BURLINGTON, Vt. (WCAX) - Cybersecurity professionals and women of all ages converged on Champlain College Friday for the Women in Cybersecurity Summit.
said Lakysha Patnode, an assistant professor at Champlain College and cybersecurity professional.
Patnode knows firsthand the challenges women face getting into the cybersecurity industry.
A few years older, Champlain student Mila Delmas is part of the Women in Cybersecurity Club and helped out at the event.
“I think it’s a great way for women to get their foot in the door of tech, especially since it’s such a male-dominated field.
Oct 23, 2026 · via wcax.com
Researchers at Google's Wiz and the AI firm Calif discovered major vulnerabilities in PHP in August by using advanced AI models from OpenAI and Google.
Major AI companies have been warning about the technology's advancing cybersecurity capabilities since April, when Anthropic announced a limited rollout of its powerful model called Mythos.
Experts believe the PHP security flaws serve as the latest example of what's to come.
"This is a significant week or two in cybersecurity," Krebs told CNBC's "Squawk Box."
—CNBC's Isabel O’Brien contributed to this report WATCH: Chris Krebs on AI discovering cyber vulnerabilities: It’ll get worse before it gets better
Oct 23, 2026 · via cnbc.com
That could still change, of course, and cybersecurity experts warn that the threat will remain for weeks, if not longer.
The flaws were in PHP, a website programming language that is used in an estimated 69% of all websites.
“We have not yet seen these PHP vulnerabilities exploited in the wild yet,” said Sherrod DeGrippo, vice president of threat intelligence at Palo Alto Networks’ Unit 42.
“We have seen over 200 examples of proofs-of-concept exploit code, and we’re actively investigating them all,” she said, referring to programs that claimed they could exploit the PHP flaws.
Those models are not as powerful as those available to front-line cybersecurity researchers — and they typically struggle with complicated vulnerabilities like the PHP flaws.
Oct 22, 2026 · via nbcnews.com
WYOMISSING, Pa. — In recognition of Cybersecurity Awareness Month, the Penn State Berks Department of Information Sciences and Technology will host numerous events and activities to increase awareness about cybersecurity issues and best practices.
The events will be geared toward Berks students, faculty and staff; high school students and educators; and the community.
Students will participate in workshops conducted by Penn State Berks faculty, staff and research students.
HackPSU Saturday, Oct. 24, ECoRE Building, University Park campus Penn State Berks students will travel to University Park to participate in HackPSU, Penn State’s student-run 24-hour hackathon that is held twice a year.
Students, faculty, staff and community members are welcome to attend.
Oct 22, 2026 · via psu.edu
Cybersecurity Career Week October 19-24, 2026 nist.gov/nice/ccw The NICE Cyber Careers Community of Interest (COI) is excited to launch the new Open One Door Project.
This project is a member-led pilot created for Cybersecurity Career Week and aims to move beyond simple career awareness by driving actionable, direct support.
The project encourages cybersecurity professionals, educators, and employers to take single, high-impact actions -- such as mentoring, introductions, or offering hands-on experiences -- that help candidates actively advance along a cybersecurity career pathway.
The NICE Cyber Careers COI is a forum for cyber workforce stakeholders to network, engage in conversations, and share information about cyber career challenges and opportunities.
TODAY'S ACTIVITIES Join us for today’s Cybersecurity Career Week activities: Challenge: Six Day #mycyberjob Media Challenge October 19-24, 2026 (All Week) X, Instagram, Facebook, LinkedIn and other Tag: @NISTCyber Take out your phones, tablets, and computers!
Oct 22, 2026 · via nist.gov
69% reduction in phishing simulation interactions: how Evoriel built a shared cybersecurity culture across 3,500 employees Real estate group Evoriel has made cybersecurity a shared reflex across its entire agency network, using a human-centric, gamified approach tailored to each employee’s role.
“Our main challenge was to familiarise employees in the real estate sector with a topic they often perceived as purely technical: cybersecurity,” explains Cyprien Fernandez.
For Cyprien Fernandez, it was clear that simply meeting compliance requirements would not be enough.
At Evoriel, cybersecurity is no longer the responsibility of technical experts alone.
It is a culture built step by step, agency by agency — and one that continues to grow stronger.
Oct 22, 2026 · via sosafe-awareness.com
The digital tools that allow SEPTA riders to track buses and trains in real time went offline in response to federal cybersecurity recommendations, officials said.
The systemwide alerts on SEPTA's website were disabled Wednesday after federal cybersecurity officials recommended that organizations using PHP, a programming language, immediately install security updates or take affected services offline until they could be secured.
