No-frills tech news

Cybersecurity Awareness Month Week 3: Update your software – ITS Blog

Cybersecurity can feel complicated, but one of the simplest ways to protect yourself is by keeping your software and apps updated. Enable Automatic Updates. Turn on automatic updates for your devices and apps whenever possible. Download apps, software, and updates only from official, reputable sources. By enabling automatic updates, sticking to trusted sources, avoiding fake prompts, and making updates a regular part of your digital routine, you can significantly reduce your risk of cyberattacks.

What hundreds of Microsoft 365 deployments have taught me about cybersecurity

After working with that many tenants, the biggest takeaway is simple: most Microsoft 365 security problems aren’t especially sophisticated. Last year we took over a 45-person medical practice that had been on Microsoft 365 for almost a decade. Office 365 E3 and Microsoft 365 E3 are a good example: Microsoft 365 E3 includes Intune device management and Entra ID P1 conditional access, while Office 365 E3 does not. They were licensed for Office 365 E3, not Microsoft 365 E3, so the device had never been enrolled in Intune. Where I would start Microsoft 365 can be a very secure platform.

The Cybersecurity Nightmares Threatening Modern Organizations

This episode explored the real-world “horror stories” haunting today’s organizations this Halloween season. Cybersecurity leaders JoJo D and Ty Hughes discussed how technical, human and cultural challenges collide in modern security environments. This includes a discussion on cybersecurity risks hiding in plain sight, such as shadow AI, alert fatigue, zombie legacy systems, identity sprawl and autonomous AI agents. The episode also dove into human burnout in security teams, the dangers of overloading analysts with constant alerts and leadership blind spots that allow risk to persist unnoticed. It’s a reminder that the scariest threats aren’t abstract, they’re already inside most systems, waiting to be acknowledged and addressed.

Cybersecurity company Pluto Security raises $34 million

Cybersecurity company Pluto Security reported yesterday (Tuesday) the completion of a $34 million funding round, unveiling itself to the public for the first time. Pluto develops a platform that secures AI tools in organizations and the applications that company employees build using them. It allows information security teams to view the organization's AI environment, from the AI tools employees use, the components and services connected to them, to the applications, agents, and automations they build. This comes after the company found that most information security managers in various organizations were born in the 1990s and sought a way to connect with them. We research the risks they encounter and build tools that help them deal with them.

(Blog) Cybersecurity awareness - When the attacker is a machine: why cybersecurity is now everyone’s job

AI tools can help people with modest technical skills identify weaknesses, generate attack code and move through networks with limited human direction. A warning from the real world In July 2026, Hugging Face, a major platform for sharing AI models, disclosed a breach of its internal production systems. About 700 of them then entered Hugging Face through a booby-trapped dataset, stole credentials and moved through internal systems over a single weekend, recording more than 17,000 actions. The most unsettling detail is that the agents were not even trying to harm Hugging Face; they were pursuing a better score in a test. Note: AI tools were used to help prepare this article.

DOE, INL launch weekly series on cyber-informed engineering to advance cybersecurity in energy infrastructure

Announced Tuesday, the initiative will publish new content each week through a learning hub, examining one principle at a time and explaining how the principles build on one another. The program aims to advance the integration of cybersecurity into infrastructure engineering and design, complementing traditional reactive cyber measures with engineered controls that use engineering and physics to mitigate cyber risks and eliminate catastrophic consequences from cyber-enabled attacks. Each weekly module will include an overview of the featured principle, a case study demonstrating its application and key questions engineers can use to begin applying the principle to their organizations’ energy systems. The learning hub opens with Principle 1, Consequence-Focused Design. Explore the Learning Hub today to learn about Principle 1 (Consequence-Focused Design), and come back weekly to keep building CIE knowledge.

Lawmakers look to close cybersecurity gaps

Delbert Hosemann formed a Senate select committee to determine next steps for a cybersecurity blueprint for the state of Mississippi. We are way behind,” Sen. Tyler McCaughn, co-chair of the select committee, said. Identifying gaps in reporting Part of the plan is identifying the gaps. “This is very nerdy work, but at the same time, this is very important work,” Sen. Scott DeLano, R-Senate Cybersecurity Select Committee, said. “I’m going to propose that we have a Department of Cybersecurity appointed by the governor, approved by the Senate,” Hosemann said.

