Audio By Carbonatix Frontier Airlines got hacked, and now it’s getting smacked with two separate lawsuits. Both an employee and a customer filed lawsuits against the Denver-based airline on July 15, alleging that the company failed to meet the Federal Trade Commission’s data security guidelines by failing to protect information and to alert potentially affected people when a data breach occurred. Both lawsuits were filed in the United States District Court for the District of Colorado and currently seek class certification. Frontier declined to speak directly about the lawsuit, but the airline immediately “initiated our incident response protocols, notified law enforcement and engaged a third-party cybersecurity firm to conduct a comprehensive investigation,” according to spokesperson Rob Harris. “We are in the process of notifying affected individuals and are otherwise complying with all applicable requirements,” he tells Westword. The incident began in May, when Frontier was attacked by hacker group Scattered Lapsus$ Hunters (yes, that’s the real name). Frontier was then attacked again in June, according to one of the lawsuits, leading to the collection of both employee and customer Personally Identifiable Information (PII). Held for ransom Scattered Lapsus$ Hunters is considered a “supergroup” of multiple hacking collectives, including Scattered Spider, LAPSUS$ and ShinyHunters. In addition to its ability to create fantastic names, the group has extorted hundreds of millions of dollars since its founding in 2025, according to Dataminr. Both lawsuits against Frontier say the company hasn’t publicly announced whether a ransom was presented or paid. They point at a faulty security system and argue that the airline was negligent in protecting both client and employee info. “[Frontier’s] cyber and data security systems were so completely inadequate in that it allowed cybercriminals, including at least Scattered Lapsus$ Hunters, to obtain files containing a treasure trove of thousands of its employees’
Jul 17, 2026 · via westword.com
In July 2026, the Department of War suspended Phase II of its Cybersecurity Maturity Model Certification (CMMC) program, a requirement that would have forced more than 100,000 defense contractors into costly third-party cybersecurity assessments starting this November. The program stalled under its own weight: compliance costs approaching $600,000 per organization and a severe shortage of qualified assessors to conduct the certifications. Accounting and tax firms don’t fall under CMMC. But the pattern deserves attention from anyone advising clients on compliance and risk. A federal deadline was delayed, and it’s tempting to read that as license to delay related work elsewhere. For firms managing client financial and tax records, that instinct is worth resisting. Obligations under the FTC Safeguards Rule and GLBA don’t move just because a different program’s timeline did, and client financial data remains a high-value target for cybercriminals regardless of what happens in the defense sector. The Real Lesson Behind the Suspension Government compliance programs get delayed, revised, or scrapped with some regularity. The underlying risk they were designed to address rarely follows suit. For firms serving clients who depend on the confidentiality of tax records, banking details, and payroll information, a documented, consistently enforced security policy isn’t a box to check when a regulator demands it. It’s a baseline expectation clients increasingly assume is already in place. Firms that treat cybersecurity policy as an ongoing practice, rather than a reaction to the next compliance deadline, tend to identify gaps before they become incidents. That distinction matters most during filing season, when client data volume peaks and downtime carries the highest cost. Practical Steps Firms Can Take Now - Formalize a written information security policy (WISP). This is already an expectation under the FTC Safeguards Rule, and having it documented protects both the firm and its clients. -
Jul 17, 2026 · via cpapracticeadvisor.com
