No-frills tech news

Arctic Wolf CEO: AI Has Changed Cybersecurity Forever

Arctic Wolf CEO Nick Schneider joins the Twin Cities Business Show to talk about how artificial intelligence has fundamentally changed cybersecurity. According to Schneider, we are already past the point where humans can defend against agents, and need agents of their own to keep themselves safe. Four key quotes from our interview: “Humans really aren’t able to defend against sophisticated machines, and machines are needed to defend against machines.” We also talk about Arctic Wolf’s agentic security operations platform, how AI agents work alongside humans, the company’s growth to roughly 12,000 customers, and whether Arctic Wolf is headed for an IPO (hint: it sounds like it). We also discuss Schneider’s career at Compellent and Code42, why he joined Arctic Wolf, what makes Minnesota a strong — but imperfect — place to build technology companies, and his recent decision to join the board of Yardstik.

OT Cyber Coalition calls on CISA to issue binding directive establishing federal OT cybersecurity requirements

The Operational Technology Cybersecurity Coalition (OTCC) called on the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to issue a binding operational directive establishing mandatory, enforceable cybersecurity requirements for operational technology (OT) across Federal Civilian Executive Branch (FCEB) agencies. OTCC said existing directives address some OT security requirements but do not establish consistent minimum practices across federal agencies, limiting CISA’s visibility into their security posture. CISA has folded some OT requirements into earlier directives, but no BOD yet sets consistent minimum security practices for federal OT. The OT Cyber Coalition argues that CISA should issue a binding operational directive focused solely on operational technology security. The Coalition recommends that CISA establish an OT BOD requiring Federal Civilian Executive Branch entities with OT systems and assets to achieve specific cybersecurity goals.

Cybersecurity News: Agents vs. Wikipedia, South Korean bank hacks, ASOS breached

In today’s cybersecurity news… Agents trying to compromise Wikipedia tools The Wikimedia Foundation discovered activity by rogue OpenAI agents attempting to compromise its public note-taking tool, Etherpad, as well as edit Wikipedia pages. (The Hacker News) South Korea claims agents were used in bank hacks South Korean President Lee Jae Myung said an initial investigation into recent bank hacks show evidence that they were performed by AI agents. Authorities believe the Chinese cybersecurity tool Artex AI was used to access bank systems. (The Record) ASOS confirms data breach It’s rare for a breach notification to come before a company confirms a breach occurred. (Financial Times, Bleeping Computer) Contractor fired over FBI data breach Reuters sources say that the FBI terminated an Accenture contractor over their role in a data breach that exposed information on thousands of employees.

Cybersecurity webinar features industry expert Stephen Boyer, Oct. 15

From: Division of Information Technology In celebration of National Cybersecurity Awareness Month, the IT Security Office within the Division of Information Technology is hosting a conversation with Stephen Boyer, co-founder and chief innovation officer at Bitsight, a global leader in cyber risk intelligence. The webinar, titled “Life After Mythos: How to Build Resilience as Exploit Windows Collapse” will take place Thursday, Oct. 15 from 11 a.m. - Noon EDT. After the presentation, Boyer will take questions from attendees. The topic will be especially valuable for students preparing for careers in cybersecurity through majors such as Computer Science, Computer Engineering, Electrical Engineering, and Business Information Technology, and current cybersecurity and information technology professionals across Virginia Tech and the region. Add this event to your calendar and plan to join via Zoom Webinar: https://virginiatech.zoom.us/j/84153806013

Cybersecurity Is a Team Sport. Let’s Score It Like One.

And just beyond the fall sports calendar is cybersecurity’s Super Bowl in October: Cybersecurity Awareness Month. Cybersecurity awareness can be transformative when approached the same way. Turn Every Employee Into Part of the Defensive Unit Calling cybersecurity a team sport does not mean transferring responsibility from security professionals to employees. Make October the Start of the Season Cybersecurity Awareness Month is often treated like a championship game. That’s how human performance turns into cyber performance, and how a collection of employees becomes a winning defensive team.

RapidFort and SpaceWERX Sign Agreement on Space Cybersecurity

Insider Brief RapidFort and SpaceWERX signed a Cooperative Research and Development Agreement to develop and evaluate cybersecurity capabilities for U.S. Space Force systems. The collaboration will address AI software vulnerability risks, post-quantum encryption risks, cyber readiness and faster Authority to Operate (ATO) processes. The CRADA will connect SpaceWERX operational and acquisition teams with RapidFort’s software and open-source ecosystem to test and refine commercial cybersecurity solutions. Under the terms of the CRADA, industry organizations will share technical expertise, infrastructure, and operational insights to accelerate commercialization and cybersecurity mission readiness for space systems. This is especially important for AI software, which is now a national Department of War priority.

