No-frills tech news

<b>Cybersecurity</b> incident forces Brockton Hospital to use paper records

A cybersecurity incident at Brockton Hospital has forced staff to revert to paper records and analog methods as officials Tuesday continued work to restore systems and investigate the breach. Signature Healthcare, the hospital’s parent company, said the issue began Monday after “suspicious activity” was detected on part of its network, prompting officials to shut down the hospitals’ systems and activate emergency protocals. “Our systems are offline,” Brooke Hynes, a spokesperson for the hospital, said in an interview Tuesday. The hospital is working with outside cybersecurity experts and has notified State Police and the FBI, Hynes said. Kirsten Setera, an FBI spokesperson, confirmed the office is “aware of the incident” involving Brockton Hospital but declined to comment further. State Police spokesman Tim McGuirk said Signature reported the activity to the Commonwealth Fusion Center but said he could not release further details. “As we urge the public to report suspicious activity they observe, we also encourage businesses to share information in this way,” McGuirk said in an email. “Doing so allows public and private partners to continually strengthen our approach to cyber security.” Officials have not yet determined the nature of the incident, including whether it involves ransomware or if any patient data was accessed or compromised. “We don’t have any immediate indication that anything has been [accessed], but we don’t know,” she said. “That will be part of the full investigation.” There is no estimated timeline for when systems will be restored, a detail that forensic cybersecurity experts say can signal how complex the situation may be. Kyle Sandy, director of cybersecurity at Logically, said the hospital’s decision to take systems offline is consistent with either a precautionary shutdown or a potential ransomware attack. “They thought maybe there is something here, and maybe it gets worse if we don’t take these

Why Anthropic's new model has <b>cybersecurity</b> experts rattled

Why Anthropic’s new model has cybersecurity experts rattled The company says it has built its most dangerous model yet. Can its coalition of internet companies fix the internet before others catch up? This is a column about Anthropic and AI. My fiancé works at Anthropic. See my full ethics disclosure here. Two weeks ago, Anthropic accidentally leaked the existence of what the company said was its most powerful artificial intelligence to date: a new model, known as Claude Mythos Preview, that represented “a step change” in AI performance. In particular, according to a blog post that leaked due to human error and a misconfigured content management system, Mythos posed serious new risks to cybersecurity. “It presages an upcoming wave of models that can exploit vulnerabilities in ways that far outpace the efforts of defenders,” the blog post stated. On Tuesday, the wave crashed onto the shore. Anthropic announced Mythos alongside Project Glasswing, an initiative with more than 40 of the world’s biggest tech companies that will see Anthropic grant early access to the model to find and patch vulnerabilities across many of the world’s most important systems. Launch partners in the coalition include Apple, Google, Microsoft, Cisco and Broadcom. They’ll be tasked with scanning and patching their own systems along with the critical open-source systems that modern digital infrastructure depends on. Anthropic is giving participants $100 million in usage credits for Mythos, and donating another $4 million to open-source security efforts. Still, today marks a striking and mostly unsettling moment in the development of AI systems. One of the world’s three frontier labs has now created a model it says is too dangerous to release to the general public. These dangers emerged not from any specialized cyber training but from the same general improvements that every other lab is currently

CCPA <b>cybersecurity</b> audit requirements: PwC

{{item.title}} {{item.text}} {{item.text}} Organizations subject to the California Consumer Privacy Act (CCPA) should be preparing for a more demanding phase of privacy compliance. The focus is shifting from documented intent to demonstrable accountability—including defensible scoping, mapped controls, and evidence that cybersecurity practices are operating effectively over time. As audit expectations evolve, organizations should consider acting now to confirm applicability of the regulations and strengthen readiness before scrutiny intensifies. Organizations subject to the California Consumer Privacy Act (CCPA) should be preparing for a more demanding phase of privacy compliance. With updated regulations and requirements in September 2025, the focus is shifting from whether an organization has documented privacy and cybersecurity practices to whether it can demonstrate—through independent audits supported by data and documentation—that those practices are functioning as intended. Preparation may need to begin sooner than some organizations expect. Cybersecurity audit obligations under California’s updated framework begin phasing in 2027 (less than 12 months from now), and the work required to define scope, map controls to the audit requirements within the rule, and demonstrate operating effectiveness throughout the calendar year may require significant time and cross-functional coordination. Organizations may increasingly need to show that their privacy commitments are supported by a cybersecurity program that is appropriately scoped, governed effectively, and capable of withstanding an independent audit. Organizations preparing for the CCPA independent audit requirement should focus on three priorities: a defensible scope, clearly defined and mapped control activities, and evidence that controls are operating effectively over time. The shift isn’t simply toward more documentation. It’s toward demonstrable accountability of safeguarding consumers’ personal information. Organizations should consider the following actions: Cyber accountability is coming due to California’s new cybersecurity audit requirements. For organizations preparing for the independent audit requirement, the question is no longer simply whether policies exist. The question is whether