COMMENTARY: In just 18 months, AI systems have moved from barely performing entry-level security tasks to autonomously discovering and exploiting vulnerabilities across open-source and production environments.As open-weight models close the gap with frontier systems, AI-driven vulnerability discovery has rapidly expanded. It’s become accessible, affordable, and routine, ushering in a new era of AI for security.[SC Media Perspectives columns are written by a trusted community of SC Media cybersecurity subject matter experts. Read more Perspectives here.]However, a growing remediation deficit has emerged. While discovery accelerates, the ability to fix what’s found has not kept pace, creating a widening gap between exposure and resolution.We’ve already seen this deficit play out. At DEF CON 32 Semifinals, AI systems advanced in just one year, moving from partial effectiveness to near-systemic capability, by identifying the majority of planted vulnerabilities while also surfacing previously unknown real-world issues at low cost.These capabilities are no longer isolated or experimental. The math has fundamentally changed, and the remediation deficit has become a defining constraint on security itself, in an era of AI-driven security operations.It’s clear we’re doing business in a dense vulnerability landscape. Vulnerabilities appear throughout complex systems and require approaches that account for that density. Today, we have to keep pace with the speed and scale of discovery across organizational, technical, and economic systems, while continuously reducing exposure.Our industry will shape the next phase of cybersecurity by how effectively we evolve remediation to match a world where continuous discovery continues to expand.Nidhi Aggarwal, chief product officer, HackerOneSC Media Perspectives columns are written by a trusted community of SC Media cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial. The illusion of scarcity Security teams have traditionally assumed that
Jul 17, 2026 · via scworld.com
Quanta Tech Systems LLC reaches profitability after helping 500+ private clients improve their cybersecurity and digital safety. NEW YORK, NY, UNITED STATES, July 17, 2026 /EINPresswire.com/ — Quanta Tech Systems LLC has turned profitable after a year spent advising more than 500 private clients in the United States and abroad on cybersecurity. The New York company is now hiring to enter its next phase of growth. Most of those 500 clients aren’t corporations with a security department. They’re parents locking down their kids’ accounts, families securing home devices and personal messages, people trying to figure out whether a call or email is a scam. A year ago, cybersecurity consulting for individuals wasn’t really Quanta Tech Systems’ core business. Now it’s 500 clients deep and the thing the company measures itself by. “When we started, cybersecurity was still largely viewed as something companies invested in. But the reality has changed. Today everyone has a digital identity, personal data, and people they want to protect. Parents think about their children’s accounts, families face online fraud, older people are targeted by increasingly sophisticated scams. Our job as a technology company is to make security easier to understand and easier to get,” says Vasyl Zahorodniuk, founder and CEO of Quanta Tech Systems. The consultations are built around the same idea: give people something they can actually use, not a lecture on threat models. Clients leave with specific steps for their situation, not a generic checklist. “Technology creates real value when it gives people more confidence and less to worry about. Security lets us communicate, work, manage money, and look after our families with less uncertainty. That’s the impact we’re after,” Zahorodniuk says. Profitable, and hiring Profitability gives Quanta Tech Systems a stronger base to build on. The company is hiring across cybersecurity, software development,
Jul 17, 2026 · via kitsapsun.com
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was observed using an "unprecedented" four-tier blockchain-based command-and-control (C2) infrastructure spanning Tron, Aptos, and Binance Smart Chain to deliver a remote access trojan (RAT) capable reverse shell, credential harvesting, file exfiltration, and persistent backdoor injection. "This tactic makes disabling or destroying the C2 infrastructure extremely difficult," Checkmarx researcher Pavan Gudimalla said in an analysis published last month. The activity has been attributed to a threat actor named SuccessKey, with evidence of malicious activity detected as far back as February 27, 2026, when cryptocurrency wallets linked to ViteVenom were activated. While the typosquats published to npm in connection with ChainVeil masqueraded as libraries for Tailwind, Sass, ORM, and rate-limiting tools, the latest iteration specifically focuses on developers building applications using the Vite JavaScript and frontend build tool. The list of identified packages, published between June 29 and July 3, 2026, is below - - @uw010010/vite-tree (1070 