by Cara Ramer, Student Public Relations Writer After hours of defending simulated networks against coordinated cyberattacks, a team of Cedarville University students secured first place in one of two Midwest Divisions of the NCAE Cyber Games on Feb. 7, 2026 — and one member of the winning team has yet to graduate from high school. For Kieran Klukas, a high school senior from Westerville, Ohio, taking dual enrollment courses at Cedarville, competing in a collegiate-level cybersecurity competition was an unexpected opportunity. After attending the university’s summer cybersecurity camp, Klukas discovered a passion for cybersecurity and began pursuing the field academically. Klukas sought additional hands-on opportunities within Cedarville’s cybersecurity program, which ultimately led to his selection for the NCAE Cyber Games team. Dual enrollment senior excels in collegiate cybersecurity competition The competition follows a red team-blue team format in which industry professionals and graduate students attempt to breach the systems of competing teams. Participants must defend network infrastructure, maintain system uptime and respond to live attacks in a scenario designed to simulate real-world cybersecurity threats facing businesses, government agencies and critical infrastructure. NCAE Cyber Games: red team–blue team live-fire format Over seven hours, the competition operated as a live-fire exercise, with industry professionals deploying real exploits against each team’s systems. From the opening minutes, services were “catching on fire” as the red team exposed vulnerabilities across the machines. Klukas shifted rapidly between systems, patching weaknesses and shutting down access points as they appeared. By the final stretch, Cedarville was one of the only teams still operational, making it a primary target. Klukas spent the last hours of the competition jumping from service to service, eliminating threats and refusing to let their systems go dark. Cedarville winning team roster and majors Cedarville’s winning team included computer engineering, computer science and cyber operations
Mar 31, 2026 · via cedarville.edu
Chinese-speaking users are the target of an active campaign that uses typosquatted domains impersonating trusted software brands to deliver a previously undocumented remote access trojan named AtlasCross RAT. "The operation covers VPN clients, encrypted messengers, video conferencing tools, cryptocurrency trackers, and e-commerce applications, with eleven confirmed delivery domains impersonating brands including Surfshark VPN, Signal, Telegram, Zoom, Microsoft Teams, and others," Germany-based cybersecurity company Hexastrike said in a report published last week. The activity has been attributed to a Chinese cybercrime group called Silver Fox, which is also tracked as SwimSnake, The Great Thief of Valley (or Valley Thief), UTG-Q-1000, and Void Arachne. The discovery of AtlasCross RAT represents an evolution of the threat actor's arsenal from Gh0st RAT derivatives like ValleyRAT (aka Winos 4.0), Gh0stCringe, and HoldingHands RAT (aka Gh0stBins). The attack chains involve using bogus websites as lures to trick users into downloading ZIP archives containing an installer that drops a trojanized Autodesk binary along with the legitimate decoy application. The trojanized AutoDesk installer, in turn, launches a shellcode loader that decrypts an embedded Gh0st RAT configuration to extract the command-and-control (C2) details and then downloads a second-stage shellcode payload from "bifa668[.]com" over TCP on port 9899, ultimately leading to the execution of AtlasCross RAT in memory. The majority of fake websites were registered in a single day on October 27, 2025, indicating a deliberate approach behind the campaign. The list of confirmed malware delivery domains is listed below - - app-zoom.com (Zoom) - eyy-eyy.com (unknown) - kefubao-pc.com (KeFuBao, a Chinese customer service software for e-commerce) - quickq-quickq.com (QuickQ VPN) - signal-signal.com (Signal) - telegrtam.com.cn (Telegram) - trezor-trezor.com (Trezor) - ultraviewer-cn.com (UltraViewer) - wwtalk-app.com (WangWang) - www-surfshark.com (Surfshark VPN) - www-teams.com (Microsoft Teams) All identified installer packages have been found to carry the same stolen Extended Validation code-signing certificate
Mar 31, 2026 · via thehackernews.com
The analyst said that it does not view the code security tool as competition to any of the businesses it covers.
CRWD stock ended Friday’s trade nearly 8% lower, while OKTA shares declined more than 9%.
CRWD stock ended the day nearly 8% lower, while OKTA shares declined more than 9%.
Claude Code Security Anthropic said that its new feature would help security teams detect complex software vulnerabilities and suggest targeted fixes, strengthening defenses against emerging AI-based threats.
CRWD shares have declined more than 10% in the past year, while OKTA shares have dipped more than 21%.
Feb 20, 2026 · via stocktwits.com
The high-profile attacks on M&S and Jaguar Land Rover vividly demonstrate the dangers businesses face.
But a lack of clear data, and daunting software and insurance price hikes, mean a grown-up discussion on the ROI of cyber is long overdue.
by Robert Jeffery
Dec 2, 2025 · via incomms.com
When it opened in 1940, the Pennsylvania Turnpike was the nation’s first superhighway and hailed as an engineering marvel.
The Pennsylvania Turnpike Commission, which maintains the carriageway’s 565 miles for more than 500,000 daily travellers, is embracing modern digital technologies to enhance both customer service and safety.
In driving toward more strategic cyber Capabilities, the Commission focused on understanding the organisation’s key needs.
To make its new strategic approach to cyber even stronger, the Pennsylvania Turnpike Commission worked with Deloitte to put in Place new technologies and processes for cyber incident readiness, response and recovery (CIR3).
By working with Deloitte to bring more strategic cyber Capabilities across multiple areas of its business, the Pennsylvania Turnpike Commission has positioned itself to be an even more resilient enterprise as it continues to improve and innovate its historic highway.
Sep 1, 2024 · via deloitte.com
This is a Premium Article Join NAW to read the full article — plus access to research, data, and intelligence.
The NAW Professional Membership is $850/year for individuals.
It’s the fastest way to unlock this article — and everything else.
Unlock Premium Content >> Explore all membership options
Dec 18, 2023 · via naw.org
For the first time, an international cybersecurity challenge for women took place in Dublin earlier this summer.
ENISA directly supported the participation of the female Team Europe in the Women’s International Cybersecurity Challenge 2026 (WICC2026), in close partnership with the European Cybersecurity Competence Centre (ECCC) and the European Commission.
Next upcoming events The next European Cybersecurity Challenge will be hosted by Denmark next year.
About the European Cybersecurity Challenge (ECSC) The European Cybersecurity Challenge (ECSC) is an initiative supported by the European Union Agency for Cybersecurity (ENISA) and aims to enhance cybersecurity talent across Europe and connect high potentials with industry leading organisations.
About the International Cybersecurity Challenge (ICC) As a global Capture the Flag event (CTF), the International Cybersecurity Challenge (ICC) is designed to encourage the development of cybersecurity skills and to foster international cooperation.
Sep 19, 2022 · via enisa.europa.eu