Miami Dade College to Host <b>Cybersecurity</b> Hackathon on April 10 | MDC News

Event will connect students with industry leaders to tackle real-world cyber threats Miami, Fla. (April 7, 2026) — As cybersecurity threats continue to rise and demand for skilled professionals reaches record levels, Miami Dade College (MDC) has partnered with Fortinet, Inc to host a Cybersecurity Hackathon on Friday, April 10, from 8:30 a.m. to 1:30 p.m., bringing together students, industry partners and South Florida’s tech community to engage in real-world cybersecurity challenges and develop innovative solutions to today’s most pressing digital security issues. The event will be held at MDC’s North Campus and is free and open to all students, but pre-registration is required. Working media is welcome. “Activities such as this one are a great way to expose individuals to the reality that cybersecurity is not a product but a process. At present, cybercrime is the greatest threat to any organization in the world,” said Mauricio Ardila, Major Account Manager at Fortinet. According to industry reports, the global cybersecurity workforce gap exceeds 3.5 million unfilled positions, underscoring the urgent need for hands-on training and talent development. MDC’s hackathon aims to help bridge that gap by providing students with immersive, experiential learning opportunities that mirror the fast-paced environments of today’s cybersecurity field. During the event, students will collaborate in teams, guided by industry mentors, to address simulated cybersecurity scenarios — from threat detection to risk mitigation — while competing for prizes and recognition. The hackathon will also feature a panel discussion with Clifford Payne, vice president of engineering at Tesys Networks, and Mario Diez, chief information officer for the city of Sweetwater. “This event is about more than competition — it’s about preparing the next generation of cybersecurity professionals,” said Manuel Perez, dean of MDC’s School of Engineering Technology and Design (EnTec). “By working alongside industry experts and tackling real-world

Top <b>Cybersecurity</b> Mistakes Employees Make Are Rapidly Changing with AI, According to Drip7

SPOKANE, WA, UNITED STATES, April 7, 2026 /EINPresswire.com/ — The most common cybersecurity mistakes employees make every day are rapidly evolving with the rise of artificial intelligence (AI)—rendering traditional, once-a-year security awareness training increasingly ineffective. Drip7, a leader in microlearning-based cybersecurity education, is helping organizations address these emerging risks by focusing on the human behaviors most targeted by today’s AI-driven attacks. While human error has long been the leading cause of cybersecurity incidents, new research shows the nature of that risk is shifting. Industry data indicates that 60–74% of breaches involve human factors. (Brightside AI) With the rapid adoption of AI, these risks are now more scalable, more convincing, and more difficult to detect than ever before. “Employees aren’t making more mistakes—they’re facing more sophisticated deception,” said Heather Stratford, CEO of Drip7. “AI has fundamentally changed what a cybersecurity mistake looks like, and organizations must adapt their training accordingly.” As artificial intelligence becomes embedded in everyday workflows, human-related risks are being amplified. As noted by renowned cybersecurity expert Bruce Schneier, AI does not eliminate human error—instead, it accelerates and amplifies both the impact and speed at which those errors are exploited. This reality underscores a critical challenge for IT and security leaders: routine user mistakes are no longer isolated incidents—they are entry points for increasingly automated and intelligent attacks. How AI Is Changing Everyday Cybersecurity Mistakes Drip7 has identified a new employee-driven risks shaped by AI-powered threats: 1. Highly Personalized Phishing at Scale AI-generated phishing emails now replicate tone, context, and writing style with remarkable accuracy, making them significantly harder to detect. In some campaigns, over 82% of phishing emails are now AI-generated, increasing both their volume and success rate. (Zensec) At the same time, a growing confidence gap persists—employees believe they can identify phishing attempts, but real-world testing continues

