Here, iuvo breaks down the risks every business should know and why a cybersecurity plan is a foundational strategy.
Legal, Regulatory and Contractual Obligations Without a cybersecurity plan, businesses may face legal, regulatory and contractual issues at the same time.
A strong cybersecurity plan starts with a clear view of how attackers gain access to business systems, data and networks.
The Role of Strategic IT Planning in Cybersecurity A cybersecurity plan is strongest when it connects security decisions to business priorities.
Building a Cybersecurity Plan for Your Business A strong cybersecurity plan gives businesses a practical way to reduce risk, respond faster and make better security decisions over time.
Sep 22, 2026 · via krdo.com
In each case the identity file is still clean, still evidenced, still perfectly compliant.
For an institution operating across several of them, KYC stops being a risk discipline and becomes an administrative one.
Continuous KYC changes what’s being maintained.
Continuous KYC doesn’t mean continuously asking customers for things.
The customer experience of continuous monitoring should be frictionless and based on mutual trust.
Sep 20, 2026 · via cybersecurity-insiders.com
In today’s evolving landscape of cyber threats, malicious actors can attack from many angles, including exploiting passive DNS (PDNS) data or discovering unknown vulnerabilities.
While prime contractors and other large companies in the Defense Industrial Base (DIB) have various tools to protect themselves, small to medium-sized businesses (SMBs) are more vulnerable.
On September 30 at 12PM ET, join our free webinar Cybersecurity: Bridging the Gap Between Prime Contractors & SMBs to find out how the National Security Agency Cybersecurity Collaboration Center can help you stay safe through the free enhanced services it offers to Department of Defense (DOD) contractors.
Speaker Samantha Anim Campaign Manager National Security Agency, Cybersecurity Collaboration Center Samantha Anim is currently the Campaign Manager at the National Security Agency, Cybersecurity Collaboration Center.
In this role, she is responsible for increasing partnership participation and enrollment into NSA provided no-cost cybersecurity services for Defense Industrial Base (DIB) companies to help them defend against Nation-state and other cyber actors.
Sep 20, 2026 · via todaysmedicaldevelopments.com
Haley leads Seemplicity’s global sales organization and go-to-market operations as the company develops AI-based exposure management and response technology for cybersecurity teams.
Her appointment adds commercial and operational cybersecurity experience to an advisory group that includes executives from Abnormal AI, Accenture, EY, Security Risk Advisors and Target.
Haley previously held senior positions at Exabeam, Veracode, APIsec and Qualys, working across enterprise sales, global field operations, technical alliances, cloud marketplaces and go-to-market strategy.
Before moving into technology leadership roles, Haley worked as a vulnerability management practitioner at CVS Caremark, giving her experience on the customer side of enterprise cybersecurity operations.
Her appointment also gives EWF an adviser currently responsible for commercializing cybersecurity technology as AI becomes a larger component of exposure-management platforms and enterprise security operations.
Sep 20, 2026 · via mychesco.com
Cybersecurity’s center of gravity is shifting. Cloud infrastructure, software supply chains, AI agents, data security, and autonomous defense are creating new categories and giving a new generation of security CEOs plenty to talk about. These 11 executives stand out not necessarily because they run the largest cybersecurity companies, but because their companies and ideas are increasingly part of the industry conversation. 1. Amiram Shachar, Upwind Amiram Shachar is having a particularly consequential year. The Upwind co-founder and CEO previously founded Spot.io, which was acquired by NetApp, and now leads one of the fastest-growing names in cloud security. In September 2026, Upwind raised $300 million at a $3.8 billion valuation, more than doubling its valuation from the roughly $1.5 billion level reported earlier in the year. The latest financing underscores the growing investor interest in securing increasingly AI-driven cloud environments, while putting Shachar among the more closely watched CEOs in cybersecurity. 2. Rob Gurzeev, CyCognito Rob Gurzeev is CEO and co-founder of CyCognito, a leading attack surface management (ASM) platform. Rob has spent his early career on the attacker's side of the problem, previously leading offensive security development for private-sector organizations and intelligence agencies. Today he and his team help enterprises reduce external risk using proprietary AI-powered technologies that simulate adversary activity, from reconnaissance through the full attack chains. This puts Gurzeev at the center of the debate over how enterprises should answer advances in offensive AI, and the new classes of risk AI adoption creates. 3. Tina D’Agostin, Alcatraz AI Tina D’Agostin leads Alcatraz AI, which applies AI-powered facial authentication to physical access control. Her background spans more than 25 years in security technology and solutions, including leadership at Johnson Controls. In 2026, Alcatraz raised a $50 million Series B, while the company reported significant growth in data-center and enterprise
Sep 20, 2026 · via hackernoon.com
Terra Industries has led a $1 million pre-seed round in Aeon, a Nigerian cybersecurity company building sovereign cyber defense for Africa and the Global South.
