We’re launching the GPT‑5.6 family of models for general availability following our limited preview: our new flagship, Sol, alongside Terra, a balanced model for everyday work, and Luna, our most cost-efficient model. GPT‑5.6 Sol sets a new standard for both intelligence and efficiency, achieving state-of-the-art results across coding, knowledge work, cybersecurity, and science while outperforming previous and competing frontier models with fewer tokens and at lower estimated cost. The result is stronger performance per dollar: more successful work for the same spend, or comparable results at a lower total cost. We also introduce a new way to accelerate the most demanding work: ultra is our highest-capability setting, coordinating multiple agents across parallel workstreams to finish complex tasks faster. Stronger computer use and design judgment make GPT‑5.6 Sol our most polished collaborator yet, helping it inspect, refine, and deliver ready-to-use results. We trained GPT‑5.6 to get more useful work from every token. On Agents’ Last Exam(opens in a new window), an evaluation of long-running professional workflows across 55 fields, GPT‑5.6 Sol sets a new high of 53.6, eclipsing Claude Fable 5 (adaptive reasoning) by 13.1 points. Even at medium reasoning, it beats Fable 5 by 11.4 points at roughly one-quarter the estimated cost. That efficiency extends to smaller models, which are essential to making intelligence more abundant and affordable: GPT‑5.6 Terra and GPT‑5.6 Luna outperform Fable 5 at around one-sixteenth the cost. On the Artificial Analysis Intelligence Index(opens in a new window), a broad measure of intelligence spanning agentic work, coding, scientific reasoning, and general capabilities, GPT‑5.6 Sol with max reasoning comes within one point of Fable 5 while completing tasks in 61% less time at roughly half the estimated cost. GPT‑5.6 launches with our most robust safeguards to date, designed to be resilient against determined and adaptive misuse without broadly
Jul 9, 2026 · via openai.com
The World Cup is on and during the weekend, as I was watching a couple of games (and yes, also enjoying some appetizers) , I was reminded that the teams lifting the trophy aren’t always the most talented. They’re the best prepared. Let’s think about it for a minute. Long before the opening match, the winning teams studied their opponents, refined their tactics, tested different formations, identified how to block a key player on the opposing team (Ronaldo or Messi come to mind) and prepared for situations they hope never happen as they know unexpected challenges are all part of the game. Watching these games made me realize that IT leaders, just as soccer teams and Coaches, face a remarkably similar challenge. The only difference is that our “final match” can happen on any Tuesday morning or even during the weekend. Remember hackers and bad elements don’t work on 90 minutes time frames and they “work” 24/7. A ransomware attack, a failed software update, an accidental deletion (ouch), a cloud outage and the list go on. Unlike soccer, there is no fixture list telling us when disruption will arrive. When it does, it’s too late to discover that your backups haven’t been tested or that your cloud workloads, endpoints, or SaaS applications aren’t fully protected. Over the years, and as mentioned before, I’ve spoken with countless IT professionals, and one thing has always stood out: almost everyone believes they’re prepared. Yet industry research continues to show a different reality. Organizations remain highly confident in their backup strategies while many still experience data loss, lengthy recovery times, and unexpected gaps when a real incident occurs. It’s a little like watching a coach of a national soccer team arrive at the World Cup (place the name of your favorite team here) convinced
Jul 9, 2026 · via blogs.opentext.com
Restaurants’ cybersecurity defenses may not be as bulletproof as they think. That’s according to a new report from cybersecurity company VikingCloud, which argues that many operators are underestimating the risk of a cyberattack. A survey of 50 IT leaders from limited-service chains found that 78% had experienced a cyberattack in the past 12 months, even though 94% said they were confident in their ability to prevent one. More than three-fourths of the attacks exposed sensitive data like payment card info, customers’ personal info, or payroll records. More than a third of leaders said they initially mistook a cyberattack for a routine tech glitch. “Leaders are minimizing the threat of their complex ecosystem,” said Kevin Pierce, president and COO of VikingCloud, in a statement. Multi-unit restaurants are good targets for hackers. They serve a lot of customers and employees and have also been adding a lot more technology in recent years. According to the report, most chains work with six or more third-party vendors per location, and some have up to 99 connected Internet of Things devices in each store. These are all potential paths for hackers to access sensitive data. AI has added another inlet for cyberthreats. Four in 10 restaurants are using AI to answer the phone or take drive-thru orders, the report found, but about a third feel unprepared to respond to AI hallucinations or fraud such as prompt-injection payment bypass, which is when a hacker tricks an AI bot into skipping payment. “Adoption is outpacing readiness,” the report said of voice AI. AI is also helping cybercriminals come up with better scams. Thirty percent of restaurants said they’d experienced fraudsters using AI-generated videos or voice messages to impersonate executives. And 36% said they feel not at all or only somewhat prepared for so-called deepfake attacks like these.