Project Glasswing: Securing critical software for the AI era

Project Glasswing Securing critical software for the AI era Introduction Today we’re announcing Project Glasswing1, a new initiative that brings together Amazon Web Services, Anthropic, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, the Linux Foundation, Microsoft, NVIDIA, and Palo Alto Networks in an effort to secure the world’s most critical software. We formed Project Glasswing because of capabilities we’ve observed in a new frontier model trained by Anthropic that we believe could reshape cybersecurity. Claude Mythos2 Preview is a general-purpose, unreleased frontier model that reveals a stark fact: AI models have reached a level of coding capability where they can surpass all but the most skilled humans at finding and exploiting software vulnerabilities. Mythos Preview has already found thousands of high-severity vulnerabilities, including some in every major operating system and web browser. Given the rate of AI progress, it will not be long before such capabilities proliferate, potentially beyond actors who are committed to deploying them safely. The fallout—for economies, public safety, and national security—could be severe. Project Glasswing is an urgent attempt to put these capabilities to work for defensive purposes. As part of Project Glasswing, the launch partners listed above will use Mythos Preview as part of their defensive security work; Anthropic will share what we learn so the whole industry can benefit. We have also extended access to a group of over 40 additional organizations that build or maintain critical software infrastructure so they can use the model to scan and secure both first-party and open-source systems. Anthropic is committing up to $100M in usage credits for Mythos Preview across these efforts, as well as $4M in direct donations to open-source security organizations. Project Glasswing is a starting point. No one organization can solve these cybersecurity problems alone: frontier AI developers, other software companies, security researchers, open-source maintainers,

Anthropic Launches 'Project Glasswing' to Stealthily Spot <b>Cybersecurity</b> Issues for Rivals

Two weeks ago, Anthropic’s secretive AI model known as Claude Mythos was discovered because unpublished information about it was sitting in a publicly accessible database. Now the company is announcing that it is teaming with the biggest companies in the world to let that model loose to flag potential security vulnerabilities within their systems. The limited release of Mythos, dubbed Project Glasswing, includes about 40 organizations that will have access to a preview version of the model that is supposedly better than “all but the most skilled humans” at finding software vulnerabilities. Launch partners for the project include Amazon Web Services, Apple, Google, JPMorganChase, Microsoft, and NVIDIA, among others. According to Anthropic, the early returns from the collaboration have been jarring, as the company claims to have found “thousands of high-severity vulnerabilities,” including some in every major operating system and web browser. It’s unsurprising, given those apparent revelations of serious security flaws, that Anthropic believes the model “could reshape cybersecurity.” Its benchmark tests certainly seem to show that, as Mythos Preview consistently outperformed Claude Opus 4.6, including on the CyberGym test that seeks to identify how well AI agents can detect and reproduce real-world software vulnerabilities. The anecdotes support it, too. Anthropic says Mythos found a bug in the open-source operating system OpenBSD that had been there for 27 years and spotted a chain of vulnerabilities in Linux that could be used to completely hijack a machine. What’s interesting is that just weeks ago, when Mythos was first discovered (due to a very simple security slip-up, curious how that one wasn’t caught by the all-seeing machine), Anthropic was apparently positioning the model as being so powerful that it would present unprecedented cybersecurity risks. The company hasn’t totally backed off that notionâit said that it won’t make Mythos Preview available to

FBI warns of Iranian-affiliated <b>cybersecurity</b> threats on US critical infrastructure

Following President Donald Trump’s threats to bomb Iranian power plants and bridges, a group of federal security agencies warned Tuesday that affiliates of the Persian Gulf nation are targeting U.S. critical infrastructure. Water, wastewater and energy systems are all part of an ongoing cyber exploitation of internet-connected devices involved with industrial automation processes, according to a multi-agency cybersecurity advisory. “Iran-affiliated cyber actors are targeting operational technology devices across U.S. critical infrastructure, including programmable logic controllers,” the FBI Cyber Division wrote on X on Tuesday. The post urged municipalities and those in the water and energy sectors to review their tactics, techniques and procedures for detecting if their systems have been compromised and to apply recommended mitigations. Iranian-affiliated “targeting campaigns against U.S. organizations have recently escalated, likely in response to hostilities between Iran, and the United States and Israel,” according to the joint advisory from the FBI, Cybersecurity and Infrastructure Security Agency, National Security Agency, Environmental Protection Agency, Department of Energy and U.S. Cyber Command. The advisory said the agencies have observed threat actors affiliated with Iran using overseas-based IP addresses to access internet-enabled industrial computers to intentionally cause disruptions. They said the threat actors are exploiting leased computer controls and software systems made by Rockwell Automation and its subsidiary Allen-Bradley to extract the devices’ project files and alter data displays. To prevent attacks, the agencies recommend the devices be immediately disconnected from public-facing internet systems to ensure access is controlled and to take follow-up steps such as adding multifactor authentication and other firewalls to control access. On Tuesday, Microsoft also said a cybersecurity threat actor linked with the Russian military known as Forest Blizzard has been compromising home and small-office internet equipment, including routers. The tech giant said the threat actor modifies settings to turn equipment into malicious infrastructure that