Riders can still access real-time information through the free Google Maps app and the subscription-based Transit app, which officials said has agreed to temporarily remove its paywall to help SEPTA riders.
The PHP code is used on nearly 70% of websites, including SEPTA and its real-time tools for tracking trains and buses.
SEPTA's senior fare card registration site and employee intranet were also affected by the security threat.
Oct 22, 2026 · via nbcphiladelphia.com
Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites.
Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers.
Wiz contacted the PHP security team to let them know about the flaws they had found.
By late September, the PHP developers confirmed that the issue existed, and quietly began working on a fix.
This appears to be what the PHP developers were planning.
Oct 22, 2026 · via theconversation.com
As global regulatory frameworks around cybersecurity and data privacy rapidly evolve, multinational companies face growing pressure to build compliance programs that are both resilient and regionally tailored.
Whether you are addressing federal and state developments in the US, navigating new cyber resilience and data privacy frameworks across the Middle East, implementing EU requirements under NIS2, DORA, the Data Act, and the Cyber Resilience Act, or adapting to the UK's Data (Use and Access) Act, this session delivers strategic insight and practical guidance for today's data-driven enterprise.
CLE credit is pending.
Thursday, October 22, 2026 United States 12:00 p.m. – 1:00 p.m. EDT 11:00 a.m. – 12:00 p.m. CDT 10:00 a.m. – 11:00 a.m. MDT 9:00 a.m. – 10:00 a.m. PDT Europe 5:00 p.m. – 6:00 p.m. BST 6:00 p.m. – 7:00 p.m. CEST
Oct 22, 2026 · via mayerbrown.com
The Petersburg Borough’s website was down for several hours on Wednesday — and it wasn’t the only one.
Operators around the world have taken websites offline to make urgent security updates.
“Have you heard about the PHP security flaws that are affecting a lot of websites this week?”
Instead of the Borough’s website, it was a mostly blank page with an error message.
The Borough’s website was back online around 1:30 p.m. on Wednesday.
Oct 22, 2026 · via kfsk.org
An Indian company’s serious error in creating high-level encryption certificates has prompted major web browsers to block the certificates before hackers can use them to spoof websites.
Certificate issuers use intermediate certificates to “sign” individual website certificates that assure users of the sites’ legitimacy and security.
Because it was trivially easy to break the encryption protecting eMudhra’s intermediate certificates, hackers could have weaponized them to sign fraudulent transport layer security (TLS) certificates that would let them impersonate major companies.
Cutting ties with flawed certificates Leading web browsers responded by severing their trust relationships with the eight weak intermediate certificates.
There is no evidence that hackers generated any fraudulent website certificates by exploiting the weaknesses in eMudhra’s keys.
Oct 21, 2026 · via cybersecuritydive.com
Did you know there are many types of cybersecurity roles and that there are many pathways to a cybersecurity career?
Cybersecurity Career Week (CCW) inspires and promotes awareness of cybersecurity careers, including resources and tools to help learn, communities where you can network and engage, and activities to help you plan your next steps.
Visit our page on Discovering Cybersecurity Careers to learn more about the wide range of career options and find resources such as job descriptions, salary information, employment outlooks, educational requirements, overviews of sample cybersecurity opportunities, and more.
Cybersecurity Career Week is coordinated by the NICE program at the National Institute of Standards and Technology under the U.S. Department of Commerce and supported by a community of government, academic, nonprofit, and private industry stakeholders.
Commercial entities, materials, and resources provided in support of Cybersecurity Career Week may be included in this email or on the nist.gov/nice/ccw website or linked websites.
Oct 21, 2026 · via nist.gov
Cyberr, a global professional network for cybersecurity talent, has announced a partnership with Canada’s Information and Communications Technology Council (ICTC) to support cybersecurity workforce development and help aspiring professionals transition from education into employment.
The collaboration will provide graduates of ICTC’s cybersecurity programs with access to Cyberr’s international network of security professionals, mentors and employers.
The partnership seeks to address these barriers by combining ICTC’s workforce development initiatives with Cyberr’s cybersecurity community and employer network.
The initiative also aims to strengthen ties between cybersecurity talent in Canada and Europe, supporting cross-border collaboration and giving employers access to a wider pool of emerging professionals.
For more information, read the official partnership announcement and Cyberr’s blog on why cybersecurity careers require more than technical skills.
Oct 21, 2026 · via cybersecurity-insiders.com
Fleet Device Management aims to address this challenge by integrating AI governance directly into its existing device management platform, allowing organizations to oversee AI tools alongside software, vulnerabilities, browser extensions and developer applications.
Rather than requiring a separate AI security product, Fleet integrates these capabilities with existing policies, reporting and remediation workflows.