Jul 9, 2026 · via restaurantbusinessonline.com
OpenAI released its latest advanced AI model, called ChatGPT 5.6, on Thursday after earlier delaying the public rollout over US government concerns about cybersecurity. The Trump administration had requested last month that OpenAI limit the release to a small group of government-approved users. OpenAI complied with the White House’s request last month. The company stated in a blogpost that it had briefed government officials on ChatGPT 5.6’s capabilities and restricted the model to trusted partners at their behest. The product’s wider release came after additional testing by the government’s Center for AI Standards and Innovation agency, according to Axios. The staggered release of ChatGPT 5.6 follows similar restrictions on rival firm Anthropic’s latest AI models, also put in place by the Trump administration last month, which resulted in a temporary export ban on the products. Both episodes have brought attention to the cybersecurity risks associated with AI, tensions with US allies over sharing breakthroughs and questions over the US government’s slapdash process for regulating the technology. OpenAI’s ChatGPT 5.6, which includes a flagship product called Sol, claims to be its safest and most capable model yet. It is the company’s answer to Anthropic’s Claude Fable and Mythos models, which rolled out to the public earlier this month after government restrictions. The Trump administration has largely spurned domestic calls for reining in the AI industry and encouraged companies to advance their models as quickly as possible, often citing an AI arms race with China and the need for US dominance over technology. More recently, the threat of destabilizing, AI-driven cyber-attacks has caused the White House to increase its intervention, with Donald Trump issuing an executive order last month calling for a voluntary review process for AI firms to submit their latest models to the government for evaluation. The US restrictions on
Jul 9, 2026 · via theguardian.com
REP LIEU PRESENTS $1,040,000 FEDERAL CHECK TO THE CITY OF MANHATTAN BEACH TO ENSURE CYBERSECURITY OF CRITICAL INFRASTRUCTURE PROJECT
MANHATTAN BEACH, CA — On Tuesday, July 7, The City of Manhattan Beach in partnership with Congressman Ted W. Lieu (D – Los Angeles County) hosted a ceremonial check presentation recognizing $1,040,000 in federal funding secured for the Ensuring Cybersecurity of Critical Infrastructure Project.
“I am pleased to have secured over $1 million to support the Ensuring Cybersecurity of Critical Infrastructure Project,” Congressman Lieu said. “This project will help protect our essential infrastructure from cyberattacks. I’m thankful for the partnerships of local officials to get federal dollars where our community needs them.”
In light of increased threats to water system cybersecurity, this funding will enable Manhattan Beach to make necessary upgrades to its Supervisory Control and Data Acquisition system, to protect it from cyberattacks. These upgrades will include installing fiber optic cables at sites where needed, upgrading programmable logic controllers, as well as adding new switches and more robust firewalls. The investment reflected continued collaboration across federal and local partners.
