Low-carbon technologies, from renewable generation to electric vehicle chargers, and virtual power plants to demand response software, involve millions of grid- and Internet-connected systems, each one a potential entry point for cyberattacks.
Europe, under pressure from Russian hackers, is at the forefront.
Indeed, while attacks are becoming more frequent and more aggressive, they have so far caused no substantial damage.
The industry says it is holding well.
Artificial intelligence is making attacks on corporate networks faster and cheaper, but whether it can effectively reach the systems that run the grid remains unclear.
Oct 28, 2026 · via energyintel.com
A reported $1 million reward for information that could identify an alleged hacker is the kind of number that grabs attention.
According to recent reports, Japan’s GMO Internet Group announced a reward of up to $1 million for information leading to the identification of a hacker tied to cyberattacks affecting the group.
Credential theft, phishing, abuse of valid accounts and weaknesses in identity controls remain practical paths into organizations.
It is disciplined preparation: Stronger identity controls, layered detection, informed users, timely patching and tested recovery.
For MSPs and IT teams, incidents like this are an opportunity to review where identity, endpoint, email, collaboration and recovery controls intersect.
Oct 28, 2026 · via acronis.com
The Center of Excellence in Cybersecurity Research, Education and Outreach at North Carolina Agricultural and Technical State University has announced a new lecture in its month-long series in recognition of Cybersecurity Awareness Month.
Modern agents can browse, read files, and take actions, but may not distinguish between legitimate commands and malicious content.
Dr. Alam addressed threats such as profiling, impersonation, and voice cloning, and highlight research opportunities in privacy-preserving AI.
Recently, Pope, then a third-year PhD candidate at N.C. A&T University delivered a lightning talk at All Things Open AI in Durham.
Her presentation provided an overview of pre-trained, open-source transformer models that generate protein embeddings and their application in classification tasks.
Oct 28, 2026 · via blackengineer.com
In the age of AI, all of this was reported within a single “Cybersecurity Black Week,” an exceptionally eventful seven-day period amid an already turbulent Black October.
Node2Shell: From Node.js to HTTP2Shell Node2Shell (CVE-2026-111497) is an out-of-bounds write in Google’s Brotli decoder, which Node.js bundles.
According to Aikido, researchers demonstrated code execution against the official, unmodified Node.js 24.22.0 image on Linux ARM64.
Node.js 25.x, 23.x, 20.x, and earlier releases are end-of-life and will not receive the fix.
Cutting through the noise Cybersecurity Black Week showed that a severity score rarely tells the whole story.
Oct 28, 2026 · via welivesecurity.com
Reducing decision/response times can be accomplished within a three-part framework: Understanding where decision time gets lost Rethinking human processes to complement AI speed Bringing CIO and CISO decision-making closer together 1.
Whether a threat is live in your environment depends on network and configuration context that security teams often don’t own.
Rethinking human processes to complement AI speed Security and IT leaders think in terms of people, process, and technology.
With AI, process has to come first because most security processes were built for work that moved at human speed.
Look at the work AI is replacing or accelerating and ask whether the processes around it still fit the way the work gets done.
Oct 28, 2026 · via cybersecurity-insiders.com
Forge Institute was awarded $2 million from the U.S. Department of Energy for the Secure Energy Defenders Program (SEDP), a cybersecurity training and technical assistance offering for specific Arkansas electric utilities over a two-year timespan.
SEDP will provide specific Arkansas rural and municipal electric utilities with a fully funded path to a stronger cybersecurity posture — at no cost to participants.
Forge Institute is a non-profit “do-tank” that trains cyber defenders, accelerates new defense technology, and helps protect America’s critical infrastructure.
The Secure Energy Defenders Program helps close that gap.
“The new Secure Energy Defenders Program will be an important program for our state’s electric cooperatives and municipal utilities, providing valuable training and technical assistance through the Forge Institute.”
Oct 28, 2026 · via talkbusiness.net
Television Kris Jenner Channels Big Scorpio Energy in Elizabeth Taylor's Cape Elizabeth Taylor wore the famous cape to Grace Kelly’s legendary Scorpio Ball, decades before Kris Jenner added it to her collection.
News The Botched and the Beautiful: Experts Weigh In on the Trumpworld Aesthetic Known as “Mar-a-Lago Face” “Mar-a-Lago face” face might seem like the result of a series of unfortunate surgical mistakes.
