligence becomes fragmented. Under these conditions, adding more point solutions only increases operational drag. Fragmentation Is the Hidden Tax Most public sector teams operate with disconnected tools for: - Email filtering - Phishing simulation - User-reported phishing triage - DLP enforcement - Compliance management - Incident documentation Each system generates alerts, reports and dashboards. Each requires configuration and maintenance. Each demands staff time. This fragmentation creates a hidden tax on already stretched teams. Console switching slows investigation. Manual phishing review delays remediation. Compliance evidence collection consumes hours that could be spent on proactive defense. And identity-based attacks continue to bypass isolated controls. Automation Is the Force Multiplier Resource constraints make one thing clear: automation is no longer optional. Security teams cannot scale headcount at the same rate attackers scale phishing campaigns. The only
Apr 1, 2026 · via blog.knowbe4.com
Austin ISD is currently addressing intermittent network lag and connectivity issues caused by targeted cyber attacks known as Distributed Denial of Service attacks. Our technology teams are working non-stop to ensure our students and staff stay safe and connected. The Situation: DDoS Attacks Recently, Austin ISD has been the target of several DDoS attacks. These are cyber attacks specifically designed to disrupt our network and make it difficult for students and staff to get online. A DDoS attack is like a coordinated digital "bottleneck." During an attack, bad actors use fake data to flood our internet connection, which causes the lag users on our network are experiencing. Recent news reports and threat intelligence indicate an increase in cyber threats across the country due to ongoing geopolitical tensions in the Middle East. Some groups are using these attacks to target schools and public services to create distractions or cause frustration. Our Action Plan While these attacks are unpredictable, our entire technology team, including our Network and Cybersecurity teams, are working around the clock to defend our systems. Here’s how we’re responding. - Partnering with Experts: We are working directly with the Texas Information Sharing and Analysis Organization (TX-ISAO), our internet service providers, and several other organizations to identify and block malicious traffic before it reaches our schools. - Real-Time Adjustments: As soon as an attack begins, our security and network teams make technical adjustments to reroute traffic and restore performance as quickly as possible. We know that having a reliable network is essential, especially as we approach testing season. Our IT team is committed to keeping our systems running smoothly and we will continue to update you as we learn more. Interrupciones en la red y nuestra respuesta de seguridad cibernética El Austin ISD está abordando actualmente retrasos intermitentes en la
Apr 1, 2026 · via austinisd.org
Dive Brief: - Cybersecurity has shifted from an information technology concern to one that increasingly carries financial risks falling within the scope of the modern CFO role, according to a new thought leadership piece from Microsoft. - CFOs are becoming more central to how organizations assess and manage cybersecurity risk as incidents increasingly translate into financial loss and operational disruption, the company said in its blog post, adding that recent advancements in artificial intelligence have only accelerated these trends. - “Cybersecurity may once have been managed quietly in the background, but today it is a visible financial leadership challenge shaped by regulation, AI acceleration, and rising expectations from boards and investors,” the post said. Dive Insight: U.S. cyberattacks hit a new peak in 2025, resulting in a record 3,322 data compromises, a 79% increase compared with 2020 levels, according to the Identity Theft Resource Center, a nonprofit that tracks and reports on U.S. data breach and identity theft activity. Cybersecurity now ranks as the biggest external concern for finance leaders globally, surpassing economic conditions and geopolitical tensions, according to SAP Concur’s latest CFO Insights report. “Like a rogue wave, cyber threats have risen sharply to become the top external challenge facing finance leaders,” the report said. In a high-profile example, Jaguar Land Rover said in January that a cyber incident disclosed in early September continued to weigh on its sales, with wholesale volumes down 43% year-over-year to 59,200 units in the three months ended Dec. 31 versus the same period a year earlier, as reported by CFO Dive sister publication Cybersecurity Dive. “The cyber incident meant that we had to close down our systems in one of the higher volume months of the year,” JLR CFO Richard Molyneux said in a November earnings call. IBM reported last year that the
Apr 1, 2026 · via cfodive.com
Hasbro Inc., one of the nation’s largest toymakers, said it suffered a cyberattack that could lead to weeks of product delays, according to a regulatory filing.
The company, with a portfolio includes Play-Doh and Transformers, has implemented business continuity plans to help manage its ability to accept orders, ship products and conduct other operations, according to the 8-K filing with the Securities and Exchange Commission.
The attack was first discovered Saturday, March 28, after an unauthorized party gained access to its network. The company proactively shut down certain systems and began an investigation, which included bringing in third-party forensics experts.