Jul 9, 2026 · via lieu.house.gov
Zscaler Blog Get the latest Zscaler blog updates in your inbox Why Do F1 Teams Need Cybersecurity, and How Is AI Changing the Threat Landscape? An F1 car doesn’t just burn fuel, it burns data. Across a race weekend, hundreds of onboard sensors generate hundreds of gigabytes of telemetry, and that stream moves constantly, from car to garage, garage to trackside systems, trackside to factory, factory back to the pit wall. The competitive edge lives inside those packets, which is why rivals, criminal groups, and even nation-state actors all have reasons to want in. The story here isn’t “sports security”, it’s modern enterprise security with a stopwatch. F1 runs one of the most exposed data environments in professional sports What is actually at risk Once you picture F1 as a traveling engineering lab, the risk becomes obvious. Modern teams operate on live feedback loops: measure, decide, adjust, repeat. Telemetry isn’t “nice to have”, it’s the blueprint of the car while it’s still being drawn. Teams protect: - Live telemetry streams that reflect aerodynamic configuration, tire strategy signals, engine tuning trends, and even driver biometrics transmitted from car to trackside systems and back to the factory in near real time. - Proprietary software and analytics that turn raw sensor output into decisions, e.g., setup recommendations, race simulations, and reliability predictions. - Business data on the same rails: sponsor financials, contract information, internal planning, and operational documents that travel with the team. - Global operational sprawl: teams compete across 20+ countries in a season. Each venue introduces new networks, new physical access opportunities, and new jurisdictions, meaning the threat profile shifts every few weeks. The crown jewels aren't a single database. They're the services, identities, and workflows that move data through the system. That's where attackers focus. Why third-party access makes it
Jul 9, 2026 · via zscaler.com
AI Threats Redefine Mexico's Cybersecurity Landscape Cybersecurity this week was defined by the rapid escalation of AI-enabled threats targeting critical sectors. Financial institutions faced surging attacks and fraud, researchers identified the first documented agentic ransomware campaign, and industry leaders emphasized that closing the cybersecurity talent gap has become as essential as deploying new defensive technologies. Ready? This is your Week in Cybersecurity! AI-Driven Cyberattacks, Fraud Pressure Mexico's Banks Mexico's financial sector is confronting a dual cybersecurity challenge. While banks continue strengthening defenses against attacks targeting their infrastructure, digital fraud against consumers is expanding alongside the country's rapid adoption of online financial services. Fortinet Urges Women to Study Cybersecurity Amid Skills Gap The accelerating evolution of cyberthreats is colliding with a persistent shortage of qualified cybersecurity professionals, prompting renewed attention on how talent pipelines are built and sustained. Within this context, expanding the participation of women in engineering and information technology has become a strategic priority for organizations seeking to strengthen digital resilience, says Fortinet. Mexico Financial Cyberattacks Surge 167% in 1Q26 Cyberattacks targeting financial institutions and their core operating networks generated approximately MX$67.5 million (US$3.8 million) in losses in 1Q26, according to data disclosed by Mexico’s central bank (Banxico). The figure represents a 167% year-over-year increase compared with the same six-month period in 2025, when cyber incidents generated damages of MX$25.2 million (US$1.4 million). Exploit Attacks Grow in the Americas: Mandiant The modern corporate threat landscape across the Americas faces unprecedented systemic risk driven by a strategic divergence in adversary methods. Financially motivated attackers are compressing deployment timelines, while espionage actors optimize for extreme persistence within critical networks. Latin America Ranks Second in Global ICS Cyber Exposure Phishing campaigns and malicious documents are becoming the primary entry points for cybercriminals seeking to infiltrate industrial environments across Latin America, placing the
Jul 9, 2026 · via mexicobusiness.news