Downloads) - @vite-tab/tab (289 Downloads) - @vite-ln/build-ts (252 Downloads) - @vite-mcp/vite-type (239 Downloads) - @vite-pro/vite-ui (200 Downloads) - @vitets/vite-ts (194 Downloads) - @vite-ts/vite-ui (176 Downloads) Another crucial difference between the two clusters is that, unlike ChainVeil's unscoped typosquats (e.g., "rate-limit-flexible"), ViteVenom makes use of scoped package names in an attempt to impersonate the "@vitejs/*" namespace and lend it a veneer of legitimacy. The main aspect that unites the two campaigns is the use of shared tier-2 infrastructure, which is used to deliver the RAT. Specifically, this involves the same Tron wallet and Aptos account addresses, which point to the same Binance Smart Chain (BSC) transaction leading to the malware. Like in the case of ChainVeil, the
Jul 17, 2026 · via thehackernews.com
Illumio Founder and CEO Andrew Rubin explains why Mythos and other frontier AI models are shattering cybersecurity’s operating model – and why resilience is the only way forward Cyber-security has long rested on a single, uncomfortable assumption: attackers only have to be right once, while defenders have to be right every time. The odds were bad, but the fight was at least fair. Both sides operated at human speed. Humans found vulnerabilities. Humans built exploits. And humans on the other side drove the defense. That equilibrium is gone. In April 2026, Anthropic announced Mythos Preview, an AI model that autonomously discovered thousands of previously unknown vulnerabilities across every major operating system and browser, including flaws that had survived decades of human review. The implications were severe enough that Anthropic withheld public release, fearing that the model could dramatically accelerate cyberattacks if it were widely accessible. CEO Dario Amodei warned of a six- to 12-month window to patch tens of thousands of flaws before rival models caught up. Andrew Rubin, founder and CEO of Illumio, calls it a breaking point for cybersecurity’s old assumptions. “AI didn’t just raise the stakes,” he says. “It changed the rules.” In a recent episode of The Segment podcast, Rubin lays out what this means for the industry. He’s spent 13 years building Illumio around the premise that breaches must be contained because they can’t be prevented. That’s always been true, he says, but Mythos finally proves it. “We’re investing more and more money to get worse and worse outcomes, but we literally keep doing the exact same thing over and over again,” he said. AI just made the math asymmetric Some observers suggest AI can also generate patches at machine speed, neatly cancelling the threat. But Rubin compares that logic to the Covid-19 vaccine rollout.
Jul 17, 2026 · via reuters.com
Updated: 2 hours ago
|The “Welcome to Fabulous Las Vegas” sign glowed pink and green to welcome Alpha Kappa Alpha’s 72nd International Boule.
Updated: 2 hours ago
|LVMPD’s Bolden Area Command hosted “Splash with the Badge” at the Bill and Lillie Heinrich YMCA near Meadows Mall.
Updated: 2 hours ago
|Pitcher J.T Ginn has been a major contributor to the A's 2026 starting pitching staff
Updated: 2 hours ago
|A Las Vegas Little League team is one step closer to making it to the Little League World Series.
Updated: 2 hours ago
|HomeAid Southern Nevada is accepting donations and volunteers online after its trivia night fundraiser
Updated: 2 hours ago
|Las Vegas police are investigating a shooting near W Sahara Ave and Rancho Dr
Jul 17, 2026 · via wtvm.com
Skip to main content
Mobile Menu Icon
Thumbnails
View Thumbnails
More Galleries
More Galleries
1/7
Close
Close
Even doctors can be fooled by deepfake X-ray images, posing risk to cybersecurity & health
Radiologists look at thousands of images every year (Photo: SBG)
Read article
Read The Article
SHARE
Facebook Share Icon
X Share Icon
Send via Email Share Icon
Jul 17, 2026 · via cbsaustin.com
Beacon Security, a cybersecurity startup developing tools for AI-driven security operations, has raised $13 million in seed funding as companies look for ways to manage growing risks tied to artificial intelligence. The round was led by Notable Capital, with participation from Holly Ventures, AlphaDrive Ventures, SVCI, Jefferies Family Office and more than 60 cybersecurity founders and chief information security officers. Investors include founders from Talon, Descope, Gem Security, Dig Security and Cider Security. Beacon said it will use the funding to expand its platform, which is designed to give security teams and AI agents a cleaner and more reliable data foundation for detecting, investigating and responding