Julia Seitz dives deeper into cybersecurity for UP water infrastructure systems

UPPER MICHIGAN. (WLUC) - TV6’s Julia Seitz is back to dive deeper into the research and interview process for her most recent TV6 Investigates story. She and Shannon discuss the evolving world of cybersecurity, the cross-over between physical and cyber threats to our water, and the many questions left to answer.

Mississippi Senators Consider Expert Advice on Cybersecurity

Cybersecurity experts doled out new advice to Mississippi lawmakers Tuesday as the state works to minimize cyber incidents, with mandatory cyber incident reporting among the recommendations. Advice to the committee included mandating cybersecurity incident reporting, providing shared cybersecurity services and solutions, giving safe harbor to those reporting incidents, and helping jurisdictions respond to incidents. CISA provides no-cost cybersecurity services, he said, including external vulnerability scanning, on-site assessments, incident-response simulations, tabletop exercises and technical guidance. Various related topics arose, including building the state security operations center, what whole-of-state cybersecurity might look like and AI's impact on data and security. He discussed with legislators how Mississippi has been approaching cybersecurity, how the statewide security operations center might work and local procurement processes.

Cybersecurity governance is a board priority for nonprofits

For nonprofit organizations, cybersecurity is more than a back-office technology concern. The organization may be highly dependent on technology, but not adequately prepared to manage nonprofit cybersecurity risk. Boards should ask practical questions such as the following: Who in the organization owns cybersecurity risk? They are designed to clarify ownership, strengthen nonprofit board cybersecurity oversight and create a common understanding of cybersecurity risk management. Where nonprofits should focus Nonprofits do not have to solve every cybersecurity problem at once.

Cybersecurity conference explores the risks and rewards of AI

Does artificial intelligence improve cybersecurity or is it potentially exposing sensitive data? The University of Nevada, Reno Cybersecurity Center explores that question in its 2026 conference, Cyber-AI vs. AI-Cyber, Oct. 29 on the University campus. Speakers from Crytica Security, CarbonHelix Cyber and BlueRock, Viakoo and Microsoft also will discuss the use of AI in cybersecurity. The conference is organized by the University’s Cybersecurity Center, a group of interdisciplinary faculty members working with industry partners to develop holistic solutions to cybersecurity challenges. The Cybersecurity Center participates in the cybersecurity M.S.

Space sector faces satellite cybersecurity blind spots, calls for stronger threat intelligence and information sharing

Space security once relied on obscurity, but new space, COTS, digitalisation, and big data disrupted that model. The result is greater availability of information about satellite systems, limited CTI, and lower barriers to attack, which creates insecurity-by-transparency. Poirier identified why space cybersecurity requires greater transparency and collaboration. Attackers have growing access to enabling information about space technologies, while defenders still lack cyber threat intelligence and systematic information sharing. Poirier said the space industry has begun adapting traditional cyber threat intelligence tools to the constraints of space systems.

How much of an organization's attack surface can you map with a single #AI prompt? Watch Jake AI from WhoisXML API map a domain's attack surface by uncovering subdomains, resolving infrastructure, analyzing DNS and TLS certificate data, and connectin

How much of an organization's attack surface can you map with a single #AI prompt? Watch Jake AI from WhoisXML API map a domain's attack surface by uncovering subdomains, resolving infrastructure, analyzing DNS and TLS certificate data, and connecting the findings to surface relationships, patterns, and areas worth investigating further. One prompt brings together multiple layers of Internet intelligence and turns them into investigation-ready context. See how Jake AI connects the dots across Internet intelligence. Get FREE Instant Access >> https://lnkd.in/eTsSrsCP #JakeAI #AICybersecurity #AttackSurfaceManagement #ASM #CyberSecurity #OSINT

DigiFlight Appoints Melody Berry to Lead Cybersecurity and Compliance Readiness Engagements

DigiFlight, Inc., a provider of aerospace, cybersecurity, engineering, and training solutions for government and commercial organizations, has appointed industry veteran Melody Berry as manager of cybersecurity and compliance. In her new role, Berry will help oversee cybersecurity, assessment, and compliance programs for DigiFlight and its affiliated cybersecurity company, Camelot Secure. Berry will also lead Cybersecurity Maturity Model Certification (CMMC) readiness engagements for DigiFlight and Camelot Secure customers. Before joining DigiFlight and Camelot Secure, Berry worked as a lead CMMC assessor at CyberRx, a CMMC C3PAO. I also look forward to supporting the broader DigiFlight and Camelot Secure security and compliance programs.”

