No-frills tech news

Microsoft Digital Defense 2026 Report Highlights New Cybersecurity Challenges Amid Rapid AI Adoption

Microsoft’s 2026 Digital Defense Report reveals that cyber threats are becoming more complex as AI adoption grows and digital identities, cloud services, software supply chains, and critical infrastructure become increasingly interconnected. AI holds tremendous potential to drive progress in Indonesia, but realizing that potential requires trust that systems, data, and identities are protected. While attackers’ methods and targets have remained largely unchanged, AI and increasingly interconnected digital systems are making attacks faster, more scalable, and more effective. At the same time, AI systems themselves are becoming targets, including the data and infrastructure supporting them. How AI is Changing Cyber Attacks and Defense AI is shifting the speed, scale, and sophistication of cyberattacks.

Hannaford’s parent company taking precautions following ‘cybersecurity incident’

Maine (WABI) - Hannaford’s parent company, Ahold Delhaize, is experiencing a security issue within its network, resulting in some stores’ digital network being down. Ahold Delhaize said its teams are taking steps to assess and mitigate the issue. Company statement Ahold Delhaize released the following statement: “Ahold Delhaize is experiencing a security issue within its network. Website and app message The following message currently appears on the Hannaford website and app: “Our Hannaford website and app are currently unavailable. Any unfulfilled orders placed through Hannaford.com or the Hannaford app will be refunded.

Be a good AI ancestor: Cybersecurity already gave us the playbook

After nearly 30 years in technology, including my career at Intel, I believe AI safety requires the same approach. Our objective is to help establish boundaries for autonomous AI systems and advance those boundaries toward practical implementation. I believe the next phase of AI safety requires a shift in leadership and execution. From responsible AI principles to enforceable Red Lines The International AI Safety Red Lines initiative is focused on a fundamental question: What capabilities and behaviors should increasingly autonomous AI systems never be permitted to exhibit? The Global Council for Responsible AI’s International AI Safety Red Lines initiative is one contribution to that broader effort.

Cybersecurity research at UH Mānoa earns national recognition

Reading time: < 1 minute The University of Hawaiʻi at Mānoa has been renewed through 2030 as a National Center of Academic Excellence in Cyber Research (CAE-R), a national designation recognizing universities that conduct advanced cybersecurity research and prepare students for careers in the field. The designation is part of a federal program led by the National Security Agency recognizing colleges and universities for their contributions to cybersecurity education, research and workforce development. Fewer than 20% of institutions in the national program hold the CAE-R designation, which is focused on universities with doctoral-level research programs. “It also reflects the important role that research universities play in preparing the next generation of cybersecurity professionals, applying AI for cybersecurity, and securing increasingly important AI systems.” Increasing importance of cybersecurity Cybersecurity has become increasingly important as Hawaiʻi’s residents, businesses, schools and government agencies rely on digital systems for everything from banking and health care to transportation and communication.

IonQ to Acquire Elisity for $1.3B to Advance Quantum Security

IonQ is offering its customers a vertically integrated full-stack quantum platform across quantum computing, networking, sensing and cybersecurity. IonQ’s Multiproduct Revenue Growth Opportunity IonQ brings an established track record in growing its quantum security and quantum-secure communications offering. About Elisity Elisity helps enterprises advance Zero Trust security for users, devices, workloads, AI agents and other non-human identities. About IonQ IonQ, Inc. [NYSE: IONQ] is the world’s leading quantum platform and foundry - delivering integrated quantum solutions across computing, networking, sensing, and security. Contacts IonQ Investor Contact investors@ionq.co ‍ IonQ Media Contact media@ionq.co ‍ Elisity Media Contact Danielle Ostrovsky, ostrovsky@hi-touchpr.com ‍

Honeywell outlines industrial autonomy path with cybersecurity focus

Honeywell Technologies' Uygar Doyuran discusses the cybersecurity, data, and AI foundations required to advance industrial autonomy while safeguarding safety and uptime. Greater autonomy introduces new cybersecurity challenges as connected systems and AI assume increased responsibility, based on information published by TahawulTech. Honeywell Technologies emphasizes that cybersecurity must be an integral part of this transition, particularly as operational technology (OT) integrates with enterprise systems and cloud platforms. Honeywell Forge facilitates this by connecting disparate data, knowledge, and control systems. Honeywell's approach combines data, domain knowledge, and deterministic AI to ensure AI operates within defined constraints.