to cyberthreats. The company, founded in 2024, says it has seen rapid early adoption among enterprise customers in sectors including financial services, insurance, technology, health care and hospitality. Beacon said its annual recurring revenue grew more than 300% in the first half of 2026, though it did not disclose revenue figures. Beacon is led by co-founder and CEO Gal Tal-Hochberg, who previously founded HiredScore, an HR technology company acquired by Workday for $520 million. He founded Beacon with Or Mattatia and Iddo Israely, who have backgrounds in cyber defense, offensive security and large-scale data infrastructure. “The acceleration of AI agents in the enterprise is creating a distinct need for a legible context layer for cyber defenders, which is fueling a fundamentally new security architecture,” Tal-Hochberg said. “We built Beacon to solve these challenges by providing the trusted data layer that allows organizations to deploy security agents compliantly and effectively.” Beacon’s platform sits between a company’s security data sources and the tools used by analysts. It is intended to normalize, enrich and organize data from multiple vendors so both human analysts and AI agents can work from a more complete and reliable picture. The company
Jul 16, 2026 · via ynetnews.com
DENVER, July 16, 2026 (GLOBE NEWSWIRE) -- Today, NexusTek, a leading provider of secure, scalable IT solutions, is expanding its managed IT, cybersecurity, and private cloud services portfolio to the financial services industry with a new suite of industry-focused managed, professional, and advisory services. Designed for mid-market banks, insurers, asset managers, capital markets firms, and payment processors, these services help financial services institutions strengthen their security posture and close cyber resilience gaps, and modernize their technology infrastructure without expanding internal IT teams. Financial institutions face some of the highest cybersecurity risks of any industry and many are challenged to keep pace with evolving threats using limited internal resources. "For too long, financial institutions have treated cybersecurity as something they revisit once a year. That’s no longer enough,” said Hamilton Yu, CEO at NexusTek. "The threats change every day, and organizations need continuous visibility into their security posture. We built this practice so mid-market organizations have access to the expertise they need without having to build a larger team." "Most mid-market organizations face the same challenge,” Yu added. “There’s a gap between what their internal teams can realistically support and what today’s threat environment demands. We built this practice to close that gap by giving financial services leaders a single partner across private cloud, cybersecurity, advisory services, and AI." What’s Included: NexusTek Managed IT and Cybersecurity Services The expanded offering begins with a no-cost cybersecurity and compliance assessment that evaluates an organization’s current security posture, identifies gaps, and delivers a clear prioritized roadmap. From there, clients can access an integrated portfolio of services, including: - Dedicated Private Cloud Infrastructure with built-in SOC 1 and SOC 2 reporting - Managed Detection and Response (MDR) with a 24/7 Security Operations Center - vCIO Advisory for ongoing strategic guidance - Co-Managed IT and Help
Jul 16, 2026 · via wboc.com
Back-to-school operations at Evanston Township High School will be impacted this fall by the ransomware attack that occurred June 7, District 202 officials said on Thursday. Superintendent Marcus Campbell announced the upcoming impacts in an email to families July 16. “While we are ready and excited to welcome students back, some of the tools, processes, and timelines our families and staff have come to expect will not yet look or function as they have in the past,” Campbell wrote in the email. “Some of these changes reflect our ongoing recovery from the cybersecurity incident, while others represent new systems and processes that will support our district moving forward.” These changes might include new technology platforms, updated back-to-school procedures, and regular services that might be restored in phases, the email states. “Families will not need to re-enroll or complete additional steps outside of typical back-to-school practices,” Reine Hanna, spokesperson for the district, wrote in an email to the RoundTable. “There will be some updated processes and new tools introduced for daily operations and school functions this year, and we will share