EPA, FBI, CISA, NSA Issue Joint <b>Cybersecurity</b> Advisory to Water System Regarding Iranian ...

EPA, FBI, CISA, NSA Issue Joint Cybersecurity Advisory to Water System Regarding Iranian-Affiliated Cyber Attacks Advisory contains information to promote resilience, ensure safety of Americans drinking water WASHINGTON – U.S. Environmental Protection Agency (EPA), the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (NSA) issued a joint advisory warning to U.S. organizations, including those in the water sector, for an urgent and ongoing Iranian-affiliated cybersecurity threat. U.S. organizations are experiencing exploitation and, in some cases, disruption of commonly used operational technology at drinking water and wastewater systems that are diligently working to ensure that Americans can rely on clean and safe water. “Cybersecurity threats are a serious concern for our nation’s water infrastructure, including the communities, businesses, hospitals, and other critical infrastructure sectors that rely on these critical lifeline services,” said EPA Assistant Administrator for Water Jess Kramer. “Water systems are encouraged to stay informed and work to adopt cybersecurity best practices.” “Cyberattacks on drinking water and wastewater systems directly threaten public health and community resilience. A single breach can disrupt treatment or introduce contaminants, damage equipment, and erode public trust, said EPA Assistant Administrator for Enforcement and Compliance Assurance Jeffrey A. Hall. “EPA enforcement safeguards our nation’s critical infrastructure, including water systems, by ensuring compliance with applicable safety, maintenance, resilience, and security requirements and by rapidly correcting vulnerabilities. We also work with our law enforcement partners to disrupt attacks and to hold those responsible accountable. Our national security depends on water systems not only taking security seriously but also immediately reporting any incidents and working with our investigators to address them while protecting the public.” The joint cybersecurity advisory includes information to help water systems identify specific vulnerabilities that are being exploited and take concrete steps to strengthen cyber resilience. It also

Kyndryl Foundation Expands Grants to 13 Countries, Deepens Support for <b>Cybersecurity</b> ...

NEW YORK, April 7, 2026 /PRNewswire/ -- Kyndryl Foundation, the philanthropic arm of Kyndryl, today announced its third-year global grant recipients, expanding the program to 13 countries – introducing France and Mexico – and reinforcing its long-term commitment to advancing cybersecurity and artificial intelligence (AI) skills development worldwide. The latest Kyndryl Foundation grant portfolio continues to support existing, multi-year grantees while welcoming new organizations that emphasize cybersecurity and AI training, digital inclusion, and workforce readiness. Kyndryl Foundation is focused on supporting programs that build in-demand digital skills and connect people to meaningful employment opportunities through independent, nonprofit-led initiatives, with an anticipated impact on well over 100,000 people worldwide. "As we enter the third year of Kyndryl Foundation grants program, our focus is on deepening impact and strengthening digital skills development in the communities in which we operate," said Una Pulizzi, President of Kyndryl Foundation and Global Head of Corporate Affairs at Kyndryl. "We are proud to help create more pathways for individuals to enter meaningful careers in cybersecurity and AI." Strengthening Global Skills Commitments Kyndryl Foundation grants will fund programs that deliver practical, hands‑on training, along with mentoring and job‑readiness support – delivered and administered by independent nonprofit organizations preparing participants for career opportunities in the digital economy. Several of these programs directly support government-led skills pledges, contributing to national and regional workforce initiatives. The following nonprofit organizations will receive Kyndryl Foundation's third-year grants: - Article 1 (France – new market) supports youth employability by integrating STEM (science, technology, engineering, and mathematics). The Kyndryl Foundation grant will help Article 1 incorporate AI‑powered tools into its mentoring platform and expand AI‑literacy training for 4,000 students. It will also deliver national and regional AI workshops and events for 200 participants, train 120 mentors, and provide enhanced mentoring. - CLACK (Japan) will offer

