On 27 October 2026, an audience of government legal advisers, other international law practitioners and academics attended the 11th annual Freshfields’ Public International Law Seminar.
The topic of this year’s seminar was “Due Diligence in International Law: the Environment, Human Rights and Cybersecurity.”
Over the course of an hour-long discussion, the speakers explored the legal character, scope and content of due diligence in international law, focusing on its application to transboundary environmental harm and climate change, the protection of human rights, and cyber operations.
Climate change and a variable standard: whether the recent climate change advisory opinions from the International Court of Justice, the International Tribunal for the Law of the Sea, and the Inter-American Court of Human Rights signal a stricter standard for due diligence in other areas of international law.
Freshfields’ Public International Law Seminar is held every year as a side event of the Sixth Committee (Legal) of the United Nations General Assembly.
Nov 4, 2026 · via freshfields.com
Google, Japanese police and five companies have detected, exposed and shut down a global botnet.
The network, called XCPE, comprised more than 1.3 million Android devices.
Videostrong is now banned from building certified Android devices.
Devices affected worldwide Security provider Trend AI counted about 1.47 million infected devices from June to early October.
What operators should check now Network operators and integrators using low-cost Android boxes or white-label hardware should check first.
Nov 4, 2026 · via invidis.com
On ExploitGym, which tests whether models can exploit a specified vulnerability, GPT‑6 Cyber scores 48.5%, up from 32.1% for GPT‑5.6 Cyber.
Advancing frontier cyber capabilities GPT‑6 Cyber is a major step up from GPT‑5.6 Cyber and outperforms GPT‑6 Astra on most cyber tasks, even when Astra does not refuse the request.
GPT‑6 Cyber shows a step-change improvement over GPT‑5.6 Cyber on this evaluation.
We’re also introducing a new group within Daybreak Red (Daybreak Red for Critical Infrastructure) for approved critical infrastructure defenders, which gives them permissions to conduct authorized testing of critical systems while retaining safeguards against model misalignment.
We will progressively expand access to all Daybreak Red customers soon, and are also making GPT‑5.6 Cyber available to all Daybreak Red customers.
Nov 4, 2026 · via openai.com
Michigan State University is actively monitoring and investigating a potential cybersecurity threat, according to a campuswide email sent by MSU IT.
The ransomware gang BYOD claims to be responsible for the cybersecurity incident, according to The Record.
BYOD added MSU to its site on Monday, claiming it stole data from 1.3 million current and former MSU students.
There’s no confirmation that the current potential cybersecurity threat is linked to last month's incident, Guerrant said.
Discussion Share and discuss “MSU monitors cybersecurity threat after hackers claim responsibility” on social media.
Nov 4, 2026 · via statenews.com
While you can easily bring holiday cheer to others by shopping online, there are cybersecurity precautions you should take to protect yourself from fraud that could turn your joyous holiday season into a yuletide nightmare.
Everyone wants digital freedom, the ability to browse and stream without risks to personal information and privacy.
If an email, text message or online request seems unusual, take a moment to stop and think before responding.
Much like having a dedicated lane on a larger highway, fiber networks can deliver more consistent speeds and a better online experience.
>> Use credit cards for online shopping.
Nov 4, 2026 · via staradvertiser.com
To this end, we have compiled some key advice from our Information Security Office (ISO).
Keep an eye on your data Data hygiene practices are important for administrators to maintain the integrity of the information they collect and store.
A couple quick things you can do right now to improve your data hygiene: Do an audit of the apps on your phone.
To combat the chances of your family being taken advantage of by these kinds of attacks, information security analyst Patrick Hawk said.
These are only a few of the ways to improve your cybersecurity posture when it comes to AI.
Nov 4, 2026 · via miamioh.edu
Michigan State University is actively monitoring and investigating a potential cybersecurity threat.
MSU IT, our cyber security partners, law enforcement and the State of Michigan are working together to take the appropriate steps to protect the university, its information, and the continued delivery of campus services.
The investigation is ongoing, and MSU has not determined that any personal information was compromised.
There are no specific actions our campus community needs to take currently; however, cybersecurity is a shared responsibility.
We encourage students, faculty and staff to be vigilant and follow these best practices.
Nov 3, 2026 · via msutoday.msu.edu
Cybersecurity organizations increasingly rely on artificial intelligence (AI) to spot vulnerabilities and conduct threat analyses, and the role of AI in identifying risks and patching affected code was further cemented by the recent discovery of the “PHP2Shell” vulnerability.
The PHP vulnerability, classified as a high-severity threat with a score of 9.2 out of 10 on the Common Vulnerability Scoring System (CVSS), allowed attackers to compromise web servers by executing code remotely.