AI inventory and visibility are included in Fleet Free, positioning basic AI oversight as a fundamental component of modern device management.
You need to know which AI tools and packages are running on your devices, what people are feeding them, and whether you can trust them.”
Fleet Announces Virtual Summit on the Future of Device Management Alongside the AI governance launch, Fleet announced its first virtual summit, scheduled for November 10, 2026, at 11 a.m.
Oct 21, 2026 · via cybersecurity-insiders.com
Organisations that cannot quickly patch two critical flaws in PHP should consider taking their websites offline, the EU’s cybersecurity response team has warned.
PHP runs on web servers and powers pages on sites built with WordPress, Drupal, Joomla and Magento.
Attackers have used its flaws before: in 2019, a bug in PHP 7 let hackers take over web servers.
Both are rated 9.2 out of 10 on CVSS, a standard scale for how serious a security bug is, the PHP security team said.
The PHP security team told users to prepare now and to “upgrade as soon as the release is available.”
Oct 21, 2026 · via thenextweb.com
The expanded offerings combine OT SDN visibility, ruggedized security monitoring, lifecycle cybersecurity services and compliance expertise to help operators strengthen resilience and regulatory readiness.
The expanded partnership introduces a direct integration between the Nozomi platform and SEL OT Software-Defined Networking (OT SDN).
Nozomi Networks Guardian security sensors can now be installed directly on SEL-3355 Computing Platforms.
“For more than four decades, SEL has helped protect critical infrastructure and make electric power safer and more reliable,” said Matthew Cowell, Nozomi Networks Vice President of Strategic Alliances.
The OT SDN integration and SEL-3355 Computing Platform with the Nozomi Networks Guardian operating system installed directly on the appliance are currently available.
Oct 21, 2026 · via industrialcyber.co
By Samantha Clark Five Rider seniors finished in second place among 11 teams across the eastern United States in the Oct. 9 Capture the Flag cybersecurity competition hosted by the Consortium for Computing Sciences in Colleges Eastern.
The team consisted of computer science majors Druhv Sethi and Nakul Mittal, cybersecurity majors Ritvik Sajeev and Tanmay Agarwal and computer science and cybersecurity double major Phan An Nguyen, who fell just a few seconds behind the first-place champions after three hours of solving challenges.
With this being the first time Rider students were involved in the competition, the team went into the process blind, but their preparation is what ultimately led them to their great success.
To do so, the team researched the five major topics for the competition and had two students become well versed in each.
Assistant professor in the Department of Computer Science and Mathematics Jay Luo, who aided the team throughout the competition, is a committee member of the conference, placing him close to the organization.
Oct 21, 2026 · via theridernews.com
Security teams need skills in advanced threats, judgement, and stronger governance as AI transforms cybersecurity work Key takeaways AI is turning the cybersecurity workforce challenge from a head-count gap into a skills gap.
94% report cybersecurity skills gaps, led by AI risks and advanced identity and phishing threats.
Barracuda Research’s new Cybersecurity Skills Gap Report draws on our international survey of IT and security professionals in organizations with between 100 and 2,000 employees.
AI is transforming security teams Most (79%) report that AI is already affecting security roles or head count.
Cybersecurity skills and capability gaps are a global, industry-wide challenge.
Oct 21, 2026 · via blog.barracuda.com
The federal government regulates cybersecurity for large portions of the electrical grid, including large scale generation and transmission,” auditors wrote.
However, unlike large-scale electricity providers, municipal power systems — which provide about 16% of Utah’s electricity — have opportunities for improvement in issues, auditors wrote.
None of the five municipal power systems auditors interviewed used independent third-party assessments to evaluate their cybersecurity controls.
“While attacks can be disruptive, the impact on municipal power systems is generally limited to individual power systems unless simultaneous attacks occur,” according to the audit.
Amid those gaps, legislative auditors recommend looking into whether state involvement is necessary “to encourage municipal power systems to improve cybersecurity practices.”
Oct 21, 2026 · via utahnewsdispatch.com
Cyberattacks on critical infrastructure are on the rise, and water utilities can be particularly vulnerable.
Staff from dozens of water utilities across Alabama recently met in Birmingham for two days of training with cybersecurity experts.
That’s what happened when attacks on water systems in multiple states this summer threatened drinking water.
The McCrary Institute is one of several organizations that partnered to put on the event, which Central Alabama Water hosted at its Cahaba Pump Station.
Birmingham-area water utility takes cybersecurity steps Central Alabama Water, which serves the Birmingham area and is the state’s largest water utility, has made moves recently to increase cybersecurity.
Oct 21, 2026 · via wbhm.org