No-frills tech news

The internet is having a very bad cybersecurity day

The internet is having a bad day, from a cybersecurity perspective. Government websites around the world went offline, Reuters reported, after AI discovered critical security vulnerabilities that impacted the programming language PHP. But the PHP update wasn’t the only headache cybersecurity folks were facing on Wednesday. (The latter is a reference to the critical security vulnerability in the OpenSSL cryptographic software library.) Though the issues were unrelated to each other, their back-to-back arrival highlights the challenges cybersecurity teams now face.

A way to fix the federal government’s approach to cybersecurity compliance

These directives demand continuous compliance, and it’s no surprise that federal cybersecurity professionals are struggling to keep up. Combine that with the well-documented federal government cybersecurity talent shortage, and it’s no surprise the government’s “consult and advise” approach to GRC has become expensive, error-prone and unsustainable. GRC engineering offers a way forward by approaching compliance the same way modern teams approach building software. The GRC engineering approach represents the technical implementation of that vision. GRC engineering is not just beneficial but essential for federal agencies.

Polis order boosts career pathways for students completing AP Cybersecurity course

Jared Polis on Tuesday ordered state agencies and higher-education institutions and the Colorado National Guard to boost the benefits they offer to students who pass the AP Kickstart Cybersecurity exam. “An all-government approach” Finally, the executive order directs the Colorado National Guard to consider qualifying scores from the AP Cybersecurity exam when assessing someone who has applied to serve in the Guard. AP Kickstart Cybersecurity courses teach students to secure spaces, networks, devices, applications and data, and they do so with an interactive curriculum that lets students assess vulnerability of systems and deal with threats in real-world scenarios. “I believe that students are in critical need of obtaining these skills before we enter the workforce,” Garland told the crowd. “I hope other students will see this as a chance to build on their skills.”

Day Two of Cybersecurity Career Week: Exploring Cyber Careers

Did you know the NICE Workforce Framework for Cybersecurity (NICE Framework) provides a foundation for people who are exploring cyber careers? You can use the NICE Framework to explore cybersecurity careers, build your skills, help in hiring and career planning, and much more. Whether you are just starting out or looking to map out your next move, NICE offers tools and community resources to help you navigate your cybersecurity career. Cybersecurity Career Week is coordinated by the NICE program at the National Institute of Standards and Technology under the U.S. Department of Commerce and supported by a community of government, academic, nonprofit, and private industry stakeholders. Commercial entities, materials, and resources provided in support of Cybersecurity Career Week may be included in this email or on the nist.gov/nice/ccw website or linked websites.

When a Ship’s Systems Lie, Cybersecurity Gets Complicated | Newswise

Are the mariners equipped to handle modern cybersecurity threats like GPS spoofing? Thirteen participants said that standard cybersecurity training was largely irrelevant to their shipboard duties, and 14 reported receiving no mission-specific cybersecurity training. Eighteen participants said their training did not distinguish between traditional information technology and operational technology, such as navigation and propulsion systems. Seventeen participants described their cybersecurity training as absent, low quality, or a low priority. The team examined three hypothetical scenarios: GPS spoofing, loss of propulsion control in a high-traffic area, and failure of electronic navigation systems in a congested channel at night.

Netanyahu Adviser’s Exposed Code Raises Alarm Over Political Cybersecurity

Every 90 seconds, an artificial intelligence-assisted program scanned roughly 50 news sources for mentions of Prime Minister Benjamin Netanyahu, his wife, Likud, and political rivals. Instead, its exposed code has raised uncomfortable questions about the security of Israel’s political inner circle. Gabriel Colodro reports for The Media Line that longtime Netanyahu adviser Jonatan Urich left the program’s code publicly accessible on GitHub. Among the exposed details were telephone numbers, WhatsApp group identifiers, and access tokens. Then, on October 11, purported conversations from Urich’s WhatsApp account surfaced online.

Cybersecurity Awareness Month Week 4: How to spot phishing – Library & IT Services

While phishing emails may look convincing, there are always warning signs if you know what to look for. For more details on how to report phishing, check out 1 Minute on How to Report Phishing. https://www.staysafeonline.org/articles/phishing Remember… About phishing simulations. Phishing simulations for employees will continue at the monthly cadence we started in the spring. As always, if you see unusual or suspicious emails, report them as you would any other spam or phishing messages.