BCEAO, HEC Paris launch banking training programme addressing AI and <b>cybersecurity</b> risks

The Central Bank of West African States (BCEAO) on Thursday launched a new cohort of its CEMSTRAT 1 and CEMSTRAT 2 executive banking certification programmes. The initiative is delivered by the West African Banking Training and Research Centre (COFEB) in partnership with HEC Paris. As part of the launch, COFEB hosted an international online masterclass on the role of artificial intelligence (AI) in banking cybersecurity. The session, titled “Artificial Intelligence and Banking Cybersecurity: Operationalizing a Dual Transformation,” was led by Marc Israel, a specialist in digital transformation and cybersecurity and founder of Aetheis, a firm focused on AI applications in Africa. AI adoption accelerates, but risks intensify Israel said AI is becoming a key competitive tool for banks, with growing applications in fraud detection, risk analysis and customer relationship management. However, he warned that the same technologies are being used by cybercriminals to enhance the sophistication of attacks. This is increasing the risk of financial losses linked to security breaches, service disruptions and loss of customer trust. Fernand Aboutou, adviser to the director general of COFEB, said the banking sector is increasingly exposed to cyberattacks due to the value of its assets, the sensitivity of the data it holds and its systemic role in the economy. While AI improves fraud detection and automates incident response, it also equips attackers with more effective tools, raising the success rate of cyber intrusions, he added. The BCEAO and COFEB make one point clear. Digital transformation in banking cannot be pursued without robust cybersecurity frameworks. A pragmatic approach to implementation Israel outlined a step-by-step approach for banks seeking to integrate AI while managing cybersecurity risks. The first step is to assess IT maturity, including identifying vulnerabilities, mapping the attack surface and gaining a clear understanding of data systems. This process needs to be conducted

Ambulances diverted, computers offline as Brockton Hospital deals with '<b>cybersecurity</b> incident'

BROCKTON, Mass. — A cybersecurity incident has taken Brockton Hospital offline and ambulances are being diverted on Monday. A spokesperson with Signature Healthcare told Boston 25 News that the cybersecurity incident has forced the hospital to initiate “downtime procedures,” which means they are using paper - not computers- to document patient information. “Upon identifying suspicious activity within a portion of our network, we immediately activated our incident response protocols,” a statement from Signature Healthcare said. Inpatient and walk-in emergency services are still open and surgeries and procedures are still proceeding as scheduled at this time but hospital officials say ambulances are being diverted to other locations. Chemotherapy infusion services for cancer patients on Tuesday have also been cancelled. The hospital says patients should call the Greene Cancer Center to reschedule their treatments. “We appreciate everyone’s patience as we deal with this unfortunate situation,” a statement from Signature Healthcare said. The hospital’s retail pharmacies at 110 Liberty Street, Brockton and 1 Donalds Way, East Bridgewater, will also be closed on Tuesday. This is a developing story. Check back for updates as more information becomes available. Download the FREE Boston 25 News app for breaking news alerts. Follow Boston 25 News on Facebook and Twitter. | Watch Boston 25 News NOW ©2026 Cox Media Group

Cover all the safety bases during <b>Cybersecurity</b> Awareness Month

By downloading Emory news media, you agree to the following terms of use: Creative Commons Attribution-NoDerivatives 4.0 International Public License By exercising the Licensed Rights (defined below), You accept and agree to be bound by the terms and conditions of this Creative Commons Attribution-NoDerivatives 4.0 International Public License ("Public License"). To the extent this Public License may be interpreted as a contract, You are granted the Licensed Rights in consideration of Your acceptance of these terms and conditions, and the Licensor grants You such rights in consideration of benefits the Licensor receives from making the Licensed Material available under these terms and conditions. Section 1 – Definitions. - Adapted Material means material subject to Copyright and Similar Rights that is derived from or based upon the Licensed Material and in which the Licensed Material is translated, altered, arranged, transformed, or otherwise modified in a manner requiring permission under the Copyright and Similar Rights held by the Licensor. For purposes of this Public License, where the Licensed Material is a musical work, performance, or sound recording, Adapted Material is always produced where the Licensed Material is synched in timed relation with a moving image. - Copyright and Similar Rights means copyright and/or similar rights closely related to copyright including, without limitation, performance, broadcast, sound recording, and Sui Generis Database Rights, without regard to how the rights are labeled or categorized. For purposes of this Public License, the rights specified in Section 2(b)(1)-(2) are not Copyright and Similar Rights. - Effective Technological Measures means those measures that, in the absence of proper authority, may not be circumvented under laws fulfilling obligations under Article 11 of the WIPO Copyright Treaty adopted on December 20, 1996, and/or similar international agreements. - Exceptions and Limitations means fair use, fair dealing, and/or any other exception or

