No-frills tech news

New Rockwell report reveals glaring disconnect between cybersecurity investments and risk protection

A region-by-region scorecard Rockwell’s recently releasedOperational Resilience in the Age of Connectivity report revealed a disconnect between confidence in comprehensive cybersecurity protection and operational risk among organizations, with increased connectivity leading to more cybersecurity risks. According to Rockwell’s research, based on input from 1,500 manufacturing and industrial operations decision-makers across 17 countries, more than one third of organizations see cybersecurity risk as one of the largest external obstacles to growth. Simultaneously, cybersecurity ranks as the second-highest ROI-generating technology investment reported by respondents, and over 60% of organizations have already invested in cybersecurity platforms. See also: IT-OT convergence: When ransomware hits the factory floor These statistics indicate a larger industry shift, according to the Rockwell report. According to Rockwell, the next step is for organizations to bring investments together into a cybersecurity program that improves visibility, reduces risk, and adapts to evolving operational needs.

Better Business Bureau shares online safety tips ahead of Cybersecurity Awareness Month

TOPEKA, Kan. (WIBW) - October is dedicated to raising awareness of cybersecurity, but the Better Business Bureau says it should be a year-round effort to avoid scams you may find online. “Now, it’s something that really everybody needs to be paying attention to,” said Josh Planos, a spokesperson for the Better Business Bureau. It’s why Planos is urging users to be proactive while on the web. The bureau says advancements in AI also pose concerns for online data to become compromised. Giving your devices a deep clean and keeping them up-to-date are also tips from the bureau to help keep your personal information out of the hands of online criminals.

MSU, MGCCC partner to host ‘Securing the Coast’ cyber security event

(WLOX) — Mississippi Gulf Coast Community College and Mississippi State University held “Securing the Coast,” an event aimed at helping small businesses with defense contracts strengthen their cybersecurity practices. The event comes as the Department of War pushes for increased security amid threats to critical defense contractors, many of which operate along the Gulf Coast. Center of Cyber Education Director Shelly Hollis said small businesses often struggle with basic security measures. Scott said small machine shops and suppliers on the Gulf Coast carry significant responsibility. It’s all the small contractors and industry that feed into those shipyards that really build the economy of the Gulf Coast in a very significant way,” Scott said.

Engineering velocity is a competitive advantage in modern cybersecurity

In cybersecurity, engineering velocity has become a competitive advantage. In my experience, decision latency is another under-diagnosed constraint in engineering organizations. The engineering work had been ready for months, and decision latency was the bottleneck. That combination makes engineering velocity part of how a cybersecurity organization competes. For CIOs and CTOs looking to increase engineering velocity, my advice is to look first at where work waits.

TekStream to Spotlight Cybersecurity Workforce Development and Digital Resilience at Educause 2026

TekStream will lead two sessions focused on helping colleges and universities evolve their security programs while strengthening long-term digital resilience. They'll discuss another persistent challenge for higher education security teams: turning fragmented security data into a clear picture of institutional cyber risk. Educause attendees are invited to connect with TekStream leaders and higher education peers to continue the conversation around cybersecurity, workforce development and digital resilience. Please RSVP at https://go.tekstream.com/TekStreamEducauseFallHH2026 About TekStream TekStream is a digital resilience company that helps organizations secure, modernize, and operate their technology environments so they can adapt, recover, and grow. The company's Whole-of-State cybersecurity model combines workforce development with cost-deferment strategies, empowering public sector organizations to maintain long-term ownership of their security programs.

Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts

The Cybersecurity and Infrastructure Security Agency on Sunday warned that critical zero-day vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway are facing exploitation and need to be immediately addressed. The agency later added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities catalog. Citrix said the bulletin applies only to customer-managed NetScaler ADC and NetScaler Gateway. The company urged security teams to review the guidance to determine whether certain preconditions were met on NetScaler deployments before applying upgrades. For example, preconditions for CVE-2026-88772 are met only when datagram transport layer security (DTLS) is enabled on NetScaler ADC or NetScaler Gateway.

