Dr. Jeff Tully and Dr. Christian Dameff, co-directors of the UC San Diego Center for Healthcare Cybersecurity, explore the evolving intersection of medicine, cybersecurity and patient safety in this discussion from our Healthcare Innovation Summit in San Diego.
JENNA MCLAUGHLIN, BYLINE: Hey there. CHANG: Yeah. CHANG: Yeah. CHANG: Yeah. MCLAUGHLIN: Yeah, I mean, I think if nothing changes, we probably will.
When a malicious file is detected, it can be tempting to treat that file as the entire threat. Malware detection requires more than simply recognizing a bad file. Following the attack beyond the initial file uncovers the persistence mechanisms and other activity that also must be addressed. BotHelper illustrates a longstanding challenge in malware detection: individual artifacts and behaviors rarely tell the full story of an attack. While recognizing a malicious file remains an important baseline, preserving the connections between delivery, execution and subsequent activity allows defenders to accurately reconstruct how an attack unfolded and what needs to be addressed.
Has your organization adjusted its cybersecurity priorities because AI can accelerate vulnerability discovery or exploitation? These were the same questions I asked the audience at Secure Delaware* on Tuesday, Oct. 27, 2026, as I moderated a session entitled "Combatting the Artificially Enhanced Threat Actor." What role can information sharing and collective defense play in helping state, local, tribal and territorial organizations keep pace with increasingly automated threats? Information sharing through groups like REN-ISAC and MS-ISAC enables universities and local governments to pool threat intelligence instantly. Frame AI threats through the lens of accelerated velocity and scale on existing vulnerabilities — such as automated phishing and faster exploit delivery — rather than speculative sci-fi scenarios.
Tenable specializes in exposure management, a proactive form of enterprise cybersecurity that uncovers vulnerabilities in corporate networks before malicious actors can take advantage of them. Tenable stock looks like a bargain compared to its peers Tenable stock is trading at a price-to-sales (P/S) ratio of 5.5, so it's cheaper than the technology-heavy Nasdaq-100 index which has a P/S ratio of 6.7. It's also much cheaper than each of its peers in the cybersecurity space, CrowdStrike, Palo Alto Networks, Zscaler, and SentinelOne, which trade at P/S ratios of between 7.8 and 50.8. However, I think the substantial gap between Tenable's P/S ratio and CrowdStrike's P/S ratio is difficult to justify, particularly given the recent momentum in Tenable One adoption. I'm not suggesting Tenable's P/S ratio will ever rise to above 50, but I think there is room for upside.
Central Michigan University’s virtual National Cybersecurity Awareness Month Conference will bring those perspectives together Friday, Oct. 30, in a free event open to students, working professionals and community members. CMU’s cybersecurity education connects technical skills with the business decisions and human behavior that shape security. The program includes a keynote on cybersecurity fundamentals from FBI special agent Anthony Kraudelt and another from John Fowler II, deputy information security officer at Henry Ford Health System. Concurrent sessions will examine network security in banking and the role of IT and cybersecurity auditing. For those who want to try cybersecurity for themselves, a beginner-level Capture the Flag competition begins at 3 p.m.
Explore 3 other Rockwell Automation fair value estimates, including one that suggests as much as 10% upside from the current price. See our latest analysis for Rockwell Automation. Looking For More Investment Ideas Beyond Rockwell Automation? Rockwell Automation offers one lens on industrial automation, but your portfolio decisions will often benefit from comparing it with a wider mix of businesses. This article by Simply Wall St is general in nature.
The challenge of putting AI policies into practice Security policies establish the rules businesses expect employees and systems to follow. Spencer Young, SVP International at Delinea argues the challenge lies in how these policies are enforced, “It’s not that businesses don’t have AI policies in place. “Far too often, businesses are solving the tension between AI speed and security by legitimising risky access,” Young adds. Unfortunately, that risks doing exactly what Cybersecurity Awareness Month warns against: making it easy for cybercriminals.” Making resilience a practical priority In an era where agentic AI is doing much of the leg work, awareness is no longer enough.
Overcoming the Execution Gap Several states have successfully closed the gap. Arizona’s Cyber Command Center acts as a shared resource for state agencies, local municipalities and local universities. These states show that closing the execution gap does not require forcing every agency to replace its technology stack. Addressing the Vulnerability Gap Fortifying older systems has never been more important, especially as AI becomes increasingly weaponized. This creates a vulnerability gap that lies at the heart of the broader execution gap.
A number of important merger and acquisition (M&A) announcements were made in October 2026, with the need to enhance AI security a recurring theme. The biggest headline deal of the month was Proofpoint entering into a definitive agreement to buy AI security specialist Varonis for $6.3bn. Anthropic to Acquire AI Security Startup Opaque Systems AI frontier firm Anthropic has agreed to acquire AI security company Opaque Systems in a deal announced on October 13. Proofpoint Agrees $6.3bn Varonis Transaction On October 15, Proofpoint announced it had entered into a definitive agreement to acquire Varonis for $6.3bn. AISLE’s three founders will take leadership roles in Cohere spanning cybersecurity, corporate security, AI security research and frontier model development once the transaction closes.