<b>Cybersecurity</b> incident affects some services at Brockton hospital

Ambulances were being diverted from Signature Healthcare Brockton Hospital Monday as the Massachusetts facility dealt with a cybersecurity incident. But other services continued amid the investigation into the suspicious activity affected some of the Signature Healthcare information systems, according to a statement. Stream NBC10 Boston news for free, 24/7, wherever you are. Emergency services for walk-ins, inpatient services, surgeries and some procedures were still ongoing on Monday, and urgent care and ambulatory physician appointments were expected to continue Tuesday, though potentially with delays after the hospital moved to what it called "down-time procedures to ensure high-quality patient care and safety." Chemotherapy infusions at the Greene Cancer Center were canceled for Tuesday, and the hospital's Brockton and East Bridgewater pharmacies were set to be closed on Tuesday as well.

Ambulance traffic diverted, treatments canceled amid <b>cybersecurity</b> incident at Brockton Hospital

BROCKTON, MASS. (WHDH) - Signature Healthcare Brockton Hospital is responding to a cybersecurity incident that has affected certain information systems within their health system, the company said Monday. Signature Healthcare said it identified suspicious activity in a portion of their network, and activated incident response protocols. In a statement, Signature Healthcare said, “We moved to down-time procedures to ensure high-quality patient care and safety. We are working with outside resources to help us investigate the incident and restore operations as quickly as possible.” Signature Healthcare said so far, there is no indication that any data has been compromised as crews work to restore systems. “The hospital is a victim of a crime, a cybersecurity incident means that they were hacked,” said Robert Siciliano, a cybersecurity consultant. “Money is generally the motivation of most cybersecurity breaches we see today. Organized crime has taken cybersecurity as one of their primary methods of doing business, so to speak. They are making billions and billions of dollars a year.” Ambulance traffic is being diverted as the issue persists. The company said inpatient and walk-in emergency services remain open, and surgeries and procedures such as endoscopy are continuing as scheduled. Signature Healthcare said chemotherapy infusion services for cancer patients are cancelled on Tuesday, and patients should call the Greene Cancer Center to reschedule their treatments. The company’s retail pharmacies at 110 Liberty Street, Brockton and 1 Donalds Way, East Bridgewater will also be closed on Tuesday. It said ambulatory physician practices and urgent care practices will be open Tuesday, but patients may experience some delays. Siciliano said protecting patients is the most important thing. “By moving to paper, they are successfully managing the digital health of their employees to ensure that despite the technical friction, that patient safety remains the one variable that isn’t compromised,”

New <b>cybersecurity</b> controls to boost digital protection | Kuwait Times Newspaper

KUWAIT: Kuwait’s National Cybersecurity Center said the newly issued national cybersecurity core controls will enhance institutional cyber maturity, improve Kuwait’s global rankings in specialized cybersecurity indices, and strengthen protection of the country’s digital space. The center explained that the controls establish a unified national baseline of cybersecurity requirements for relevant entities, aimed at protecting systems, services, data and technical assets, while enhancing readiness to face cyber threats and risks. It added that publication of the resolution represents a key step toward a clear regulatory framework that supports business continuity, safeguards critical services and boosts confidence in the digital environment, contributing to a secure and stable cyberspace. The controls are based on international best practices while taking into account Kuwait’s regulatory and operational context, balancing global standards with local needs and providing a practical, scalable foundation for entities to build upon. The decision also strengthens accountability by defining roles and responsibilities, supporting asset inventory and monitoring, implementing appropriate safeguards, improving incident response readiness and raising cybersecurity awareness across institutions. — KUNA