Cybersecurity jobs available right now: October 20, 2026

Cloud Security Engineer Toyota Automated Logistics | USA | On-site – View job details As a Cloud Security Engineer, you will maintain security standards across Azure and on-premises environments, enforce access controls, and implement automated security policies. Get weekly updates on new cybersecurity job openings. Cybersecurity Director Accenture | USA | Hybrid – View job details As a Cybersecurity Director, you will advise client executives on aligning security with business goals, regulatory requirements, and operational resilience. You will maintain security infrastructure, manage vulnerability scanning and remediation, and develop workflows and automation to improve response. Senior Cybersecurity Engineer Jet Support Services| USA | On-site – View job details As a Senior Cybersecurity Engineer, you will own daily security operations, lead incident investigations and response, and drive vulnerability remediation.

Pharmacy Cybersecurity Strategies for PHI Protection

Copyright © 2004-2026 McMahon Publishing unless otherwise noted. Specialty Pharmacy Continuum and SpecialtyPharmacyContinuum.com are part of McMahon Publishing. All rights reserved. Reproduction in whole or in part without permission is prohibited.

Food Lion restores website, mobile app following cybersecurity issue

SALISBURY, N.C. (WBTV) - A North Carolina grocery store restored services to its website and mobile app on Tuesday following a cybersecurity issue that happened last week. On Tuesday, Oct. 20, officials with Food Lion said the website and mobile app were fully restored. The website and mobile app were offline since Tuesday, Oct. 13, following a cybersecurity issue. Food Lion officials said additional savings opportunities for ecommerce shoppers, MVP card holders and for Shop & Earn participants. Food Lion released the following statement “We are pleased to have foodlion.com and the Food Lion app back online as we know our customers count on us to provide an easy, fresh and affordable shopping experience,” said Greg Finchum, President, Food Lion.

Five Cybersecurity Areas for Review This Month

Cybersecurity conversations often stay with IT until a disruption affects operations, financial reporting, customer relationships, or day-to-day decision-making. Cybersecurity Awareness Month is a useful opportunity to step back, identify areas of exposure, and make practical decisions before year-end planning begins. This is one of the clearest areas to review because the findings can often lead to immediate improvements. A practical cybersecurity review should connect backup discussions to business continuity, not just technology. Cybersecurity Awareness Month provides a timely opportunity to bring the right people together and view risk through a broader business lens.

New cybersecurity challenges are on the horizon; will the world be ready?

Cybersecurity is a shifting landscape, and new technologies, for all their promise, can also threaten new nightmare scenarios. That is why experts across Arizona State University are going beyond addressing today’s challenges to create proactive approaches that prevent these cybersecurity nightmares from becoming reality. These cybersecurity researchers are creating solutions that can be employed before emerging challenges have the chance to gain a foothold in our lives or impact our national security. Bao’s research advances efforts to create AI tools for cyber defense, including smart systems that self-audit, patch and test. Michel Kinsy, an associate professor in the School of Computing and Augmented Intelligence, calls this idea “system-of-systems cybersecurity.”

Ahold Delhaize update on status of cybersecurity incident

Zaandam, October 19, 2026 – Ahold Delhaize today announced an update about the cybersecurity issue that was previously disclosed on Monday, October 12, 2026. Ahold Delhaize detected suspicious activity in its IT infrastructure and immediately took action, including engaging cybersecurity experts to investigate. We apologize for any inconvenience this issue may have caused customers and partners. Today, Ahold Delhaize has filed a formal police report with the Dutch police. E-commerce services at our Ahold Delhaize USA brands are expected to come back in the coming days.

2026 Cybersecurity Career Week is Here! | September 19-24, 2026

Cybersecurity Career Week October 19-24, 2026 nist.gov/nice/ccw Today marks the start of Cybersecurity Career Week, an effort to promote the discovery of cybersecurity careers and share resources that increase understanding of multiple learning pathways and credentials that lead to careers. Join others in sharing your short videos, pictures, or stories on social media to help spread information about cybersecurity careers. Share at least one reason you love your job in cybersecurity each day of the week between October 19-24, 2026. Join the #CyberCareerChat X chat to celebrate Cybersecurity Career Week, a campaign led by @NISTCyber to inspire and promote the exploration of cybersecurity careers. Participate in the Open One Door Project The project encourages cybersecurity professionals, educators, and employers to take single, high-impact actions - such as mentoring, introductions, or offering hands-on experiences - that help candidates actively advance along a cybersecurity career pathway.