NSFOCUS Technologies Group (SZSE:300369) Overview: NSFOCUS Technologies Group provides internet and application security services, including DDoS protection, web security, threat monitoring, and managed cybersecurity solutions for carriers and enterprises. Trend Micro (TSE:4704) Overview: Trend Micro provides cybersecurity platforms and services that protect endpoints, cloud workloads, networks, email, data, and consumer devices worldwide. The bigger question for Trend Micro is how far this shift in how its products are sold and consumed eventually feeds into earnings power. "Accelerating adoption of cloud technologies and the shift toward unified, integrated platforms continues to support N-able's end to end cyber resilience offering. Growing contributions from data protection and security operations are expected to influence ARR growth and top-line revenue mix."
Jason Clinton, Anthropic's deputy chief information security officer, recently posted an ominous warning on X after several serious cybersecurity vulnerabilities were made public. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. What worries experts now is how AI could become an unprecedented hacking tool. AI engineer and investor Matt Shumer explained on X that AI gives hackers three advantages. If you have a retirement account, you can freeze or lock it to prevent outbound electronic money transfers.
On Oct. 21, the Information, Technology and Consulting office temporarily took down Dartmouth websites and issued a “major incident” report on its webpage for “websites and systems service disruption.” ITC wrote in its Oct. 21 incident report that the office is applying “security fixes as quickly as possible to minimize disruption” caused by an unspecified cybersecurity vulnerability. “A widespread security vulnerability has been identified that impacts websites and software across the world, including systems at Dartmouth,” ITC wrote. “As a precaution, some Dartmouth websites and websites may be unavailable while patches are applied.” The PHP Foundation — the language’s nonprofit developers — released a patch for the programming language’s vulnerabilities on Oct. 21.
.....There has been a lack of commitment by elected and appointed Norfolk County Officials to cybersecurity and the operations of Norfolk County Registry of Deeds. Some of this may have been driven by the retaliation from the Norfolk County Director John J. Cronin who does not even live in Norfolk County as well as the Norfolk County Commissioners for losing in various court cases brought by me as Register of Deeds. Here is a video on the latest failure of the County Information Technology Department and its supervisor County Director John J. Cronin short clip of cable TV interview 10-14-2026. Breach of the County Information Technology infrastructure on October 27, 2024 that required the County to notify all employees and/or retirees. .....The millions of legal land court documents at the Norfolk County Registry of Deeds and the legal titles to owned property are jeopardized by poor decisions made by Norfolk County elected and appointed officials.
Sign up to stream all your favorite shows.
While cybersecurity experts acknowledge that no system is immune to attacks, some said many incidents could be prevented through stronger security practices, greater accountability for education technology vendors and dedicated investments in cybersecurity infrastructure. He estimated that roughly 80 percent of cybersecurity incidents affecting schools and vendors could be prevented through basic security practices. Nava said California lacks a dedicated state mechanism for broadly verifying the cybersecurity practices of education vendors. Beyond vendor accountability, experts identified another potential vulnerability: the vast amount of student information schools and their contractors retain. The ETS breach affected not only current students but also former students whose records extended back years.
As a result, cybersecurity is no longer an IT issue: It is an infrastructure and national resilience imperative. Telecom operators carry sensitive information, including call records, subscriber locations, financial transactions, identity data, and government communications. What makes telecom operators uniquely vulnerable to cyber threats? Telecom operators have an unique position in the digital economy. Telecommunications has become critical infrastructure, and its importance will continue to grow as economies digitize.
Barracuda Networks, Inc. has released its Cybersecurity Skills Gap Report, highlighting the growing challenges cybersecurity teams face as artificial intelligence, identity-based attacks, and expanding digital operations reshape security requirements. Half of respondents said security professionals are expected to support expanding digital operations without additional resources. “Organizations need to reshape their security teams, combining the power of AI and automation with human expertise, judgement, and visibility. _____ About Barracuda Barracuda is a leading global cybersecurity company delivering complete resilience made easy to buy, deploy, and use through a partner-first model. Barracuda Networks, Barracuda, BarracudaONE, Barracuda IQ, Bailey with the AI stars logo, and the Barracuda Networks logo are trademarks or registered trademarks of Barracuda Networks, Inc. in the U.S. and/or other countries.
Listen · 2:28 2:28 Cybersecurity experts used AI to find a bug in a logistics system used by an independent election information agency. NPR does not offer or accept money for coverage or interviews. Anyone who makes such an offer or request is not an NPR employee and does not represent NPR.
Many accounting firm partners say they are confident in their cybersecurity, but new research shows they may be over confident. Even among firms using layered device security such as multifactor authentication, only 43% have endpoint detection and response (EDR) on every device. Rightworks is a provider of firm management, security technology, and IT solutions for accounting firms and tax professionals. Three Key Data Steps to Take Before Tax Season: Put EDR on every device. Among firms with layered device security, only 43% have it everywhere.