“We have taken swift action to protect our systems and data, including proactively taking select systems offline while we remediate the situation,’ a Hasbro spokesperson told Cybersecurity Dive. “While this is an unfortunate incident, Hasbro’s business operations remain open.”
Hasbro officials are working to identify any files that were potentially impacted in the attack and will notify proper authorities, according to the SEC filing, and the company is taking steps to make sure its business operations will operate securely moving forward.
Editor’s note: Updates with comment from Hasbro.
Apr 1, 2026 · via cybersecuritydive.com
Senegal and Finland Expand Cooperation on Cybersecurity, Digital Infrastructure, and AI Development The meeting reaffirmed the shared commitment of Senegal and Finland to building a strategic partnership anchored in innovation, knowledge exchange, and sustainable digital development. Senegal and Finland have strengthened their cooperation in digital transformation and communication following high-level political consultations held on March 26, 2026, in Dakar. The engagement took place on the sidelines of the second session of political consultations between both countries, with Senegal’s Ministry of Communication, Telecommunications and Digital Affairs participating in discussions aimed at deepening bilateral ties in the digital sector. The Finnish delegation was led by Outi Holopainen of the Ministry of Foreign Affairs of Finland and included Katja Ahlfors. The delegation was received by Senegalese officials to explore shared priorities in digital transformation, communication, and technology-driven development. Discussions focused on strengthening sovereign and resilient digital infrastructure in Senegal, including the modernization of data centres, improved government connectivity, and the development of AI-ready infrastructure. Both sides also discussed enhancing the capacity of the Share Cable to support increased digital traffic and improve national and regional connectivity. The two countries further explored opportunities to deepen technical and financial cooperation in support of Senegal’s digital ambitions under frameworks such as the New Deal for Technology and the European Union’s Global Gateway initiative. These partnerships are expected to support long-term investment in digital infrastructure and innovation. Cybersecurity was highlighted as a key area of concern, with both sides emphasizing the importance of strengthening national capacities, protecting critical infrastructure, and developing joint responses to evolving digital threats. The discussions also addressed the growing challenge of misinformation, with an emphasis on promoting media literacy, sharing best practices, and reinforcing information integrity. The meeting reaffirmed the shared commitment of Senegal and Finland to building a strategic partnership anchored in
Apr 1, 2026 · via techafricanews.com
Anthropic on Tuesday confirmed that internal code for its popular artificial intelligence (AI) coding assistant, Claude Code, had been inadvertently released due to a human error. "No sensitive customer data or credentials were involved or exposed," an Anthropic spokesperson said in a statement shared with CNBC News. "This was a release packaging issue caused by human error, not a security breach. We’re rolling out measures to prevent this from happening again." The discovery came after the AI upstart released version 2.1.88 of the Claude Code npm package, with users spotting that it contained a source map file that could be used to access Claude Code's source code – comprising nearly 2,000 TypeScript files and more than 512,000 lines of code. The version is no longer available for download from npm. Security researcher Chaofan Shou was the first to publicly flag it on X, stating "Claude code source code has been leaked via a map file in their npm registry!" The X post has since amassed more than 28.8 million views. The leaked codebase remains accessible via a public GitHub repository, where it has surpassed 84,000 stars and 82,000 forks. A source code leak of this kind is significant, as it gives software developers and Anthropic's competitors a blueprint for how the popular coding tool works. Users who have dug into the code have published details of its self-healing memory architecture to overcome the model's fixed context window constraints, as well as other internal components. These include a tools system to facilitate various capabilities like file read or bash execution, a query engine to handle LLM API calls and orchestration, multi-agent orchestration to spawn "sub-agents" or swarms to carry out complex tasks, and a bidirectional communication layer that connects IDE extensions to Claude Code CLI. The leak has also shed light
Apr 1, 2026 · via thehackernews.com