Breaking cybersecurity news, news analysis, commentary, and other content from around the world, with an initial focus on the Middle East & Africa and the Asia Pacific Mexico's New Cyber Plan Faces Its First Real Test The Latin American nation's cybersecurity plan — still in the expansion phase — has to survive its own knockout round during the FIFA World Cup. Mexico adopted its Plan Nacional de Ciberseguridad 2025-2030 — its National Cybersecurity Plan — seven months ago, and while the strategy is still in its "expansion phase," the FIFA World Cup 2026 tournament has become an early test for the government's ability to implement the document, experts say. Drafted by the Agencia de Transformación Digital y Telecomunicaciones (ATDT), or Mexico's Digital Transformation and Telecommunications Agency, the plan aims to guide efforts to update federal legislation and establish cybersecurity capabilities throughout the government. For the current year, the cybersecurity plan calls for the creation of a National Cybersecurity Strategy by the end of the third quarter, the creation of a National Cybersecurity Center to track threats, and greater cooperation between cybersecurity professionals in government, private industry, and academia, according to an analysis published June 25 by threat intelligence firm Recorded Future. The ongoing FIFA World Cup 2026 tournament, which includes three stadiums in Mexico among its venues, casts a spotlight on the country's cybersecurity efforts and is an early test of Mexico's capabilities, the report stated. "Cyber risk around the tournament is likely to be elevated, as the event creates a target-rich environment for ransomware groups, hacktivists, fraud actors, credential thieves, and disinformation networks seeking financial gain or disruption," Recorded Future stated in the report. "If a cyber incident occurs, it will likely shape public debate over cybersecurity in Mexico and attract greater international attention to any perceived gaps." Cybercriminals,
Jul 9, 2026 · via darkreading.com
A recent EvilTokens campaign targeting businesses across the US and Europe is exposing a new email security blind spot. This “ghost phishing” technique keeps the malicious page hidden until it decrypts and comes to life inside the victim’s browser. For security leaders, the risk is clear: traditional URL checks may miss the attack while Microsoft 365 access, sensitive data, and response time are already at stake. The Email Looks Safe. The Browser Tells a Different Story A recent EvilTokens attack shows how a phishing link can appear harmless during initial inspection while still leading to Microsoft 365 account takeover. The kit uses Microsoft Device Code Phishing to convince victims to complete a legitimate Microsoft login flow and unknowingly authorize access to their accounts. It does not need to steal the password directly. The real attack remains hidden until the page opens in the browser. Its HTML is encrypted with AES-GCM and becomes visible only after the browser decrypts it and renders the phishing content in the DOM. As a result, static URL checks and network-level controls may capture the initial response without seeing what the employee actually sees. This visibility gap can lead to: - Longer exposure to the Microsoft 365 account takeover - Delayed containment and response decisions - Unauthorized access to corporate email, files, and cloud services - More uncertain alerts escalated to senior analysts - Higher investigation workload and operational costs - Incomplete evidence for blocking related infrastructure The complete attack flow, however, was uncovered inside ANY.RUN’s Interactive Sandbox. Explore the analysis session to see what the browser revealed and how teams can use this evidence to respond faster. Check recent EvilTokens attack and get relevant IOCs | Complicated ghost phishing revealed inside ANY.RUN’s sandbox | Where Ghost Phishing Is Hitting Hardest ANY.RUN’s Threat Intelligence shows recent
Jul 9, 2026 · via thehackernews.com
Georgia Eye Institute investigating network “unusual activity”; cybersecurity expert weighs in SAVANNAH, Ga. (WTOC) - Georgia Eye Institute confirms it is investigating what it describes as “unusual activity” detected within its network last month. In a statement to WTOC, Georgia Eye Institute said it discovered the activity on June 11 and immediately took steps to protect its systems. “On June 11, 2026, we detected unusual activity within our network. Immediately upon discovery, we took steps to ensure the security of our environment and isolate impacted systems. We are working with our IT professionals and outside experts to restore our systems as quickly as possible and investigate this incident. The investigation remains ongoing and will take some time to complete.” The institute has not said what caused the unusual activity or whether any patient information has been accessed. WTOC followed up with additional questions but has not yet received a response. Robert Sexton, department chair of Cybersecurity and Computer Information Systems at Savannah Technical College, says “unusual activity” is a broad term commonly used during the early stages of a cybersecurity investigation. He says the company appears to be taking appropriate initial steps by isolating affected systems and bringing in cybersecurity experts while investigators determine exactly what happened. “The first step in a cyber investigation is to contain the attack,” Sexton said. “At the same time, you’re preserving evidence. Then investigators determine what systems were affected and what user accounts may have been compromised.” Sexton says if investigators determine patient information was accessed or stolen, the company could have legal obligations to notify those affected within a certain timeframe. Until then, he recommends patients monitor their credit, insurance accounts and watch for any unexpected insurance claims. Georgia Eye Institute says patient care has continued despite the technology issues. “Our primary focus