Brockton hospital hit by <b>cybersecurity</b> incident, services affected

Signature Healthcare hit by cybersecurity incident, services affected A hospital in Brockton, Massachusetts, said a cybersecurity incident is affecting some systems, with ambulance traffic diverted and some services disrupted. Signature Healthcare and Signature Healthcare Brockton Hospital said they were responding to a cybersecurity incident affecting certain information systems. The facility said emergency and inpatient services remain open, but ambulance traffic was being diverted. Surgeries and procedures, such as endoscopy, are continuing as scheduled. "Downtime procedures have been activated, and we are working with external partners to investigate and restore operations as quickly as possible," the medical facility said in a statement. One father said his family had a stressful day at the hospital when he took his daughter in to the emergency department and was told that the digital systems were down. "It definitely didn't feel normal, considering that I had been to the ER with her previously," he said. "It feels like the medical system is at its breaking point." What services are affected: The facility said chemotherapy infusion services for Tuesday, April 7, are canceled. Patients should contact the Greene Cancer Center to reschedule. Ambulatory practices and urgent care will remain open on April 7, with possible delays. Retail pharmacies at 110 Liberty Street, Brockton and 1 Donalds Way, East Bridgewater are closed. The hospital is diverting ambulance traffic, and surgeries and procedures are continuing as scheduled.

New York Local Governments Get $10.5M in Federal Cyber Grants

This week, Gov. Kathy Hochul announced $10.5 million in grants awarded in New York through the federal Homeland Security program. Included in that funding are FY2023 and FY2024 grants that will be used for equipment and training to enhance preparedness, protect critical infrastructure, and advance cybersecurity capabilities. “My number one priority is public safety and ensuring that local municipalities have the support necessary to protect New Yorkers when threats emerge,” Gov. Kathy Hochul said in a statement Wednesday. “With these grants, we are directly investing in the teams who defend New York's critical infrastructure from physical and cyber threats and respond when emergencies strike — ensuring a secure New York ahead of this summer's events." Included in the list of various grant programs this week was funding for the Hazardous Materials Targeted Grant Program, of which Warren County won just over $246,000. Warren County Director of Public Affairs Don Lehman said that the funding is going to be used by the seven-county regional Adirondack Hazardous Materials Consortium to be able to maintain equipment and materials the consortium uses. This will include the testing of equipment and the replacement of expired materials that are used for hazardous material spill response. The counties involved in this consortium include Warren, Washington, Essex, Hamilton, Clinton, Franklin and St. Lawrence. Lehman said that a significant amount of the consortium’s equipment and materials are housed at the Warren County Municipal Center and overseen by Warren County’s Hazardous Materials coordinator, James Schrammel, who is assigned to the Warren County Office of Emergency Services. Another area of grant awards in this week's announcement includes funding through the Cybersecurity Grant Program. Washington County was one of 18 grantees and will receive $50,000 in funding through the program. This program provided funding for municipalities to be able to enhance their

Maine House advances McCabe bill to strengthen <b>cybersecurity</b> at Maine hospitals

A press release on April 6, 2026 from Maine House Democrats: On Thursday, the Maine House voted unanimously to advance a bill from Rep. Julie McCabe, D-Lewiston, that would help prevent cybersecurity attacks on Maine hospitals and ensure continuity of patient care when future cyberattacks occur. As amended, LD 2103 would require Maine hospitals to adopt a cybersecurity plan consistent with best practices established by the U.S. Department of Homeland Security, the Cybersecurity and Infrastructure Security Agency, and other national organizations. The plan must include provisions for hospitals to ensure the timely notification of law enforcement and state regulators if an attack occurs, establish backup communications systems and implement annual training for employees. “Cyberattacks pose a serious risk to our already-fragile health care system,” said McCabe. “We’ve already seen how a cyberattack can impact Maine hospitals and leave patients in dire straits. This legislation will help ensure that our hospitals are prepared to deal with these types of incidents, respond promptly and effectively to patient needs, and protect sensitive information.” The bill was born out of two separate cyber-incidents last spring, impacting five hospitals across Maine. The cyberattacks crippled basic communication services, exposed serious and wide-ranging breakdowns in hospitals’ protocols and threatened patient care for weeks — including both preventative care and care for cancer patients. The five Maine hospitals impacted by these cyberattacks were Covenant Health’s St. Mary’s Hospital in Lewiston, St. Joseph’s Hospital in Bangor and Central Maine Medical Center’s hospitals in Lewiston, Bridgton and Rumford. More than 400,000 people, almost one-third of the state’s residents, were put at risk. The bill faces further votes in the House and Senate in the coming days.