No-frills tech news

As frontier models go rogue, colleges beef up AI cybersecurity education

The recent autonomous-hacking incidents involving frontier AI models have further underscored the need for cybersecurity education. But until recently, demand for AI cybersecurity education had been relatively muted — something experts described as a serious problem. AI cyber degrees, certificates, and collaboration AI cybersecurity education is still a nascent field, experts said, with universities at different stages of rolling out curricula. UWF itself offers a federally certified AI cybersecurity study program, as well as AI security graduate degrees and professional certificates. Advice for a growing field AI security education appears poised to take off.

Agentic AI In Cybersecurity: What Changes When The System Chooses The Next Step

Introduction Agentic AI in cybersecurity has quietly stopped being a working example. What failed in July 2026 was not the ambition of agentic AI; it was the assumption that a goal description can substitute for containment. What makes an AI system agentic in cybersecurity Most people’s mental model of AI is a chat window: you type a question, it types an answer, and it stops. What actually differentiates agentic AI vendors For an evaluator comparing agentic capabilities across vendors, one observation saves a lot of demo time: the architecture diagram alone does not establish differentiation. Key Takeaway Agentic AI in cybersecurity shifts the analyst’s role from running each step to reviewing sourced conclusions, but its value holds only where autonomy is enforced by infrastructure rather than instructions.

Cybersecurity Awareness Month is here

The Postal Service is marking its 11th year of observing Cybersecurity Awareness Month. This annual observation, which takes place each October, is sponsored by the National Cybersecurity Alliance and the Cybersecurity and Infrastructure Security Agency. The Postal Service’s cybersecurity efforts are led by the USPS Corporate Information Security Office, or CISO. Stay CyberSafe. CISO is encouraging employees and contractors to go to the CyberSafe at USPS Blue and LiteBlue pages to learn more about: • Monthly awareness campaigns, which provide practical cybersecurity tips for work and home; • CyberSafe Guardians, a program that enlists volunteers to share cybersecurity awareness best practices with their co-workers; • Virtual awareness activities that allow participants to test their cybersecurity knowledge; and • Videos that show real-life cyberthreat scenarios.

Guilford County IT Shares Online Safety Tips for Cybersecurity Awareness Month

As part of Cybersecurity Awareness Month, Guilford County's Information Technology Department is sharing tips with residents to help them keep their information and data safe. Cybersecurity Awareness Month aims to raise awareness about the importance of cybersecurity, emphasizes personal accountability, and highlights proactive steps to enhance and ensure the security of personal and work-related private information. Cybersecurity Awareness Month is a collaborative effort led by the Cybersecurity and Infrastructure Security Agency (CISA), uniting the public and private sectors to encourage behaviors that reduce online risks. Guilford County's IT Department is sharing the following tips to help residents stay safe online and protect their personal data: • Use strong passwords. Multifactor authentication, MFA, provides an extra layer of protection for online accounts, personal devices, and business networks.

Congressional Action on Health Care Cybersecurity: HISAA is Re-Introduced and the Health Care Cybersecurity and Resiliency Act Moves Forward

In response to major breaches and security incidents affecting the industry, the Health Infrastructure Security and Accountability Act (HISAA) has been re-introduced and the U.S. Senate has advanced the Health Care Cybersecurity and Resiliency Act (HCCRA). Key Provisions The reintroduced HISAA bill retains all of the substantive provisions of the original version, which would substantially overhaul the existing HIPAA Security Rule. Specifically, $800 million would go to rural and urban safety-net hospitals over two years, with an additional $500 million available to incentivize all hospitals to adopt enhanced cybersecurity practices. Implications for Health Care Organizations Although both bills must clear additional legislative hurdles before becoming law, the overwhelming bipartisan support for health care cybersecurity reform suggests that significant new cybersecurity obligations are likely coming. HCCRA represents one of the most substantial legislative efforts to overhaul health care cybersecurity, and HISAA would be the most significant revision to HIPAA since the HITECH Act in 2009.

5 Takeaways From the Cybersecurity Summit

SACRAMENTO — Public-sector cybersecurity professionals gathered in Sacramento Thursday for the annual California Cybersecurity Education Summit* to compare notes on the landscape and the big risks and opportunities on the horizon. Some Solace on Quantum: There were a couple different takes on quantum computing and what it would mean for government cybersecurity. The other end of that conversation was more muted: It’ll be disruptive, but there’s still time to prepare and react. Meeting Minimums: One priority Marshall reiterated is his desire to identify what he calls “minimum viable security” for state departments, the education sector and local and tribal governments. *The California Cybersecurity Education Summit is hosted by Government Technology, Industry Insider — California's sister publication.

Davenport tech firm to host cybersecurity breakfast session

DAVENPORT, Iowa (KWQC) -Twin State Technical Services has been a trusted technology partner for businesses across the Quad Cities for over 25 years. Watch the interview segment to discover more about the topic cybersecurity including an upcoming workshop titled, “AI vs. AI: How to Navigate the New Cybersecurity Landscape” set to be held Oct. 13 from 8:30 to 9:45 a.m. Learn more about the breakfast workshop (including how to register) and other upcoming events here. Contact info Twin State Technical Services is located at 3543 E. Kimberly Road in Davenport. The phone number is 563-441-1504.