Cybersecurity FAQ: How Do CFOs Collaborate With CISOs?

TradeFlock, one of the fastest-growing business magazines in India, has more FAQs around cybersecurity and CFOs. Read the Full Story Cybercrime Magazine is Page ONE for Cybersecurity. What’s happening at Cybercrime Magazine. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

Project factsheet: Building sustainable cybersecurity capacities in Bosnia and Herzegovina

Bosnia and Herzegovina (BiH) remains one of the few countries in South-East Europe without a state-level cybersecurity strategy or operational state-level Computer Emergency Response Team/ Computer Security Incident Response Team (CERT/ CSIRT). While efforts have been made to lay the groundwork for national cyber resilience, political and institutional constraints continue to hinder the establishment and operationalization of CERTs/CSIRTs. Findings of the OSCE Assessment conducted in 2025 indicate that BiH institutions are facing heightened exposure to cyber threats, compounded by limited technical expertise, inadequate human resources, and insufficient co-ordination mechanisms for timely to detection and response to cyber incidents. The OSCE Mission to BiH, through this project, aims to support national stakeholders in strengthening their cybersecurity capacities, promoting good governance and aligning BiH with international cybersecurity standards and OSCE Confidence-Building Measures (CBMs).

IonQ is buying cybersecurity firm Elisity for up to $1.3 billion

Of that total, as much as $150 million is structured as earnouts that depend on how Elisity performs going forward, according to the Wall Street Journal. IonQ stock closed Friday at $39.89, giving the company a market value of roughly $16 billion. IonQ Chairman and Chief Executive Niccolo de Masi said the acquisition reflects his view that cybersecurity risks will grow as quantum computing and artificial intelligence systems become more capable. "The bad guys are going to keep taking advantage of new technology," de Masi told the Wall Street Journal. That buying spree included a $1.8 billion agreement earlier this year to take over semiconductor manufacturer SkyWater Technology, according to the Wall Street Journal.

OT-ISAC, SUTD combine research and industry threat intelligence to strengthen OT cybersecurity preparedness

Together, they will help organisations better prepare for, respond to and recover from evolving cyber threats affecting critical infrastructure. Under the MOU, the two organisations will work together on OT cyber threat intelligence sharing, cyber exercises and professional training across the region. iTrust will contribute its research, testbed and training expertise, including lessons from its annual OT cyber exercise. Our partnership with OT-ISAC will help iTrust develop practical technologies to strengthen OT cyber resilience,” said SUTD iTrust Centre Director Prof Jianying Zhou. With Design AI, AI is treated as a collaborative partner rather than just a tool, enabling humans and AI to brainstorm, test and prototype together.

Ahold Delhaize takes precautionary measures following cybersecurity incident

This communication contains information that qualifies as inside information within the meaning of Article 7(1) of the EU Market Abuse Regulation. This press release includes forward-looking statements. All statements other than statements of historical facts may be forward-looking statements. Forward-looking statements can be identified by certain words, such as “anticipate,” “intend,” “plan,” “goal,” “seek,” “believe,” “project,” “estimate,” “expect,” “strategy,” “future,” “likely,” “may,” “should,” “will” and similar references to future periods.

Healthcare Cybersecurity Is Becoming a Patient Safety Issue

For years, the conversation around healthcare cybersecurity has largely centered on protecting data. But research presented by Jeff Tully, M.D., co-director of the UC San Diego Center for Healthcare Cybersecurity, suggests there are limits to how far training can take us. That is an important distinction for healthcare cybersecurity. But healthcare organizations also need to plan for the possibility that their best defenses will eventually be tested. And because healthcare organizations are interconnected, the consequences of one organization's disruption can extend well beyond its own walls.

AI Can Fix Vulnerabilities Faster, But Who’s Checking the Work?

At Black Hat a few weeks ago, it felt like every other conversation I had was about AI finding vulnerabilities. The natural next question, then, is whether AI can fix what it finds. What to measure when the ticket closes Should CISOs trust AI to fix vulnerabilities? The best thing AI does for most security teams is hand them back hours. Security teams that pair that speed with more follow-through will come out ahead.