On the back of the recent 2026 RSAC Conference in San Francisco, cybersecurity news has been coming in thick and fast. Google Cloud was in attendance, and during the three-day summit, the company revealed a series of cybersecurity developments that outline its approach to security in the agentic AI Era. At the top of the agenda was Google Cloud’s recent acquisition of the cybersecurity firm Wiz, which closed in March. The acquisition will integrate Wiz’s dedicated cloud and AI security capabilities into the Google Cloud ecosystem, enhancing Google Cloud’s security by providing a more streamlined multi-cloud approach. Wiz’s AI security agents deliver a unique approach to scalable AI security, and the company’s infrastructure is finely tuned for AI use cases. Agentic Defense Beyond the acquisition, Google Cloud revealed its latest in-house agentic tools for security. Agentic automation, currently in preview in Google Security Operations, enables security teams to align automated security processes with agents. This means customers can embed dedicated security agents, including the Triage and Investigation agent, which investigates alerts, delivers evidence for later analysis, and provides verdicts for security professionals, directly into their workflows. The result? Decision-making is expedited through the automation process, allowing cybersecurity professionals to focus more on the most high-stakes threats. Starting in April, Google Security Operations customers will also have the means to develop their own security agents with support for the remote Model Context Protocol (MCP) server. Regarding dark web intelligence, Google Cloud has integrated agents with Google Threat Intelligence to focus on data synthesis and artifact triage while introducing another new feature, dark web intelligence, to create a complete threat profile unique to each organization. “Internal tests show Google Threat Intelligence can analyze millions of daily external events — with 98% accuracy,” reads a recent announcement blog. “The new dark web intelligence
Apr 1, 2026 · via cloudwars.com
HOUSTON, TX, UNITED STATES, April 1, 2026 /EINPresswire.com/ — With the rapid evolution of cyber threats, Senthil Muthu is at the forefront of global cybersecurity leadership with a combination of over 25 years of experience, and leading-edge innovation with AI-driven security frameworks. As a globally recognised cybersecurity leader, Muthu has developed an unparalleled body of work across 4 continents – India, Europe, Australia, and the United States – earning numerous international awards and recognition during that time. In his current role as Global Head of Cyber Security (CISO) at a global specialty chemical business, Muthu leads the security operations across 4 countries and protects an export network that serves more than 60 countries. Through both his leadership and oversight, Muthu’s work provides protection of complicated industrial systems, as well as the protection of sensitive data within an increasingly interconnected world-wide supply chain. Muthu’s contributions are not limited to his corporate leadership role. In addition, Muthu is working on research that has resulted in the development of the Adaptive Cyber Risk Intelligence Fabric (“ACRIF”) Framework, which enables real-time detection of risk, compliance with regulatory requirements, and proactive mitigation of threats in AI/machine learning environments. Muthu is also researching the “Transcritical Security Failure Law,” which provides a mathematical framework by which sustainable cybersecurity governance can collapse under hyper growth of operational scale; a perspective that is integral to businesses today. Muthu is an authority in emerging cyber risks and has built a robust reputation for his research on securing AI/ML Systems against threats such as prompt injection, model poisoning, and critical infrastructure vulnerabilities. In addition to his research, Muthu’s global advisory portfolio includes a wide range of leading companies, including Microsoft, BHP, Woodside Energy, and Kaiser Permanente, where he has led large-scale enterprise-wide cybersecurity transformations, integrated IT and OT security, and improved
Apr 1, 2026 · via palmbeachdailynews.com
Why Quantum Risk Matters for Small Businesses Today Even if your organization doesn’t handle classified data or operate in a highly regulated industry, you likely store information that retains value over time — customer records, financial data, intellectual property or employee information. This is where the concept of “harvest now, decrypt later” becomes critical. Cybercriminals are already collecting encrypted data today with the expectation that future quantum computers will allow them to decrypt it. For SMBs, this creates a hidden long-term risk: Data stolen today could become exposed years down the road. Unlike large enterprises, SMBs often lack extensive detection and response capabilities, making it even more important to focus on prevention. Once encrypted data is stolen, there is no way to retroactively protect it. Post-Quantum Cryptography: A Practical Path Forward for SMBs The most effective long-term defense against quantum threats is post-quantum cryptography (PQC) — encryption designed to withstand quantum attacks. Government agencies and standards bodies are already moving in this direction. NIST has released new cryptographic standards — ML-KEM, ML-DSA and SLH-DSA) — specifically built to resist quantum decryption. For SMBs, the key takeaway isn’t to immediately overhaul systems, it’s to start aligning with vendors and solutions that are PQC-ready. Many widely used technology providers such as Cisco, Check Point and Palo Alto Networks are already incorporating quantum-resistant capabilities into their products. By working with trusted partners, SMBs can adopt these protections gradually as part of normal refresh cycles rather than as costly, large-scale transformations. READ MORE: Learn what IBM had to say about post-quantum cryptography at RSAC 2026. How SMB IT Leaders Can Assess Quantum Risk You don’t need a dedicated quantum task force to begin. Instead, SMB IT leaders can take a streamlined approach: - Identify critical data: Focus on what matters most — customer data,
Apr 1, 2026 · via biztechmagazine.com