US government lagging in transition to post-quantum encryption, GAO finds

The U.S. government has taken some steps to prepare for the looming global migration to post-quantum cryptography (PQC). The National Institute of Standards and Technology has standardized PQC encryption algorithms that can resist quantum computers’ code-breaking power. The Office of Management and Budget has directed agencies to prepare for the transition. “Federal agencies recognize the quantum computing threat and have taken some actions to partially address it,” GAO said in its new report. Sixteen of those agencies told GAO that it was too early for testing because most vendors still hadn’t incorporated the new algorithms into their products.

Japan and cybersecurity: What’s behind recent attacks and what’s being done?

Authorities are calling for renewed vigilance against cybersecurity threats after the disclosure of a flurry of incidents exposing users’ personal data, and as early figures show Japan may be headed for an unusually bad year for corporate data breaches. With reported cases up, methods used by bad actors evolving, and artificial intelligence lowering barriers for would-be scammers, growing attention on the threat and new laws that allow more preemptive measures are in focus — but will they be enough? The targets of recent cyberattacks have ranged from restaurants and retailers to media groups and research institutions, with few sectors left unscathed. Experts say those cases may be just the tip of the iceberg.

Cybersecurity experts share tips to stay safe online while using AI tools

TYLER, Texas (KLTV) - Cybersecurity experts say artificial intelligence can be used as a tool, but it comes with risks. Wayne Hunter, CEO/founder of AvTek Solutions, said people should avoid entering sensitive personal information into AI tools such as Gemini and Claude. “Instead of putting a social security number, say, ‘I want to do this with an SSN number, how would I go do it?’” “I haven’t put the SSN number out there, I just said I was going to do something with the SSN number. “We are starting to see cybersecurity firms build AI into cybersecurity response tools; however, AI magnifies cyber threats as we understand them.

How AI can fix cybersecurity compliance: From dashboards to continuous execution

Traditional compliance software didn’t fix it The first generation of GRC platforms replaced spreadsheets with dashboards. From compliance dashboards to continuous execution AI-native compliance platforms flip that model. It logs each action as audit evidence along the way. The platform drafts policies tailored to the environment and maps one set of controls to CMMC, SOC 2, ISO 27001, and HIPAA at once. They could never afford to hire the IT, security, compliance, and SOC staff needed to do it all manually.

Reps. Carter, Thompson Reintroduce the Cybersecurity and Infrastructure Security Agency Securing AI Task Force Act to Address the Evolving Challenges Posed by AI

This legislation will establish a task force within the Cybersecurity and Infrastructure Security Agency in the Department of Homeland Security (DHS) dedicated to addressing safety and national security challenges posed by AI. The task force and reporting requirements will ensure effective DHS coordination as AI threats and challenges evolve. “I’m introducing the Cybersecurity and Infrastructure Security Agency (CISA) Securing AI Task Force Act to take an essential step towards managing the impact of AI on our cybersecurity landscape.” Background The CISA Securing AI Task Force Act would: Establish a Task Force - Within one year of enactment, the Director of CISA will establish a Task Force comprised of personnel from various offices and divisions to coordinate AI-related directives and activities. Address AI Challenges - The Task Force will ensure coordination of efforts to improve the safe and secure design, development, adoption, and deployment of AI.

Saber Healthcare Ramps Up Cybersecurity Measures After Late-July Attack as Private Data May Have Been Compromised

In the aftermath of a data breach at Saber Healthcare Group’s facilities in late July, the Ohio-based nursing home provider worked with outside cybersecurity experts to investigate the incident, while taking additional steps to strengthen its security systems. Saber Healthcare learned of a cybersecurity incident on July 27 in which private records of residents may have been compromised, but the situation has since been fully resolved. “Within just hours of learning of the incident, our internal systems were back online and operating without issue,” Zach Shamberg, chief of government affairs at Saber Healthcare Group told Skilled Nursing News. Cybersecurity incidents are becoming increasingly common across the health care industry and no organization is immune to potential cyber threats, Shamber said, encouraging health care organizations to remain vigilant and continuously monitor for suspicious activity. Saber Healthcare is one of the largest long-term care organizations in the country, with more than 160 affiliated facilities across Ohio, Pennsylvania, Delaware, Virginia, and North Carolina.