those details with families as part of our back-to-school information.” According to Hanna, the district continues to work with external cybersecurity experts to investigate if any information may have been accessed by the cyber attackers. “We do not yet have definite findings,” Hanna wrote. “If the investigation determines that an individual’s personal information was affected, the district will provide notification in accordance with applicable law.” The work following the attack has focused on both bringing systems back online and rebuilding technology infrastructure in a way that is secure, reliable and built for the future, Campbell wrote. Details will be shared with families as part of back-to-school information, the district said. ETHS resumes classes on Monday, August 17. ETHS has not
Jul 16, 2026 · via evanstonroundtable.com
Uganda has launched an updated National Information Security Framework (NISF) 2026 to strengthen cybersecurity and provide government institutions with guidelines for protecting digital infrastructure. The framework, launched by the Ministry of ICT and National Guidance, comes as Uganda faces growing cyber risks, with the country reporting a rise in online attacks and financial losses linked to cybercrime. According to industry experts, Uganda has recorded a 60% year-on-year increase in cyberattacks, including a UGX 62 billion ($16.8 million) incident involving the central bank. As governments across Africa increasingly prioritise cybersecurity as part of digital transformation efforts, the ministry said the updated framework demonstrates its commitment to expanding digital services while protecting information systems. Developed under the Uganda Digital Acceleration Project, the updated NISF provides security tools and minimum controls to help institutions strengthen resilience against cyber threats. It aims to protect critical infrastructure and increase confidence in digital public services. Speaking at the launch, Justine Kasule Lumumba, minister at the Ministry of ICT and National Guidance, said information security has become a matter of national security, economic development and public trust. "As government delivers more services digitally, we must ensure those services are safe, reliable and trusted. Information security is no longer just an ICT issue. It is a matter of national security, economic development, public service delivery and public trust. Cyber safety is everyone’s responsibility," said Lumumba. Lumumba urged government entities to collaborate with the National Information Technology Authority – Uganda (NITA-U) to implement the required security measures. Dr Hatwib Mugasa, executive director of NITA-U, said the framework provides a practical roadmap to move from cybersecurity awareness to implementation, supporting Uganda’s goal of creating a secure and resilient digital environment. Share
Jul 16, 2026 · via itweb.africa
- Foundational Protection. Districts should prioritize next-generation firewalls, endpoint security, email security, and identity and authentication tools. These address the most common entry points for cyberattacks and serve as core components of a modern cybersecurity stack, helping to secure networks, devices, user accounts and communications. - Backup and Recovery. Districts need robust backup, recovery and continuity capabilities that will enable them to resume operations quickly if a breach or outage occurs. They should also have detailed, well-documented incident response plans with clearly defined roles and responsibilities that address incident management, mitigation, analysis, reporting and communication. - Internet of Things Ecosystems. Network-connected devices such as door systems, video cameras and printers are among the most commonly overlooked risks in K–12 environments. Advanced endpoint protection, strong access controls, network segmentation and other tactics can help contain attacks and ensure that every device on the network has proper security. - Cybersecurity Training. Districts need frequent, structured cybersecurity education, which can include alerts to prevalent threats, training campaigns and simulated attacks. Training should be both broad, reaching everyone in the district, and role-based, providing deeper training for staffers whose positions and data access warrant further education. - Risk Assessment. A comprehensive risk assessment service can provide a realistic look at vulnerabilities and recommend effective solutions. These insights can help district leaders achieve buy-in for cybersecurity investments and make informed, strategic decisions.