Jul 8, 2026 · via wtoc.com
Cybersecurity stocks are soaring in 2026. Missed Nvidia in 2009? This Rare Signal Is Flashing Again.In 2009, a "Double Down" signal flashed for a little-known chipmaker called Nvidia. For the first time in years, that same "Total Conviction" signal is flashing for a company 1/100th the size of Nvidia. Continue » *Stock prices used were the afternoon prices of July 6, 2026. The video was published on July 8, 2026. Should you buy stock in CrowdStrike right now? Before you buy stock in CrowdStrike, consider this: The Motley Fool Stock Advisor analyst team just identified what they believe are the 10 best stocks for investors to buy now… and CrowdStrike wasn’t one of them. The 10 stocks that made the cut could produce monster returns in the coming years. Consider when Netflix made this list on December 17, 2004... if you invested $1,000 at the time of our recommendation, you’d have $410,833!* Or when Nvidia made this list on April 15, 2005... if you invested $1,000 at the time of our recommendation, you’d have $1,208,693!* Now, it’s worth noting Stock Advisor’s total average return is 917% — a market-crushing outperformance compared to 209% for the S&P 500. Don't miss the latest top 10 list, available with Stock Advisor, and join an investing community built by individual investors for individual investors. *Stock Advisor returns as of July 8, 2026. Parkev Tatevosian, CFA has no position in any of the stocks mentioned. The Motley Fool has positions in and recommends CrowdStrike, Fortinet, and Rubrik. The Motley Fool recommends Palo Alto Networks. The Motley Fool has a disclosure policy. Parkev Tatevosian is an affiliate of The Motley Fool and may be compensated for promoting its services. If you choose to subscribe through his link, he will earn some extra money that supports his
Jul 8, 2026 · via theglobeandmail.com
Upcoming Webinar Community Fireside Chat | The CMMC Retrospective: An MSP’s Journey to Getting Certified Last year, we asked if you were ready for compliance-driven clients. Now that CMMC is officially here, the conversation has shifted from how to prepare to how to actually cross the finish line. But achieving compliance is rarely a straight line, and the most valuable insights come from looking back. Join us for our August Community Fireside Chat for an unfiltered retrospective on the reality of achieving CMMC clearance. We’re bringing together a panel of MSP peers and compliance experts who have survived the process to pull back the curtain on the mistakes made, the surprises uncovered, and the things they wish they’d known ahead of time. Come hear an honest, open conversation about the unexpected roadblocks and real-world realities of the certification journey so you don't have to learn the hard way. * HUNTRESS WEBINAR GIVEAWAY TERMS. Live webinar participants may be eligible to receive one (1) Nintendo Switch 2™ + Mario Kart™ World Bundle (“Gift”), worth approximately USD $500.00. This gift giveaway (“Giveaway”) is sponsored by Huntress Labs Incorporated (“Huntress”). By registering for the above Huntress webinar (“Webinar”), you accept the following Huntress Webinar Giveaway Terms and all decisions of Huntress, which are final and binding in all respects. NO PURCHASE NECESSARY. PURCHASE OF HUNTRESS PRODUCTS OR SERVICES DOES NOT ENHANCE CHANCES OF RECEIVING THE GIFT. Eligibility: The Giveaway is applicable to individuals who are 18 years of age or older who register for and participate in the Webinar. All applicable laws and regulations apply. Void where prohibited or restricted by law, including, but not limited to, international sanctions. Subject to applicable law, the Gift is offered “as is” without any express or implied warranty of any kind or nature, including without limitation,
Jul 8, 2026 · via huntress.com
Indiana quietly scraps transparency tool, cites cybersecurity concerns
Marissa Meador
Indianapolis Star
July 8, 2026, 4:14 p.m. ET
Gov. Mike Braun's administration has scrapped a transparency tool that allowed the public to search for state employees' roles and contact information after determining the application posed a cybersecurity risk.