What Whole-of-State Cybersecurity Looks Like in Maine

Maine’s whole-of-state cybersecurity strategy is focused on the edge. That means cities, schools and other organizations where users need to be protected online but may not be able to afford top-of-the-line cybersecurity systems. “It’s that first line of defense for any network,” said Maine CISO Charlie Rote at the National Association of State Chief Information Officers (NASCIO) Annual Conference in September. Maine has leaned on the State and Local Cybersecurity Grant Program to fund its efforts, which Rote explained focus a lot on education and training. We're predominantly leveraging the state and local grant program, so we've developed our planning committee, we've written our security plan.

CREO Brings AI, Health, National Defense Into Focus for Cybersecurity Awareness Month

The university’s Center of Excellence in Cybersecurity Research, Education and Outreach (CREO) is marking Cybersecurity Awareness Month with a speaker series that runs through Oct. 29. Monday, Oct. 19, 11 a.m.-1 p.m. Kenneth Sherin, AgDefenders / NC PaCE Topic to be announced. Thursday, Oct. 22, 1:30-3 p.m. “Can AI Hear Your Voice? Cybersecurity Awareness Month was established in 2004 by the U.S. Department of Homeland Security and the National Cyber Security Alliance to help Americans stay safer online. CREO has observed the month every October since 2020 and partners with the Division of Information Technology Services on campus-wide awareness activities.

Don't trust AI agents, warns the CEO of cybersecurity powerhouse

Companies and the average person are putting too much trust in AI agents. "Don't trust AI agents," Zscaler (ZS) founder and CEO Jay Chaudhry said on Yahoo Finance's Sozzi Unleashed. Zscaler is a $33.9 billion market cap cybersecurity giant working overtime to protect companies from rogue AI agents. If not properly monitored and centrally controlled, AI agents can make unplanned mistakes, reveal sensitive customer information, and invite a cyberattack. Brian Sozzi is Yahoo Finance's Executive Editor, host of the Sozzi Unleashed morning show, the 'Power Players With Brian Sozzi' podcast and a member of Yahoo Finance's editorial leadership team.

DOE launches $100 million cybersecurity assistance initiative for rural, municipal and small electric utilities

This $100 million funding opportunity is available through CESER’s Rural and Municipal Utility Cybersecurity (RMUC) Advanced Cybersecurity Technical Assistance (TA) Partnership Intermediary Agreement (PIA) and requires applicants to deliver cybersecurity technical assistance, technologies, services, threat information sharing, and other support to eligible electric utilities. “Resource-constrained operators face unique challenges in accessing cybersecurity tools, expertise, and information,” said CESER director Andrew McClure. “CESER is committed to closing the capability gap for small and rural operators by providing hands-on technical support, threat information sharing, and system hardening resources. Awardees must demonstrate formal partnerships with no fewer than six qualifying electric utilities and the capability to deliver meaningful cybersecurity improvements across participating utilities. These improvements may include, but are not limited to cybersecurity assessments and planning, workforce training and certification, exercises and readiness, implementation and integration of cybersecurity tools and technologies, verification and validation, and cybersecurity threat information-sharing activities.

Princeton says cybersecurity incident exposed personal data

Princeton officials now say confidential and personal information was taken from city systems during a cybersecurity incident reported in September. The City of Princeton now says confidential and personally identifiable information was taken from its systems during a cybersecurity incident first reported in September. “On October 5, the City identified that information was exfiltrated from City systems,” the city said. Officials said the information includes confidential information and personally identifiable information, or PII. Princeton is working with cybersecurity professionals to determine the full scope of the incident, including what information was involved and which individuals may have been affected.

Making Cybersecurity Everyone's Business: Moving Cyber Preparedness Beyond the IT Department

Cybersecurity isn’t just about finding vulnerabilities. It’s about what district leaders do with what they learn. Cyber insurance and trusted incident response partners are essential to district cybersecurity. But when an incident occurs, district leaders still must make the operational decisions that keep schools running. The best time to practice those decisions is before a crisis—and to reinforce cybersecurity as a shared organizational responsibility.

Cybersecurity jobs available right now: October 6, 2026

Cybersecurity Engagement & Policy Specialist Commission for Communications Regulation | Ireland | Hybrid – View job details As a Cybersecurity Engagement & Policy Specialist, you will analyse cybersecurity policy and legislation, develop recommendations for ComReg leadership, and coordinate consultations, workshops, awareness campaigns, and stakeholder events. Get weekly updates on new cybersecurity job openings. Cybersecurity Engineer Reyes Holdings | USA | On-site – View job details As a Cybersecurity Engineer, you will design, implement, and manage security solutions, apply patches and code updates, and investigate incidents to identify root causes and corrective actions. Cybersecurity Technology Architect IV Astreya | USA | Remote – View job details As a Cybersecurity Technology Architect IV, you will develop cybersecurity architectures, strategies, and roadmaps that integrate AI, automation, and emerging technologies. Information Security Lead TCW | USA | Hybrid – No longer accepting applications As an Information Security Lead, you will lead the security team, turn strategy into daily operations, and report risks and performance to leadership.