Jul 16, 2026 · via edtechmagazine.com
The best penetration testing tools for cybersecurity are not limited to enterprise or paid tools alone. Moreover, the tools are limited in scope, often focusing on a single pentesting activity. To help decide which penetration testing tool is best for you, consider the purpose for which you need it. Tools such as Nmap, Unicornscan, or fping are useful for network scanning; Exploit Pack or BeEF are useful for exploitation; and Burp Suite or XSSer for web app testing. Cybersecurity is not just about defending against attacks; it’s about staying one step ahead of potential threats. This is where pentesting (short for penetration testing) plays a critical role. By simulating real-world attacks to uncover weak spots before someone else does, pentesting helps secure small businesses and major enterprises. And having the right tools makes all the difference. In this guide, we list 35 of the most effective pentesting tools, including 27 traditional tools and 8 cutting-edge AI pentesting tools that are streamlining vulnerability assessment and exploitation techniques in 2026. Whether you’re looking for free pen testing tools, fully automated solutions, or open-source penetration testing tools that can be customized and built on, the list below offers a range of options to enhance your toolkit. 27 Penetration Testing Tools Traditional penetration testing tools remain vital. From network analyzers to password crackers, these tools form the backbone of any security professional’s toolkit. Network Scanning and Enumeration - Nmap: A versatile network scanner, Nmap is used for host discovery and service enumeration. It supports various scanning techniques to identify open ports and services. - Masscan: A high-speed, open-source port scanner that can scan the entire IPv4 in minutes using asynchronous TCP SYN scanning, provided sufficient bandwidth is available. It is optimized for large-scale port discovery across vast IP ranges. - Angry IP Scanner: A
Jul 16, 2026 · via eccouncil.org
ALLENTOWN, Pa. - Cedar Crest College has identified a significant cybersecurity incident that is affecting portions of the College’s technology environment, according to a social media post.
Upon becoming aware of the incident, Cedar Crest initiated its emergency response protocols to contain the threat and protect its data, according to the college.
The college says it is investigating the incident, working to secure its systems, and taking steps to restore affected services safely.
Cedar Crest has shared that they understand this situation may cause concern for members of the community, and they are committed to sharing accurate information as it becomes available.
For more information and updates, please check Cedar Crest’s webpage. https://www.cedarcrest.edu/cybersecurityupdate/
Jul 16, 2026 · via wfmz.com
- Safe Mode
What the Section 702 lapse means for cybersecurity
For the first time in its operational history, FISA Section 702 has lapsed, plunging U.S. intelligence agencies and telecom providers into a highly uncertain “grey zone.”
In this episode of Safe Mode, host Greg Otto sits down with Glenn Gerstell, former NSA General Counsel and senior adviser at the Center for Strategic and International Studies (CSIS), to navigate the fog of this unprecedented lapse. While the government is temporarily coasting on grandfathered certifications, the operational reality is getting increasingly dicey. Gerstell explains what this lapse actually means for the future of U.S. cyber defense, how political friction is complicating long-term planning, and why temporary stopgaps are creating unnecessary hurdles for the agencies trying to keep us safe.
Jul 16, 2026 · via cyberscoop.com
CrowdStrike and Schwarz Digits Expand Strategic Partnership to Deliver Sovereign Cybersecurity Across Europe As part of the expanded partnership, “Organizations globally are increasingly prioritizing sovereignty without wanting to compromise on cybersecurity outcomes,” said Falcon Exposure Management: Built for the Frontier AI Era Falcon® Exposure Management is the foundation for securing organizations in the frontier AI era. Traditional vulnerability management cannot keep pace, leaving teams to chase every finding while attackers target the few that matter. Falcon Exposure Management replaces that model with continuous, real-time visibility across the attack surface and prioritization based on real-world exploitability, so teams eliminate the exposures attackers are most likely to exploit. Built on the Falcon platform, detection, response, and remediation move as one, closing the gap between finding risk and stopping the breach. This is why organizations are standardizing on Falcon: according to IDC, they replace an average of five point tools with the single, real-time view of risk that fragmented tools could never deliver.¹ Extending Sovereign Cybersecurity Across Europe The partnership deepens the strategic relationship between “European organizations should not have to compromise on cybersecurity for sovereignty,” said Expanding Falcon Platform Access Across Europe As part of the partnership, the Falcon platform will be available to European organizations through STACKIT, extending access across the region. Combining A Pathway for XM Cyber Customers to Move to the Falcon Platform XM Cyber, a 2025 Gartner® Magic Quadrant™ Challenger for Exposure Assessment Platforms, built a successful business across European markets. XM Cyber will continue to operate and support its existing customers, who will have the opportunity to adopt the Falcon platform through Falcon Flex and join organizations already standardizing on Falcon to stop breaches in the frontier AI era. Additional Information At closing, About Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform
Jul 16, 2026 · via ir.crowdstrike.com
Skip to main content
Mobile Menu Icon
Thumbnails
View Thumbnails
More Galleries
More Galleries
1/7
Close
Close
Even doctors can be fooled by deepfake X-ray images, posing risk to cybersecurity & health
Radiologists look at thousands of images every year (Photo: SBG)
Read article
Read The Article
SHARE
Facebook Share Icon
X Share Icon
Send via Email Share Icon
Jul 16, 2026 · via wgxa.tv
BioBuzz’s Buzzin’ Brood Student Spotlight series celebrates the next generation of life sciences talent — and the programs, institutions, and organizations investing in them. Name: Emmelyne Diep Hometown: Clarksburg, MD Institution: University of Maryland, College Park (College Park, MD) Role: Student Ambassador, BioBuzz Networks (Summer 2026) By the time she started high school, Emmelyne Diep was already troubleshooting real infrastructure in a college cybersecurity lab — the kind of experience most students don’t get until their first internship. Through Montgomery College’s dual-enrollment program, she earned her Associate of Applied Science in Cybersecurity while working hands-on as a student assistant in the college’s Cyberlab. Now an Information Science student at the University of Maryland (Class of 2027), Emmelyne is balancing Treasurer roles for Women in Cybersecurity (WiCyS) and InfoSci Fi, as well as serving as Data Archivist for the UMD Coffee Club. This fall she’s joining the UMD Fellows Program, pairing her technical background with public service leadership training. This summer, she’s expanding her curiosity in the life sciences as a Student Ambassador within BioBuzz’s BioCatalyst program, made possible through TEDCO’s Equitech Growth Fund. We sat down with Emmelyne to talk about her path into cybersecurity, what’s exciting her right now, and where she sees herself headed next. How did you get here? My journey into tech and data started early in high school, where I immersed myself in the dual-enrollment program at Montgomery College. Through that program, I earned my Associate of Applied Science in Cybersecurity while working as a student assistant at Montgomery College’s Cyberlab — troubleshooting technical infrastructure hands-on. That experience solidified my passion for computing, data structuring, and ethical security frameworks. I’m motivated to connect technical frameworks with human-centric systems, which is why I chose to pursue my Bachelor’s in Information Science at the University of Maryland,
Jul 16, 2026 · via biobuzz.io
The Canadian Securities Administrators (CSA) has published Staff Notice 33-322, Review of Registered Firms' Cybersecurity Practices and Additional Guidance, following a compliance examination of 73 registered firms' cybersecurity practices. The examinations covered cybersecurity policies and procedures, employee training, risk assessments and controls, oversight of third-party service providers, and incident response planning. The CSA found that a number of firms, particularly larger ones, had robust cybersecurity frameworks in place, but also identified gaps where firms could strengthen their practices. Compliance feedback has been provided to the relevant firms to address the findings, and the notice sets out scalable guidance intended to apply to firms of all sizes, recognizing that cybersecurity risks and resources vary across registrants. Stan Magidson, CSA Chair and Chair and CEO of the Alberta Securities Commission, said the CSA wants to be clear with registrants that strong cybersecurity practices are not optional in today's threat environment. "Our guidance is intended to help firms establish and maintain cybersecurity practices that are appropriate to their size and operations, and are responsive to an evolving threat landscape," he said. Magidson added that cybersecurity risks continue to grow on many fronts as firms rely more heavily on digital tools, hybrid work arrangements, and online platforms to serve clients, and that while the examinations found many firms have frameworks in place, they also identified areas where some firms could strengthen their practices. Staff expect firms to have cybersecurity practices relevant to their business and are encouraging registrants to review the notice and assess whether their own practices can be strengthened. The CSA's findings land alongside a wider push across Canadian financial regulators to tighten cyber expectations, one that increasingly touches the insurance sector directly. The Office of the Superintendent of Financial Institutions, which regulates federally regulated insurers alongside banks, has its own Guideline
Jul 16, 2026 · via insurancebusinessmag.com