The tool allowed the public to find basic information about state employees, including the agency they work for, their work email, their office phone number and their job title. It has been available since at least March 2018, according to the Internet Archive, but appeared to go offline at some point July 8.
Jul 8, 2026 · via indystar.com
When Jeff Bezos said that one breakthrough technology would shape Amazon’s destiny, even Wall Street’s biggest analysts were caught off guard. Fast forward a year and Amazon’s new CEO Andy Jassy described generative AI as a “once-in-a-lifetime” technology that is already being used across Amazon to reinvent customer experiences. At the 8th Future Investment Initiative conference, Elon Musk predicted that by 2040 there would be at least 10 billion humanoid robots, with each priced between $20,000 and $25,000. Do the math. According to Musk, this technology could be worth $250 trillion by 2040. Put another way, that’s roughly equal to: - 175 Teslas - 107 Amazons - 140 Metas - 84 Googles - 65 Microsofts - And 55 Nvidias And here’s the wild part — this $250 trillion wave isn’t tied to one company, but to an entire ecosystem of AI innovators set to reshape the global economy. It’s a leap so massive, it could reshape how businesses, governments, and consumers operate worldwide. Even if that $250 trillion figure sounds ambitious, major firms like PwC and McKinsey still see AI unlocking multi-trillion-dollar potential. How could anything be worth that much? The answer lies in a breakthrough so powerful it’s redefining how humanity works, learns, and creates. And this breakthrough has already set off a frenzy among hedge funds and Wall Street’s top investors. What most investors don’t realize is that one under-owned company holds the key to this $250 trillion revolution. In fact, Verge argues this company’s supercheap AI technology should concern rivals. Before I reveal the details, let’s talk about how some of the richest people on the planet are positioning themselves. - Bill Gates sees artificial intelligence as the “biggest technological advance in my lifetime,” more transformative than the internet or personal computer, capable of improving healthcare, education,
Jul 8, 2026 · via insidermonkey.com
When Jeff Bezos said that one breakthrough technology would shape Amazon’s destiny, even Wall Street’s biggest analysts were caught off guard. Fast forward a year and Amazon’s new CEO Andy Jassy described generative AI as a “once-in-a-lifetime” technology that is already being used across Amazon to reinvent customer experiences. At the 8th Future Investment Initiative conference, Elon Musk predicted that by 2040 there would be at least 10 billion humanoid robots, with each priced between $20,000 and $25,000. Do the math. According to Musk, this technology could be worth $250 trillion by 2040. Put another way, that’s roughly equal to: - 175 Teslas - 107 Amazons - 140 Metas - 84 Googles - 65 Microsofts - And 55 Nvidias And here’s the wild part — this $250 trillion wave isn’t tied to one company, but to an entire ecosystem of AI innovators set to reshape the global economy. It’s a leap so massive, it could reshape how businesses, governments, and consumers operate worldwide. Even if that $250 trillion figure sounds ambitious, major firms like PwC and McKinsey still see AI unlocking multi-trillion-dollar potential. How could anything be worth that much? The answer lies in a breakthrough so powerful it’s redefining how humanity works, learns, and creates. And this breakthrough has already set off a frenzy among hedge funds and Wall Street’s top investors. What most investors don’t realize is that one under-owned company holds the key to this $250 trillion revolution. In fact, Verge argues this company’s supercheap AI technology should concern rivals. Before I reveal the details, let’s talk about how some of the richest people on the planet are positioning themselves. - Bill Gates sees artificial intelligence as the “biggest technological advance in my lifetime,” more transformative than the internet or personal computer, capable of improving healthcare, education,
Jul 8, 2026 · via insidermonkey.com
Costa Mesa-based CerraCap, a venture capital firm, announced yesterday its investment in AI-powered cybersecurity platform MazeBolt, based in Israel.