Kubra Kalkan Cakmakci, an associate professor of computer engineering at Istanbul-based Ozyegin University, told Anadolu that AI accelerates software debugging and helps evaluate millions of potential errors simultaneously.
“AI was able to analyze multiple layers quickly at the same time when detecting the PHP2Shell vulnerability, while humans can only work on and think through few steps at a time,” she said.
Sensoy stated that AI does not identify such vulnerabilities on its own, noting that initiatives like Patch the Planet have human experts guide the technology to potential weak spots.
Nov 3, 2026 · via aa.com.tr
AI agents are gaining access to business applications, sensitive data and infrastructure, forcing security teams to reconsider access controls designed primarily for employees and managed devices.
New research from the IDC InfoBrief AI Drives New Access Control Requirements, sponsored by Portnox, found that three forms of AI agent access ranked among enterprise buyers’ leading access control priorities for 2026.
“AI usage and access” ranked first among zero-trust priorities at 14%, followed by “AI infrastructure” at 13%.
If that still depends on someone reviewing an alert and opening a ticket, an AI agent can keep working while the security team catches up.
Security teams must apply access rules consistently across these environments as AI agents move between applications, data and infrastructure.
Nov 3, 2026 · via cybersecurity-insiders.com
Business continuity is where that ownership question lands hardest, because it’s the function actually accountable for keeping the business running once an attack succeeds.
Many organizations are resolving the ambiguity by pushing that accountability onto their CISOs, expecting them to own business continuity and disaster recovery alongside incident response.
The expansion is happening, and boards are right to expect more from security leaders than incident response.
The mandate is better spent building a detailed picture of business impact and pushing the organization toward shared visibility and defined decision rights across functions.
That shift becomes obvious in the first hour of an incident, when a board wants answers about business impact, financial exposure, and key priorities.
Nov 3, 2026 · via securitymagazine.com
Cloud Security Engineer Booz Allen Hamilton | USA | On-site – View job details As a Cloud Security Engineer, you will support security documentation, validation, assessment, and accreditation to ensure IT systems meet information assurance requirements.
DevSecOps Silentium Defence | Australia | On-site – View job details As a DevSecOps, you will build and maintain secure CI/CD pipelines and automated infrastructure using Terraform and Ansible.
Networks Cyber Security Engineer NEC Software Solutions | United Kingdom | Hybrid – View job details As a Networks Cyber Security Engineer, you will protect networks through vulnerability scanning, patch management, and remediation.
You will investigate alerts, respond to incidents, support threat hunting, and analyze Cisco and Palo Alto firewalls.
Senior Embedded Engineer, Cybersecurity Caterpillar | USA | On-site – View job details As a Senior Embedded Engineer, Cybersecurity, you will lead cybersecurity objectives, compliance, and implementation during New Product Introduction.
Nov 3, 2026 · via helpnetsecurity.com
She said Tennessee has used federal grant funding to secure nearly 90,000 endpoints across local government networks, giving many communities access to cybersecurity capabilities they otherwise could not afford.
Florida CIO Warren Sponholtz said centralized cybersecurity services help governments achieve economies of scale while expanding access to enterprise-grade protections.
They also emphasized the importance of continued investment in cyber workforce development, threat intelligence sharing and AI preparedness.
Top Digital Counties The Center for Digital Government and the National Association of Counties recently announced the top-performing counties for leveraging artificial intelligence, cybersecurity investments and more to improve government services.
Here are the first-place winners from the 2026 Digital Counties Survey: Orange County, Fla. (Population of 1,000,000 or more) Prince William County, Va. (Population 500,000 – 999,999) County of Marin, Calif. (Population 250,000 – 499,999) County of Pitt, N.C. (Population 150,000 – 249,999) County of York, Va. (Population Less than 150,000)
Nov 2, 2026 · via statetechmagazine.com
A new service called Knocknoc is being added to many sites and services as an authenticated access gateway.
For smaller services, users may need to visit the new Knocknoc portal before they can visit other services from off campus.
“This portal functions very similar to a VPN, in that there’s a period of time where users can visit services from off-campus before having to reauthorize for access,” Tripp said.
These new measures have already been installed on sites such as DukeHub, which is used for student registration.
Many other broad services will be adopting the new security measures by January 2027.
Nov 2, 2026 · via today.duke.edu
Stritt previously led EMEA channel organizations at SentinelOne and Rubrik, and the EMEA global systems integrator business at Palo Alto Networks.
As CrowdStrike accelerates Falcon platform adoption across Europe, Roland brings the leadership and commercial expertise to drive our next phase of growth."
"Europe's cybersecurity market is at an inflection point, and partners have an enormous opportunity to lead what's next," said Roland Stritt, vice president, Europe alliances at CrowdStrike.