Meta's Muse AI assistant raises major cybersecurity and privacy concerns

Meta's Muse AI assistant is helping users save money on subscriptions, but it requires access to personal bank accounts and credit cards. Liz Peek warns of potential cybersecurity risks and the threat of rogue agents. With over 3 million downloads for canceling unwanted subscriptions, Meta's Muse AI assistant is raising security alarms. Liz Peek warns that users must grant the AI access to personal bank accounts, credit cards, emails, and texts to make it effective. The anchor agrees that these financial security fears are well-grounded, stressing the need for robust cybersecurity.

Satellite communications growth expands cybersecurity attack surface across IoT, utilities, critical infrastructure

“As a result, the satellite communication market is on an aggressive growth trajectory. Expanding satellite ecosystem is also widening cybersecurity attack surface, with direct-to-device services connecting satellites, ground gateways, network services and endpoints such as smartphones and IoT sensors. The post acknowledges that satellite communications have undergone rapid transformation in recent years, driven by geopolitical pressures, commercial expansion and technological innovation. Satellite connectivity is embedding itself across critical industries, as automotive systems incorporate positioning and emergency SOS, while logistics and utilities deploy IoT monitoring and control. Automotive sector alone is projected to reach $25.8 billion by 2034, while an estimated 2.5 billion to 3 billion IoT devices now have satellite addressability.

Dragos Expands xOT Security Platform With NetRise and runZero Acquisitions

Dragos, Inc., the global leader in extended operational technology (xOT) cybersecurity, has completed its acquisitions of NetRise and runZero. The acquisitions bring the full teams from runZero and NetRise into Dragos, including runZero CEO HD Moore, NetRise CEO Thomas Pace, and NetRise CTO and Chief Scientist Michael Scott. They will oversee the integration of their respective technologies into the Dragos Platform while continuing to support their existing customers. The acquisitions are also expected to strengthen the Dragos Intelligence Fabric, which incorporates a decade of OT-specific telemetry and incident response expertise into the Dragos Platform. _________ About Dragos Dragos is the global leader in extended operational technology (xOT) cybersecurity, delivering on its mission to safeguard civilization.

California Critical Access Hospital Announces Cybersecurity Incident

Modoc Medical Center Modoc Medical Center, a 12-bed critical access hospital and rural healthcare system based in Alturas, California, has identified unauthorized access to its computer network. The review of the data has been completed, and notification letters are now being sent to the affected individuals. Millstone Medical Outsourcing Millstone Medical Outsourcing, a Fall River, Massachusetts-based medical device outsourcing company, has identified a cybersecurity incident that exposed personal and health information. No misuse of the affected information had been identified at the time of issuing notification letters. The number of affected individuals has not been publicly disclosed at the time of publication of this article.

Context matters when it comes to cybersecurity’s agentic operating model

Because context continuously changes, agentic security and governance controls will require access to up-to-date, contextual policy and operating guardrails. Architectural considerations As agent architecture evolves, inter-agent communications models are becoming core to operating models. Model Context Protocol (MCP) servers; Agent2Agent (A2A); Agent Communication Protocol (ACP) and other emerging mechanisms are paramount to providing access to functions and datasets. While what’s needed to support governance and security for agentic solutions is still emerging, human-based governance and security requirements continue to evolve as the machine-human operating model also evolves. Leading model providers increasingly acknowledge that the real breakthrough comes from the context and integration wrapped around the model.

Strengthening NATO Through Military Mobility and Critical Infrastructure Cybersecurity

Yet since the end of the Cold War, Europe’s defense-related infrastructure investment has declined alongside its defense spending, leaving much of the continent’s transportation network ill-suited for today’s heavier forces. Chinese state-linked firms hold stakes in more than 30 European port terminals, including facilities designated to receive U.S. military forces and equipment. NATO identifies the infrastructure and mobility capabilities its forces require and can coordinate national efforts but lacks the authority to impose binding standards on civilian operators. By contrast, the European Union can impose binding standards on civilian operators, but member states retain control over defense priorities and infrastructure investment. As a result, NATO forces cannot move as rapidly as they may need, and investment for upgrades lags behind NATO’s reinforcement requirements.