MazeBolt says it focuses on Distributed Denial of Service (DDoS) attack resilience and continuous security validation.
“MazeBolt represents the kind of cybersecurity platform CERRACAP believes will define the next phase of enterprise resilience,” said Vikas Datt, a general partner at CerraCap. “In an environment where adversaries are increasingly automated, adaptive, and AI-enabled, organizations can no longer rely on periodic testing or static assumptions. MazeBolt provides a continuous, independent validation layer that gives enterprises greater visibility, confidence, and control over their DDoS posture.”
More tech stories:
Jul 8, 2026 · via ocbj.com
Getty Images/iStockphoto CISO's guide to hiring for the right cybersecurity skills The cybersecurity talent gap won't be solved by head count alone. CISOs need to fundamentally rethink how they recruit, how they retain talent and what skills they really need. The cybersecurity talent crisis has moved from a simple numbers problem to a fundamental mismatch between what organizations need and what the workforce can deliver. While 87% of organizations plan to expand their security teams this year, according to Fortinet Training Institute's "2026 Cybersecurity Skills Gap" report, the CyberSeek online data tool found that there are only enough available cybersecurity workers in the U.S. to meet 74% of employer demand. As problematic as that data is, it doesn't encapsulate the full extent of the workforce challenge. Cybersecurity leaders are finding not only a shortfall in the number of cybersecurity professionals, but also a significant misalignment between the available skills in the market and those needed in enterprise cybersecurity departments. Researchers from SANS Institute and GIAC called it "a widening skills gap that organizations struggle to close, even as they increasingly recognize that having the right abilities matters more than simply adding head count," in the "2026 Cybersecurity Workforce Research Report." "The problem isn't a shortage in head count. We're never going to get the numbers we want to get. It's really more about getting the needed skills," said Brian Correia, director of global cyber workforce strategy and engagement at SANS. CISOs must modernize their approach to recruiting workers. This involves moving away from a conventional search strategy and adopting one that creates multiple talent pipelines and emphasizes workforce development to ensure hires continuously learn the latest skills. The impact of the security talent, skills gaps Staffing challenges affect an organization's cybersecurity posture. Recent research from ISC2 found that 88% of
Jul 8, 2026 · via techtarget.com
Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders. The agents are not malicious. They just do a lot of things that, to a behavioral engine, look exactly like an attack. Decrypting browser credentials, listing what sits in Windows' credential store, pulling files down with built-in system tools, writing to the startup folder: these have long been high-signal to defenders. What has changed is who is generating it. On the machines Sophos watched, it was often a developer's AI assistant going about ordinary work. What set the alarms off The analysis draws on seven days of telemetry from June 2026, taken from Sophos's behavioral engine on Windows and counted by unique machines, not raw event volume. It is a narrow window on one vendor's fleet, not an industry census. Sophos's charts put credential access at 56.2 percent of the blocked activity and execution at 28.8 percent: agents reaching for stored secrets, or running code the way attackers do. The biggest credential-access rule, at 42.6 percent of that group, fires when a process uses Windows' built-in Data Protection API, or DPAPI, to decrypt the browser's stored credential data. Sophos calls GStack a widely adopted skill pack for coding agents. Its /browse skill does exactly that, running PowerShell that calls DPAPI to unlock saved browser data. Sophos caught it running under Claude Code. In context, it is almost certainly browser automation on the user's behalf. To the detection engine, it is credential theft, and the rule is right to fire. Some Python examples looked worse on paper. In one instance, Claude Code shut down the running browser and ran a script that pulled data from its credential