said Samuel Ogbonyomi, co-founder and chief executive officer of Aeon, who founded the company with Ben Eluan and Alex Idowu.
Terra is excited to partner with Aeon and its investment follows a successful pilot earlier this year.
The two companies have now formed a commercial joint venture to deploy Aeon’s cyber defense technology across military and commercial operations.
Together, both companies will co-execute contracts for government and corporate organizations across the Global South, with Terra protecting physical assets and Aeon protecting digital assets.
Sep 19, 2026 · via portalerp.com
Apply for and join VA’s Cybersecurity Apprenticeship Program for Veterans.
The inaugural class of the Cybersecurity Apprenticeship Program for Veterans (CAPV) completed its program in August 2026.
VA’s apprenticeship program turns your military discipline and mission focus into real cybersecurity skills.
You train hands-on at the VA Cybersecurity Operations Center in Martinsburg, West Virginia, working alongside experienced professionals.
Cybersecurity leaders say mentoring apprentices has re-energized even their most experienced staff and sharpened the whole team’s performance.
Sep 19, 2026 · via news.va.gov
by Laurie Sullivan , 5 hours ago Google confirmed Friday that a Gemini AI model accessed the internet and hacked other companies' systems during a test of its cybersecurity capabilities.
In one case the Gemini model guessed passwords until it gained access to a protected system, The Wall Street Journal writes.
These events highlight the importance of training powerful AI models to act responsibly."
When an AI model is deployed to detect or stop sophisticated threats, it is often granted powerful tools and network access.
It is unclear whether these companies -- from Google to OpenAI and Anthropic -- gave their AI model less privilege to enforce "principle of least privilege" access across its runtime, network and data, treating the AI model as an non-trusted user executing non-trusted code.
Sep 19, 2026 · via mediapost.com
Google's Gemini artificial intelligence model hacked into the computer systems of three real companies during a cybersecurity test in May, marking the first known case of Google's AI autonomously carrying out such intrusions.
The incidents occurred during a "capture the flag" cybersecurity exercise conducted by Irregular, an independent company that evaluates AI systems.
"These events highlight the importance of training powerful AI models to act responsibly," she added.
Irregular said Google's incident stemmed from the same underlying testing problem involved in similar cases affecting other major AI companies.
Google is now the fourth major AI developer linked to an incident in which an AI model being evaluated gained unauthorized access to a real company's systems.
Sep 19, 2026 · via dailysabah.com
Experts React to New EU Cyber Resilience Act Reporting Rules The EU Cyber Resilience Act (CRA) is entering a critical new phase, as mandatory reporting obligations are now in effect for manufacturers across the bloc.
The rules mark a significant shift in how organisations must approach product security, putting greater pressure on manufacturers to identify, manage and report cyber risks throughout the product lifecycle.
What Do Experts Have to Say About the Revolut Data Breach?
CHOSEN BRICK: What We Know about Iranian Spyware Cyber intrusions have long been wielded to meet geopolitical ends and spyware is Iran’s new weapon of choice.