Style Queen Camilla Sparkles in an Heirloom Tiara and Show-Stopping Amethysts At a state banquet in honor of the Sultan of Oman, Queen Camilla paid tribute to Queen Elizabeth II in the Girls of Britain and Ireland Tiara.
As Audrey Hepburn once said, “Hermes was terribly like Fred; it’s unbelievable how much of Fred rubbed off on Hermes, and perhaps of Hermes on Fred.”
No Democrat is thriving in this new world quite like Jon Ossoff, the young senator from Georgia.
Oct 27, 2026 · via vanityfair.com
ALBUQUERQUE, N.M. — The University of New Mexico Health Sciences Center resumed normal operations Tuesday afternoon after a cybersecurity threat impacted operations Monday.
The threat closed all UNM clinics and diverted ambulances Monday and cancelled HSC classes into Tuesday.
“Information technology security teams began containment efforts around 11 a.m. Monday, Oct. 26, after identifying a cybersecurity threat.
Teams worked with external partners to secure the network and notified state and federal law enforcement,” UNM Health spokesperson Chris Ramirez stated.
All HSC academic and research programs are set to resume normal operations Wednesday.
Oct 27, 2026 · via kob.com
The White House and South Carolina officials launched a six-month cybersecurity pilot Monday to help rural hospitals defend against hackers and keep treating patients during attacks, extending an approach first tested with water utilities in Texas.
The initiative, Project Lifeline 250, will connect participating hospitals with technology companies offering assistance at no cost.
National Cyber Director Sean Cairncross and South Carolina Gov.
Henry McMaster announced the effort at Newberry Health Hospital.
And in South Carolina, the state’s AnMed health system experienced weeks of disruption after a July cyberattack, including limited access to medical records.
Oct 27, 2026 · via nextgov.com
UPDATE as of 10:27 p.m., Oct. 26, 2026 Information technology security teams continue working to resolve the cybersecurity event affecting UNM Health Sciences Center.
Nonessential employees at the UNM Health Sciences Center are asked to remain home Tuesday.
Previous Update From 6:08 p.m., Oct. 26, 2026 The University of New Mexico Health Sciences Center (HSC), which includes the UNM Health clinical delivery system, experienced a cybersecurity event Monday, Oct. 26, 2026.
From 12:30 to 2:30 p.m., UNM Health temporarily limited its acceptance of new patients as teams responded to the event.
UNM Health patients should not show up to UNM Health facilities on October 26.
Oct 27, 2026 · via hscnews.unm.edu
Recent cybersecurity headlines have given us plenty of reasons to worry about what AI can do.
Last week, researchers disclosed that AI had helped uncover critical vulnerabilities in PHP, the programming language used by roughly 70% of websites.
AI didn’t create these vulnerabilities, and malicious actors will always exist.
“If an AI finds an exploit or a human finds an exploit, it’s always going to be something we didn’t think of before.”
AI tools can help attackers turn newly discovered flaws into working exploits faster, and target more systems at once.
Oct 27, 2026 · via technical.ly
Fortinet’s 2026 survey of more than 700 OT professionals found 81% expect OT security to shift to the CISO within a year, which suggests it has not happened yet.
Without clear ownership and lifecycle funding, security work can lose priority to production and maintenance,” ShangJyh ‘SZ’ Lin, chief cybersecurity advisor at Sun Square, told Industrial Cyber.
Saunders said that the biggest issue is delaying an update to OT systems because a manufacturing line would be taken down.
“OT systems that are 10-15 years or older are highly vulnerable to cyber attack,” Saunders said.
Cybersecurity governance meets production pressure The executives addressed how conflict gets resolved when plant managers are measured on uptime and throughput, though security governance demands decisions create short-term operational friction.
Oct 27, 2026 · via industrialcyber.co
Get weekly updates on new cybersecurity job openings.
ISSO SierTeK | USA | On-site – View job details As an ISSO, you will support cybersecurity across AFRL networks, standalone systems, and cloud environments.
Must read: How to succeed at cybersecurity job interviews IT Cybersecurity Specialist Social Security Administration | USA | Hybrid – View job details As an IT Cybersecurity Specialist, you will protect SSA systems, networks, and data through risk assessment, access management, and security architecture.