CrowdStrike's Partner Ecosystem Drives Global Growth Stritt joins CrowdStrike amid significant growth across its global partner ecosystem, including: Global Systems Integrators: CrowdStrike's GSI business grew nearly 50% year-over-year in Q2 FY27, driven by demand for next-gen SIEM transformations and vulnerability management.
CrowdStrike and CrowdStrike Falcon are marks owned by CrowdStrike, Inc. and are registered in the United States and other countries.
Nov 2, 2026 · via ca.finance.yahoo.com
Several hacks on government infrastructure underscored growing worry over the use of AI to undermine cybersecurity.
Both Ukraine and Russia said their emergency alert apps were breached and used to send false warnings of missile and nuclear attacks: “It’s the first time it’s happening to an official Ukrainian information app,” a researcher told the BBC, “but I suspect it won’t be the last.”
Germany, meanwhile, said a cyberattack was carried out on lawmakers’ and officials’ phones; though a minister said it was not clear if AI was used, “it’s something that naturally worries us.”
And WIRED reported that a Pentagon defense contractor’s AI agent operated within a government network for months before it was discovered and the vulnerability patched.
Nov 2, 2026 · via semafor.com
But new technologies also carry risks, including the potential for bad actors to exploit them for fraudulent purposes.
The Economist magazine published an article titled “The AI boom meets a new kind of crypto scam” about AI and payments.
As more business activity moves online, the opportunities created by new technologies will continue to grow, but so will the risks.
Staying informed, recognizing potential threats and taking precautions are essential to protecting yourself and your business.
Justin Golden is the co-founder and chief operating officer of Golden Technology Services Inc., a Connecticut-based IT services company.
Nov 2, 2026 · via hartfordbusiness.com
The approximately four-month prototype will demonstrate a vendor-agnostic, Zero Trust-aligned approach to securing operational technology, including facility-related control systems (FRCS) that support critical installation functions such as building automation and utilities.
The effort will focus on reducing cyber risk while maintaining operational continuity and avoiding unnecessary replacement of existing control system infrastructure.
“We’re proud to bring our experience in OT cybersecurity, mission assurance and critical infrastructure to an effort focused on protecting the systems Army installations depend on every day.”
“ICED-603 gives us an opportunity to demonstrate how the Army can strengthen these systems based on mission risk while avoiding unnecessary disruption and vendor lock-in.”
The award expands RMC’s work in OT cybersecurity into Army installation operations, building on the company’s experience securing critical infrastructure and control systems across government and other critical mission environments.
Nov 2, 2026 · via industrialcyber.co
The Florida Bar will present a November 5 webinar examining cybersecurity risks facing legal aid organizations and strategies for managing them.
“Cybersecurity for Legal Aid: Managing Cybersecurity Risk: Avoidance to Acceptance” will run from noon to 1 p.m. Attendees will receive 1.0 General and 1.0 Technology CLE credit.
Topics will include an overview of cybersecurity risk and the organization, risk management strategies, and resources to help guide organizations.
Panelists include Stan Kreydin, managing director of Cyber Risk & Technology Advisory at LCG Advisors; Joseph J. Lazzarotti, an attorney with Jackson Lewis; and Rich Gatz, vice president and head of cyber claims at Arch Insurance Group.
Jon S. Pridgeon, a staff attorney with Jacksonville Area Legal Aid and co-chair of the series, will moderate.
Nov 2, 2026 · via floridabar.org
Suspected cyberattacks have triggered temperatures to rise in grocery store refrigeration systems in a growing number of countries across Europe.
Overnight temperature spikes were recorded in stores in Belgium, Estonia, Ireland, Luxembourg and Sweden.
On Monday, retailers and authorities pointed to alleged cyberattacks that underscored the vulnerability of systems that once largely operated mechanically.
SuperValu, Ireland’s third-largest supermarket chain, said a specific model of refrigeration systems has been affected by a “cyber incident” at 13 of its 223 stores.
The Belga news agency reported overnight temperature increases at dozens of Ahold Delhaize stores in Belgium and Luxembourg.
Nov 2, 2026 · via aljazeera.com
Connecticut is launching a new Defense CyberSecure Program, with an initial $2 million to help fund a statewide initiative designed to help defense manufacturers strengthen their cybersecurity capabilities.
Connecticut is home to more than 900 defense manufacturers, making up a critical share of the state’s economy.
The fund was developed with input from the Connecticut Defense Cybersecurity Advisory Council, consisting of local government, national cybersecurity experts and Connecticut-based associations, according to officials.
“Connecticut’s defense manufacturers play a vital role in both our national security and our state’s economy,” said Kirti Patel, DECD deputy commissioner and Connecticut chief manufacturing officer.
Connecticut defense manufacturers can learn more about the program and apply to participate at ccat.us/defensecybersecure.
Nov 2, 2026 · via courant.com