GIANT website and app down after 'cybersecurity incident'

CARLISLE, Pa. — The GIANT Company's website and mobile app are down after a "cybersecurity incident" prompted parent company Ahold Delhaize to take some computer systems offline as a precaution. On Oct. 12, Ahold Delhaize said it was experiencing a "security issue" within its network. "This includes taking some systems offline to help protect them," Ahold Delhaize said in a statement. What GIANT customers should know The GIANT Company, which is headquartered in Carlisle, Pennsylvania, notified customers that its website and app were unavailable while crews worked to restore service. Customers with unfulfilled orders placed through Giantfoodstores.com or the GIANT app will receive refunds, according to a company notice.

Microsoft Digital Defense 2026 Report Highlights New Cybersecurity Challenges Amid Rapid AI Adoption

Microsoft’s 2026 Digital Defense Report reveals that cyber threats are becoming more complex as AI adoption grows and digital identities, cloud services, software supply chains, and critical infrastructure become increasingly interconnected. AI holds tremendous potential to drive progress in Indonesia, but realizing that potential requires trust that systems, data, and identities are protected. While attackers’ methods and targets have remained largely unchanged, AI and increasingly interconnected digital systems are making attacks faster, more scalable, and more effective. At the same time, AI systems themselves are becoming targets, including the data and infrastructure supporting them. How AI is Changing Cyber Attacks and Defense AI is shifting the speed, scale, and sophistication of cyberattacks.

Hannaford’s parent company taking precautions following ‘cybersecurity incident’

Maine (WABI) - Hannaford’s parent company, Ahold Delhaize, is experiencing a security issue within its network, resulting in some stores’ digital network being down. Ahold Delhaize said its teams are taking steps to assess and mitigate the issue. Company statement Ahold Delhaize released the following statement: “Ahold Delhaize is experiencing a security issue within its network. Website and app message The following message currently appears on the Hannaford website and app: “Our Hannaford website and app are currently unavailable. Any unfulfilled orders placed through Hannaford.com or the Hannaford app will be refunded.

Be a good AI ancestor: Cybersecurity already gave us the playbook

After nearly 30 years in technology, including my career at Intel, I believe AI safety requires the same approach. Our objective is to help establish boundaries for autonomous AI systems and advance those boundaries toward practical implementation. I believe the next phase of AI safety requires a shift in leadership and execution. From responsible AI principles to enforceable Red Lines The International AI Safety Red Lines initiative is focused on a fundamental question: What capabilities and behaviors should increasingly autonomous AI systems never be permitted to exhibit? The Global Council for Responsible AI’s International AI Safety Red Lines initiative is one contribution to that broader effort.

Cybersecurity research at UH Mānoa earns national recognition

Reading time: < 1 minute The University of Hawaiʻi at Mānoa has been renewed through 2030 as a National Center of Academic Excellence in Cyber Research (CAE-R), a national designation recognizing universities that conduct advanced cybersecurity research and prepare students for careers in the field. The designation is part of a federal program led by the National Security Agency recognizing colleges and universities for their contributions to cybersecurity education, research and workforce development. Fewer than 20% of institutions in the national program hold the CAE-R designation, which is focused on universities with doctoral-level research programs. “It also reflects the important role that research universities play in preparing the next generation of cybersecurity professionals, applying AI for cybersecurity, and securing increasingly important AI systems.” Increasing importance of cybersecurity Cybersecurity has become increasingly important as Hawaiʻi’s residents, businesses, schools and government agencies rely on digital systems for everything from banking and health care to transportation and communication.

IonQ to Acquire Elisity for $1.3B to Advance Quantum Security

IonQ is offering its customers a vertically integrated full-stack quantum platform across quantum computing, networking, sensing and cybersecurity. IonQ’s Multiproduct Revenue Growth Opportunity IonQ brings an established track record in growing its quantum security and quantum-secure communications offering. About Elisity Elisity helps enterprises advance Zero Trust security for users, devices, workloads, AI agents and other non-human identities. About IonQ IonQ, Inc. [NYSE: IONQ] is the world’s leading quantum platform and foundry - delivering integrated quantum solutions across computing, networking, sensing, and security. Contacts IonQ Investor Contact investors@ionq.co ‍ IonQ Media Contact media@ionq.co ‍ Elisity Media Contact Danielle Ostrovsky, ostrovsky@hi-touchpr.com ‍