Warnings and Tips for Cybersecurity Awareness Month

October is National Cybersecurity Awareness Month! Cybersecurity is the practice of protecting networks, devices, and data from unauthorized access or criminal use – and it isn’t just for IT professionals. It is important to understand that most cybercriminals do not target computer systems; they target computer users. By deceiving and manipulating legitimate users, criminals convince them to voluntarily take actions that make their devices and data more vulnerable to cyberattacks. Organizations who want to share more information about cybersecurity with their members or audiences can download DATCP’s new Cybersecurity for Consumers and Cybersecurity for Business toolkits for free at DATCPOutreachToolkit.wi.gov.

Japan Declares Cybersecurity Emergency, Experts Nod to AI

Japan has declared a cybersecurity emergency, following a spate of attacks on its companies in recent weeks. Some experts are already pointing the finger at AI. Japanese cybersecurity minister Toshiharu Furukawa said the situation was “extremely critical” at a meeting at the National Cybersecurity Strategy Headquarters. Meanwhile, Nobuo Miwa, president of Tokyo-based cybersecurity firm S&J Corp, compared the recent attacks to “carpet bombing” in a statement to Reuters. Japan recorded more cybersecurity incidents in the first nine months of 2026 than in all of last year, according to data from TrendAI shared with Reuters.

How Can We Manage Identity Access for AI Agents?

But one major new aspect of this challenge includes predictions that AI agents that will soon outnumber humans in certain areas. So what steps are needed to holistically address this agentic AI identity issue? CISO Series offers these "14 Tips for Human and AI Identity Management from Ping Identity." Earlier this year, this draft document was released for comment: Accelerating the Adoption of Software and AI Agent Identity and Authorization. FINAL THOUGHTS I have written several blogs this year on related topics around identity and cybersecurity, but none focused on this AI identity governance issue.

Canadian cybersecurity executive arrested in federal extortion case

Federal authorities arrested a Canadian cybersecurity executive Thursday in Pennsylvania on charges of conspiracy of extortion, according to federal court records posted Friday. Edward Dubrovsky, 54, is a former chief operating officer and founder of CYPFER, a firm that helps organizations negotiate with ransomware operators. The New York Times reported Friday that a Canadian man was arrested in Pennsylvania in connection with the attack. The FBI breach has drawn widespread attention. In September, Dutch authorities arrested a 24-year-old suspected of affiliation with ShinyHunters.

Cybersecurity executive who helped hacking victims arrested on federal extortion charges

A Canadian cybersecurity executive who built a career helping organizations recover from cyberattacks has been arrested on federal extortion charges, a case that may be linked to the FBI’s pursuit of the ShinyHunters hacking group that pilfered troves of bureau employee data. Dubrovsky held leadership positions at incident-response companies, taught cybersecurity courses and recently published a book about how organizations should handle extortion incidents. A York University biography⁠ identified him as Cytelligence’s chief operating officer and Aon’s Canadian cyber leader. FBI Director Kash Patel announced Friday that the bureau had arrested another suspected ShinyHunters co-conspirator, without naming the person or disclosing charges. Canadian authorities separately acknowledged that a Canadian had been arrested in the United States in connection with the hack.

2026 Digital Defense Report | Security Insider

The 2026 Microsoft Digital Defense Report reveals a security environment where attack timelines are compressing, sophisticated capabilities are becoming more accessible, and agentic systems are beginning to automate more of the attack chain. Security teams can use many of the same advances to discover risk earlier, correlate signals faster, investigate continuously, and respond at machine speed. Download the 2026 Microsoft Digital Defense Report executive summary. TheMicrosoft Digital Defense Report makes the asymmetry clear: security teams may have to protect thousands of systems, while a threat actor needs to find only one viable path. This year’s report points to a security environment defined by persistent pressure, machine-speed operations, and growing interdependence.

OrcaRouter Releases OrcaCyber Zero 1.5 Cybersecurity Model With 1M Context

OrcaCyber Zero 1.5 is a post-trained Orca model for vulnerability reproduction, exploit development and penetration testing. The model page lists 4 vendor-reported results, last evaluated October 10, 2026: Cybench: 100% (39/39, unrestricted agent execution). Pricing is $3.00 per 1M input tokens and $7.50 per 1M output tokens. Key Takeaways OrcaCyber Zero 1.5 is a gated, 1M-context cybersecurity model on OrcaRouter. Pricing is $3.00 / $7.50 per 1M tokens, far below Mythos Preview’s $25 / $125.