Senior Product Cybersecurity Engineer – Platform Security L3Harris Technologies | Canada | On-site – View job details As a Senior Product Cybersecurity Engineer – Platform Security, you will assess, deploy, configure, and maintain cybersecurity technologies within the IPMS solution.
Senior Security Engineer Rainmaker Technology Corporation | USA | On-site – View job details As a Senior Security Engineer, you will prioritize risks across systems, data flows, and access paths.
Oct 27, 2026 · via helpnetsecurity.com
Last week, two critical flaws were announced in a programming language called PHP, which is used in roughly 70 percent of websites.
And it's still running many systems, including city websites.”
(About half of the Internet-connected PHP software is one of the older versions for which there currently is no patch, Klein says.
(Ransomware actors have attacked governments before, including shutting down IT systems for school districts or stealing and threatening to release police files.)
Events like the PHP exploits demonstrate a new normal, in which more vulnerabilities are found and exploited faster than we’re used to, Klein says.
Oct 27, 2026 · via governing.com
October marks Cybersecurity Awareness Month, and cyber threats are becoming more common and smarter worldwide.
Hackers are increasingly turning to artificial intelligence to launch faster and more abrasive attacks on everything from state agencies to hospitals to local governments.
The state’s new Chief Cyber Officer Meghan Cook, who is leading New York’s defense, joined NY1 political anchor Errol Louis on “Inside City Hall” Tuesday to talk about the changing cybersecurity landscape and more.
Oct 27, 2026 · via ny1.com
By Wednesday, Palo Alto Networks said every supported version of PAN-OS and Panorama was vulnerable and no fix was available.
Can our automation patch directly from that inventory, or does every advisory start with a manual hunt?
Put it in one system of record: the intended state of your infrastructure, not a scan export.
Drive automation off the inventory so a new advisory becomes a targeted job, not a scavenger hunt.
Automation helps teams keep pace, but without an authoritative inventory, it just misses things faster.
Oct 26, 2026 · via cio.com
ALBUQUERQUE -- A major hospital network in New Mexico was racing to fix a cybersecurity issue on Monday that forced it to send ambulances to other hospitals and left the state without an emergency department capable of treating the most serious injuries.
The University of New Mexico Health System told people not to show up at its main hospital in Albuquerque and has canceled appointments at its more than 30 clinics.
UNM Health System said it was working to resolve the issue, the extent and nature of which was not immediately clear.
The hospital network conducts about 900,000 outpatient visits and receives 100,000 emergency room visits each year, according to its website.
It operates the state's only Level 1 trauma center.
Oct 26, 2026 · via abcnews.com
To stand out, Howard County’s approach courts businesses from other regions while building connections inside, too.
The county hosts Cyber Howard, the state’s only cybersecurity-specific accelerator run by economic developers — a resource neighboring states like Pennsylvania and Virginia lack.
The winner of the spring cohort — Andrew DeFeo of Cipher — traveled from Philadelphia to attend the Howard County Economic Development Authority’s (HCEDA) program.
“Howard County right now is really the star,” Lombardo said, “in pulling and connecting the people and the companies together.”
By the numbers, Howard County generally matches or trails its neighbors in federal contract awards, but the county has become more competitive in recent years.
Oct 26, 2026 · via technical.ly
But frontier models are getting there fast.
Critical infrastructure operators should treat that as the time they have to prepare, not as a reason to wait.”
Frenos tested several AI models on three kinds of tasks: choosing one action, planning the steps to a goal, and working through a simulated scenario.
In the planning tests, models chose a series of actions that had to work together to reach a goal.
Frenos recommended that critical infrastructure defenders prioritize detection and response, use AI to assess their own environments and examine exposure across entire systems rather than individual vulnerabilities.
Oct 26, 2026 · via industrialcyber.co
Fayetteville Technical Community College (FTCC) is leaning into community partnerships to prepare the next generation of cybersecurity professionals.
Industrial mechanics students will do the hands-on work while IT students will handle the cybersecurity to conquer the simulated hack.
“Normally they would have to wait until college to get the experiences that they’re now getting in high school.”
SparkNC gives middle and high school students an opportunity to explore the skills needed for careers in cybersecurity, artificial intelligence, computer systems engineering, software development, and game development.
Sorrells also said that the SparkLab will play a role in building the digital literacy of all Cumberland County constituents.
Oct 26, 2026 · via ednc.org