Iran-linked cyber actors are “trying to trick targets” into downloading malware that can be used to track their movements, NCSC warns.
Sep 19, 2026 · via cybermagazine.com
Israeli deeptech developer Quantum X Labs Inc. (NASDAQ: QXL) has unveiled a multi-dimensional cybersecurity initiative under its QuantumQ Security operational division.
The announcement follows the appointment of former Mossad Chief Yossi Cohen as President of Quantum X Labs’ Scientific Advisory Board to guide commercialization across defense, aerospace, and critical infrastructure sectors.
Rather than focusing solely on post-quantum algorithms or hardware security modules, the three-part framework investigates quantum-state properties for threat detection (including the LayerQake protocol), data confidentiality (Qatacomb), and distributed verification of digital assets and key ownership.
Formerly operating as Viewbix Inc. before a corporate rebranding and business pivot in April 2026, Tel Aviv-based Quantum X Labs maintains legacy ad-tech and enterprise software subsidiaries (Gix Media and Metagramm) alongside its expanding quantum portfolio.
Review the press release on GlobeNewswire here and examine our previous analysis of Quantum X Labs Launches “Qatacomb” Quantum-Native Security Research Initiative here.
Sep 19, 2026 · via quantumcomputingreport.com
Victor Torres-Corona spent three years after high school figuring out his next step.
Torres-Corona, a first-generation college student, said the center's hands-on training program, Centurion Secured, has made a major difference in his education.
"The amount of resources that are available to me as a first-gen student, and as a cybersecurity student, are really important," he said.
Student analysts monitor real data for Colorado communities, according to Richard MacNamee, director of the MSU Denver Cybersecurity Center.
That training helped Torres-Corona land an internship in cybersecurity at Sierra Space, the Colorado-based space technology company.
Sep 19, 2026 · via cbsnews.com
Election security concerns have long been at the forefront of the conversation around election equipment.
State lawmakers have passed legislation to phase out the use of QR codes on ballots, but are still developing the guidelines that state lawmakers will use when selecting their next statewide voting system.
Here are some of the election security issues state lawmakers will have to consider.
Whichever system the state turns to next, state leaders say, will likely be in use for at least the next decade.
"We have a very, very robust state system that takes care of us that knows when things like that are going on and they alert us very quickly," she said.
Sep 19, 2026 · via timesfreepress.com
Following a Wall Street Journal investigation, Google has confirmed that Gemini went rogue in May 2026, accessing the internet and breaching the security of three different companies.
Google’s Heather Adkins, VP of security engineering, said: This event highlights the importance of training powerful AI models to act responsibly.
These events highlight the importance of training powerful AI models to act responsibly.
The exact Gemini model used in the test has not been confirmed, but the May 2026 timing alone rules out the latest Gemini models.
More on Gemini: Gemini app for macOS adding send and read iMessage integration Gemini 3.8 Live Extended Thinking powers Gemini Live, Gmail, & Keep Google brings Gemini for desktop app to Windows
Sep 19, 2026 · via 9to5google.com
Box CEO Aaron Levie recently posted on X that AI for cybersecurity "is about to go vertical" as models become increasingly capable of finding and exploiting vulnerabilities.
As threats multiply, companies need systems that can prioritize alerts, investigate risk, recommend fixes, and automate remediation.
AI may ease the talent shortage — and change the job Bourzikas said that the cybersecurity industry has faced a historic "talent shortage" due to a gap in specialized skills.
"The war for engineers with deep AI and security expertise is at an absolute fever pitch," Bourzikas wrote.
Unlike Bourzikas, who expects cybersecurity worker headcount to keep growing, Palmore expects fewer people may ultimately be needed — and that they'll be expected to have a different, more advanced skillset from the get-go.
Sep 18, 2026 · via businessinsider.com
Cybersecurity leaders have surged this year as investors rotate within technology and seek exposure to AI-driven security demand.