Netherlands’s Quantum Strategy Sets 2035 Goals, Links Industry Growth to Cybersecurity

A new governmentwide quantum strategy sets a 2035 goal for technological leadership, greater independence from suppliers outside the European Union and resilience against quantum-related security threats. The strategy covers three fields, including quantum computing, quantum communication and quantum sensing. The strategy identifies the absence of developed markets for many quantum applications as a major obstacle to commercialization. The planned National Agency for Disruptive Innovation, known as NADI, could also support quantum development. Managing Autonomy and Public Risks The strategy’s pursuit of greater autonomy does not amount to a plan for a self-contained Dutch quantum industry.

Longhorns Strengthen Texas Cybersecurity From a New Home on Campus

In 2024, UT-RSOC began operating under UT Austin’s Information Security Office in partnership with the Texas Cyber Command. Funded by the State of Texas, UT-RSOC supports over 3,300 local institutions including school districts, municipalities, counties and public utilities. Timothy James “TJ” White, chief of the Texas Cyber Command, said the attack exposed a hard truth that remains true today. Along with the educational opportunities that come with working at UT-RSOC, students said making friends with other student employees is another perk. White said UT-RSOC students are fundamental in helping Texas develop world-class cyber capabilities.

Purdue University Northwest cybersecurity students earn unique digital evidence analysis experience with local law enforcement

The selected and recognized student interns include Julian Arceo, senior Cybersecurity major; Jaelysa Bracey, senior Computer Information Technology and Cybersecurity double major; Ryan DeBoer, senior Cybersecurity major; Nicole Floyd, senior Computer Information Technology and Cybersecurity double major; Paige Gora, senior Cybersecurity major; Michael Hathaway, senior Computer Information Technology and Cybersecurity double major; Ivan Mittelberger, senior Cybersecurity major; Antonio Soto, senior Cybersecurity major; and Taylor Thompson, Applied Artificial Intelligence master’s student. The Lake County HTCU, housed in the Gyte Building on the PNW Hammond campus, supports local law enforcement offices in the processing and analysis of digital evidence gathered through criminal investigations. The HTCU is led by Deputy Prosecuting Attorney Edgar Rodriguez of the Lake County Prosecutor’s Office. “Technology has become an increasingly important part of investigating and prosecuting criminal cases,” Lake County Prosecutor Bernard Carter said. “This partnership gives students valuable, real-world experience while allowing them to use their knowledge and skills in service to the people of Lake County.

Cybersecurity portal to fight bad guys open for business: NMFTA

Wilkens, in an interview on the sidelines of the NMFTA conference, said the group would like to see more volume. “One of the concerns we had is that we didn’t want people to feel like they’re kind of exposing themselves to, hey, this happened to our organization,” Wilkens said. The decision to have the information anonymous was made quickly in the process. Vetting process before publication Reports that come in about a cybersecurity attack are vetted by NMFTA before being published on the portal, Wilkens said. “Polling people, they want to get the information, but the problem is getting people to share their information back in to the portal,” Wilkens said.

Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity

The US Senate has passed the bipartisan Health Care Cybersecurity and Resilience Act, introduced by Senators Bill Cassidy, Maggie Hassan, Jon Cornyn, and Mark Warner. Having passed the Senate by unanimous consent, the Health Care Cybersecurity and Resilience Act now heads to the US House of Representatives for consideration. “Cyberattacks on our healthcare sector not only put patients’ sensitive health data at risk but can delay life-saving care. This bipartisan legislation ensures health institutions can safeguard Americans’ health data against increasing cyber threats,” claims Cassidy. Related: Millions Impacted Across Several US Healthcare Data Breaches Related: Data Breaches at Healthcare Organizations in Illinois and Texas Affect 600,000 Related: Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking

White House AI task force faces expertise, partnership challenges

Director of National Intelligence Jay Clayton, recently named Trump’s “AI czar,” will lead the task force. Focused on risk, but cyber expertise unclear Through the new task force, Trump administration officials and AI executives will “develop plans for responding to [AI]-enabled threats to our society,” according to a charter seen by The Wall Street Journal. The White House did not immediately respond to a request for comment on CISA’s role in the task force. Uneasy stakeholder relationships The task force faces significant challenges in trying to knit together a community of industry groups and companies capable of developing AI security recommendations together. Despite the collegial tone of the Sept. 29 meeting, the Trump administration still has a tense relationship with the AI industry.

Cybersecurity: trust is built through transparency, not perfection

Five years ago, a security incident at an enterprise software provider was met with unmitigated outrage. According to PwC’s Global Digital Trust Insights, 79% of surveyed organisations state that mandatory cyber incident reporting is essential to building stakeholder trust. Yet in corporate technology, enterprise risk management has spent decades trying to engineer an artificial state of perfection. Risk management is not the brake on corporate ambition. At scale, risk management is not a function that sits alongside the business; it is the very infrastructure through which growth occurs.