Cybersecurity Awareness Month 2026

Cyber threats can strike at any time, and the impact can go far beyond a compromised computer or stolen data. The California Governor’s Office of Emergency Services (Cal OES), through the California Cybersecurity Integration Center (Cal-CSIC), works with state and local partners to strengthen California’s cybersecurity and help protect critical services from evolving threats. October is Cybersecurity Awareness Month, a time to raise awareness about online threats and share practical steps everyone can take to stay safer online. From protecting personal information to recognizing suspicious messages, cybersecurity is a shared responsibility, and everyone has a role to play. Additional Resources: California Cybersecurity Integration Center California Department of Technology National Cybersecurity Alliance October is Cybersecurity Month: Practice These Tech Safety Tips Cybersecurity and Your Online Safety with Advice from Cal-CSIC Commander Jonathan Nunez

Elmo Motion Control Achieves IEC 62443-4-1 ML2 Cybersecurity Certification for Secure Product Development

Independent TÜV SÜD certification validates Elmo's secure development lifecycle and supports readiness for the EU Cyber Resilience Act. PETACH TIKVA, Israel, Oct. 7, 2026 /PRNewswire/ -- Elmo Motion Control, a global leader in advanced motion control technology, announced that its Secure Product Development Lifecycle has achieved IEC 62443-4-1 Maturity Level 2 (ML2) certification from TÜV SÜD. About Elmo Motion Control Elmo has been a motion control technology leader for over 37 years, with millions of servo drives operating worldwide. Media Contact Robert Dugan Marketing Manager, Elmo Motion Control T: +972-(3)-929-2300 (ext. 368) E: [email protected] SOURCE Elmo Motion Control, Ltd.

Arctic Wolf CEO: AI Has Changed Cybersecurity Forever

Arctic Wolf CEO Nick Schneider joins the Twin Cities Business Show to talk about how artificial intelligence has fundamentally changed cybersecurity. According to Schneider, we are already past the point where humans can defend against agents, and need agents of their own to keep themselves safe. Four key quotes from our interview: “Humans really aren’t able to defend against sophisticated machines, and machines are needed to defend against machines.” We also talk about Arctic Wolf’s agentic security operations platform, how AI agents work alongside humans, the company’s growth to roughly 12,000 customers, and whether Arctic Wolf is headed for an IPO (hint: it sounds like it). We also discuss Schneider’s career at Compellent and Code42, why he joined Arctic Wolf, what makes Minnesota a strong — but imperfect — place to build technology companies, and his recent decision to join the board of Yardstik.

OT Cyber Coalition calls on CISA to issue binding directive establishing federal OT cybersecurity requirements

The Operational Technology Cybersecurity Coalition (OTCC) called on the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to issue a binding operational directive establishing mandatory, enforceable cybersecurity requirements for operational technology (OT) across Federal Civilian Executive Branch (FCEB) agencies. OTCC said existing directives address some OT security requirements but do not establish consistent minimum practices across federal agencies, limiting CISA’s visibility into their security posture. CISA has folded some OT requirements into earlier directives, but no BOD yet sets consistent minimum security practices for federal OT. The OT Cyber Coalition argues that CISA should issue a binding operational directive focused solely on operational technology security. The Coalition recommends that CISA establish an OT BOD requiring Federal Civilian Executive Branch entities with OT systems and assets to achieve specific cybersecurity goals.

Cybersecurity News: Agents vs. Wikipedia, South Korean bank hacks, ASOS breached

In today’s cybersecurity news… Agents trying to compromise Wikipedia tools The Wikimedia Foundation discovered activity by rogue OpenAI agents attempting to compromise its public note-taking tool, Etherpad, as well as edit Wikipedia pages. (The Hacker News) South Korea claims agents were used in bank hacks South Korean President Lee Jae Myung said an initial investigation into recent bank hacks show evidence that they were performed by AI agents. Authorities believe the Chinese cybersecurity tool Artex AI was used to access bank systems. (The Record) ASOS confirms data breach It’s rare for a breach notification to come before a company confirms a breach occurred. (Financial Times, Bleeping Computer) Contractor fired over FBI data breach Reuters sources say that the FBI terminated an Accenture contractor over their role in a data breach that exposed information on thousands of employees.

Cybersecurity webinar features industry expert Stephen Boyer, Oct. 15

From: Division of Information Technology In celebration of National Cybersecurity Awareness Month, the IT Security Office within the Division of Information Technology is hosting a conversation with Stephen Boyer, co-founder and chief innovation officer at Bitsight, a global leader in cyber risk intelligence. The webinar, titled “Life After Mythos: How to Build Resilience as Exploit Windows Collapse” will take place Thursday, Oct. 15 from 11 a.m. - Noon EDT. After the presentation, Boyer will take questions from attendees. The topic will be especially valuable for students preparing for careers in cybersecurity through majors such as Computer Science, Computer Engineering, Electrical Engineering, and Business Information Technology, and current cybersecurity and information technology professionals across Virginia Tech and the region. Add this event to your calendar and plan to join via Zoom Webinar: https://virginiatech.zoom.us/j/84153806013

Cybersecurity Is a Team Sport. Let’s Score It Like One.

And just beyond the fall sports calendar is cybersecurity’s Super Bowl in October: Cybersecurity Awareness Month. Cybersecurity awareness can be transformative when approached the same way. Turn Every Employee Into Part of the Defensive Unit Calling cybersecurity a team sport does not mean transferring responsibility from security professionals to employees. Make October the Start of the Season Cybersecurity Awareness Month is often treated like a championship game. That’s how human performance turns into cyber performance, and how a collection of employees becomes a winning defensive team.