Freedom Capital’s chief market strategist, Jay Woods, sees further upside in one laggard: Zscaler.
According to Woods, the sector’s strength has increasingly spread beyond its market leaders, creating opportunities among cybersecurity stocks that have yet to participate fully in the rally.
AI Buildout Supports Cybersecurity Demand Woods argues that the AI buildout is strengthening the long-term case for cybersecurity.
Retail Sentiment For Cybersecurity Stocks On Stocktwits, the retail sentiment was ‘bullish’ for ZS and PANW, and ‘neutral’ for CRWD and OKTA.
Sep 18, 2026 · via stocktwits.com
Troy Hunt of HaveIBeenPwned has reported that the data allegedly stolen from McKesson included 6.4 million unique email addresses from marketing campaigns, patients, staff members, and other individuals.
ShinyHunters added McKesson to its data leak site, and the listing claims that 284 million patient data records were exfiltrated.
McKesson announced the incident on August 28, 2026, explaining that an investigation had been launched following “a cybersecurity incident involving third-party applications and unauthorized access and exfiltration of data.”
According to the SEC filing, the cybersecurity incident was first detected on August 25, 2026.
ShinyHunters claims that the stolen data includes names, contact information, Social Security numbers, dates of birth, medical record numbers, Medicaid numbers, medication/allergy information, diagnoses, appointment information, and other sensitive data.
Sep 18, 2026 · via hipaajournal.com
CHICAGO (WLS) -- Former Homeland Security officials and federal cybersecurity agencies are warning that artificial intelligence is increasingly being exploited by terrorists, criminals and foreign adversaries, raising concerns about potential threats to national security.
Former Homeland Security Acting Undersecretary for Intelligence and ABC News contributor John Cohen told the ABC7 I-Team that terrorist groups and criminal organizations are already using artificial intelligence to enhance their capabilities.
The growing use of AI presents significant national security concerns because it can accelerate the planning and execution of attacks, according to Cohen.
"Artificial intelligence has dramatically shortened the time it takes for a terrorist group to plan an attack, and it increases the likelihood that their attack plan will be successful," he said.
SEE ALSO | OpenAI flags concerning new AI behavior and vows to track it more closely Federal authorities, including the National Security Agency, have warned that adversaries such as China are working to exploit American-made AI technology and extract its capabilities.
Sep 18, 2026 · via abc7chicago.com
With doomsday AI scenarios dominating the news, lawmakers are rightly concerned about reports concerning security breaches at major US AI labs, such as the OpenAI–Hugging Face incident and the many others reported in its aftermath.
As they consider potentially regulating frontier AI, they should focus any new legislation on the immediate, demonstrated risks from those incidents.
Post-incident reports show that the Hugging Face incident could have been mitigated or prevented by following longstanding cybersecurity best practices, like stronger sandboxing and monitoring.
Following these fundamental best practices would have prevented or substantially mitigated all of the incidents at AI labs that we currently know about.
Tying any new mandates to evidence-backed security protocols also protects the public without impeding future AI development.
Sep 18, 2026 · via eff.org
1 min read | | Latin Lawyer Editorial Team Latin Lawyer Editorial Team Madrona Advogados has advised Brazilian aerospace company Embraer on the combination of its cybersecurity subsidiary with Vision Cybersecurity, a subsidiary of investment group SPX, which relied on Mattos Filho.
To read more Subscribe to Latin Lawyer Register for limited access Register to receive regular round-up emails and limited access to selected content.
Register now Subscribe to unlock unlimited access Get news, unique commentary, expert analysis and essential resources from the Latin Lawyer experts.
Subscribe now Already have access?
Login below E-mail or username Password Remember me Latin Lawyer Editorial Team Copyright © 2026 LBR trading as CentellicCompany Number: 03281866 VAT: GB 160 7529 10
Sep 18, 2026 · via latinlawyer.com