Jul 8, 2026 · via thehackernews.com
Oregon Tech recently hosted two free cybersecurity camps for middle and high school students, giving participants the opportunity to learn about online safety, cybersecurity tools, and technology career pathways. The camps were held at the Klamath Falls campus in June through Oregon Tech's Educational Partnerships and Outreach (EPO) program and welcomed 30 students for free instruction, hands-on learning experiences, and lunch each day. Both camps were designed and led by Praveen Guraja, Ph.D., Assistant Professor of Cybersecurity and Information Technology, and Manish Nalluri, Visiting Instructor in Applied Computing and Geomatics. In Cyber Explorers: Defend, Discover, Design, middle school students were introduced to cybersecurity concepts through activities focused on digital citizenship, online safety, passwords, phishing detection, cryptography, and basic cybersecurity investigations. High school students in Cyber Ops: Hack, Defend, Secure, explored more advanced topics, including ethical hacking, digital forensics, network analysis, cryptography, and cyber defense tools. Students participated in group projects, hands-on labs, cyber detective activities, Capture the Flag competitions, and challenge-based games that required teamwork and problem-solving. Among the most popular activities were Capture the Flag challenges, phishing detective exercises, cryptography labs, Kahoot review games, and an escape-room-style lock box challenge. "The students were engaged and quickly connected what they learned to real-world situations," said Guraja. "They were not just listening to cybersecurity concepts. They were practicing them, solving puzzles, working in teams, presenting their findings, and building confidence." Students learned practical skills for recognizing phishing attempts, creating stronger passphrases, understanding how computer networks operate, analyzing digital information, and identifying cyber threats. Participants also earned an industry-recognized cybersecurity credential. "It is important for students to learn cybersecurity at this age because they are already active online and constantly interacting with digital systems, games, apps, school platforms, and social media," said Guraja. "Helping them understand cyber threats early gives them the
Jul 8, 2026 · via oit.edu
Dive Brief: - More than half (52%) of retailers are pouring $50 million or more into digital technology annually, according to KPMG’s recent survey of 250 retail executives across sectors. That includes 28% who are allocating between $100 million and $250 million. - Nearly half (48%) of respondents said the cost of technical debt, defined by IBM as the future costs stemming from shortcuts and flawed decisions during software development, prevents them from investing in other technologies. This is lower than the 63% average across industries. - The majority (86%) of respondents said their tech enhancements are “frequently improving business value.” Furthermore, most have realized between 31% and 40% of their total financial value from AI and other intelligence tech tools, per the report. Dive Insight: As AI tools proliferate throughout the retail industry, a narrative shift is underway, KPMG noted in its report. While retailers focused on digital transformation a few years ago, AI has become a ubiquitous tool to help companies gain a competitive edge and drive future growth, the report said. Currently, 42% of the surveyed executives said their company is innovating and deploying AI use cases at scale, but 74% expect that to be the case in 12 months’ time. AI and automation, including generative AI and agentic AI, is also one of the top areas where retailers expect to increase their investment. Forty-two percent said they would do so, compared to 52% who will increase spending on cybersecurity and 49% who plan to boost investments in data and analytics. While some retailers are diving headfirst into their AI integrations, others are balancing AI tools with human connection. During the Shoptalk Spring 2026 event earlier this year, Denise Paulonis, CEO of Sally Beauty Holdings, noted that the beauty business remains reliant on a personal touch. “AI
Jul 8, 2026 · via retaildive.com