Why is Cohere Acquiring Agentic AI Cybersecurity firm AISLE?

“In the area of agentic AI, cybersecurity is becoming the defining challenge of enterprise AI,” notes Joelle Pineau, Chief AI Officer at Cohere on LinkedIn. This is why Cohere has announced a proposed agreement to acquire AISLE – a cybersecurity company developing autonomous AI systems to identify and remediate previously unknown software vulnerabilities. Cohere believes addressing these challenges requires an integrated approach that combines AI models, cybersecurity, governance and secure deployment infrastructure. “The organisations Cohere serves don’t just need powerful AI,” notes Ondrej Vlcek, Co-Founder and CEO at AISLE on LinkedIn. AISLE AI security technology has identified hundreds of vulnerabilities Founded in 2024, AISLE develops AI systems designed to discover, validate and help fix previously unknown vulnerabilities in complex production software.

US Cybersecurity Job Postings Fall 26%, Hitting Four Year Low

Cybersecurity job postings in the US fell by 26.4% year-over-year from January to September 2026, according to analysis by CyberSN. A total of 235,786 cybersecurity roles were posted on the job market intelligence platform JobSpikr in 2026. Other leadership roles that saw substantial dips included cybersecurity director (a 32.5% fall), cybersecurity lead (41% fall) and cybersecurity manager (24.4% fall). Overall, nine of the 10 cybersecurity functions tracked by the researchers had fewer postings in 2026 compared to 2025. The share of job postings that mentions AI or machine learning in the job description was similar in 2026 compared to 2025, 14.6% versus 15.1%, respectively.

The concern that the KPMG US CEO keeps hearing from other executives

"The cyber risks have just elevated to places that we've never seen them before," he told Business Insider. He said KPMG is working with the frontier AI model developers and others on further protections. 'Cyber insecurity' fears Unease about AI and cyber threats showed up in a recent KPMG US survey of 400 CEOs at major US companies. While leaders reported confidence in AI's potential, cybersecurity was the concern they identified most often. KPMG already has a cybersecurity business, he said, though this would be a different offering built around AI.

This Cybersecurity Agency Is Supposed to Protect U.S. Elections. Officials Fear It’s Been Compromised by Trump.

A spokesperson for the White House declined an interview request but defended Trump’s handling of election security in an emailed statement. Current and former CISA employees and state election officials describe an agency that has become significantly less equipped to help states fight legitimate cyber threats. Gradually, though, CISA and state election officials negotiated a fragile trust. Now he specializes in election security at the Center for Democracy & Technology, a nonprofit that advocates for digital and civil rights. Bis, the White House spokesperson, denied that the Trump administration broke any agreements in releasing the information.

Software Procurement and Cybersecurity Risk

All information published on Global Banking & Finance Review® is provided solely for general informational, educational and learning purposes. Global Banking & Finance Review® does not guarantee that any investment, company, financial product, market, strategy or asset discussed on the website will achieve any particular result. Any decision made on the basis of information appearing on Global Banking & Finance Review® is made at the reader’s own discretion and risk. Ask how the supplier builds and maintains software The NIST Secure Software Development Framework version 1.1, published in 2022, describes practices intended to reduce software vulnerabilities and address their causes. The NIST Cybersecurity Framework offers a broader structure for managing cybersecurity risk, including governance and the relationship between protection, detection, response and recovery.

Cybersecurity’s Obsession with Speed Has a Blind Spot

We want faster detection, faster investigation and faster response times. Security teams have spent years building increasingly sophisticated layers of prevention and detection. The bigger question is what security teams can do with the time and information those capabilities give them. Gil holds graduate and undergraduate degrees in Information Systems & Information Assurance and is a U.S. Army veteran. Join our LinkedIn group Information Security Community!