Honeywell Benchmark Report Finds Critical Gaps in OT Cybersecurity Visibility

Honeywell recently released its inaugural OT Cybersecurity Benchmark Report, delivering an important message for industrial organizations: OT cybersecurity maturity is no longer limited to protecting traditional production environments. As industry analysts, we can sometimes assume that everyone already understands industrial cybersecurity fundamentals and fail to emphasize the basics of a successful OT cybersecurity program. Instead, the focus often shifts to newer technologies, even as many end users are still establishing their OT cybersecurity programs. AI Becomes a Core OT Security Capability The survey reveals broad adoption of artificial intelligence in OT cybersecurity operations. Meanwhile, 99 percent of respondents expect AI to significantly influence OT cybersecurity within the next two to three years.

Disabled? Apply for free IT, cybersecurity training in Pensacola

A new training program aims to give at least 60 disabled Northwest Florida residents a pathway into information technology and cybersecurity careers. Katrina Simpkins, Global Connections to Employment's senior director of community employment services, said the training program will have three cohorts that will each train over a 14-week period. Resume development, interview preparation, networking skills and personalized career support are part of the training program. The abilIT program will pay the CompTIA certification exam fees, which range from over $200 to $500 each. To learn more about abilIT or apply for the program, visit gce.org/abilIT or email Katrina.Simpkins@gce.org or call 850-495-2351.

Cybersecurity for small to medium-sized businesses

The Defense Industrial Base (DIB) faces constant cyber threats, and small to medium-sized businesses (SMBs) are especially vulnerable due to limited resources. This Wednesday, September 30 at 12PM ET, join us for the free webinar Cybersecurity: Bridging the Gap Between Prime Contractors & SMBs. Samantha Anim of the National Security Agency Cybersecurity Collaboration Center will walk you through the free services the organization offers Department of Defense (DOD) contractors, including passive DNS monitoring, Continuous Autonomous Penetration Testing, attack surface management, and real-time threat intelligence. Speaker Samantha Anim Campaign Manager National Security Agency, Cybersecurity Collaboration Center Samantha Anim is currently the Campaign Manager at the National Security Agency, Cybersecurity Collaboration Center. In this role, she is responsible for increasing partnership participation and enrollment into NSA provided no-cost cybersecurity services for Defense Industrial Base (DIB) companies to help them defend against Nation-state and other cyber actors.

Australia summons OpenAI and Anthropic CEOs to appear at AI inquiry

Australia has called for the CEOs of OpenAI and Anthropic to appear before a Senate inquiry into artificial intelligence, just days after revelations that a rogue OpenAI bot had ⁠hacked the country’s health-system database. “There are serious questions for Sam Altman to answer about the OpenAI hack of Australian government websites,” Hanson-Young’s spokesperson said in a statement on Sunday. OpenAI and Anthropic did not immediately respond to requests for comment outside business hours. The Medicare incursion, condemned by Australian Prime Minister Anthony Albanese, is one of the highest-profile incidents of AI agents accessing external systems outside the United States. Addressing reporters in New York on Wednesday, Albanese said the agent, developed by OpenAI, accessed public and nonpublic data on the government’s Medicare portal in June.

Think You'd Never Fall for a Scam Text? Think Again

The hooks have also been called “pig butchering scams” or “romance baiting scams” or “relationship investment scams” and other names. How the Scam Works The Hook: The scammer sends a text that sounds urgent, polite or highly specific (e.g., "Can you move your car?" This will likely lead to you receiving significantly more spam and scam texts in the future. Here are some of the other scam texts I've seen: "Hello, I found this contact saved under my assistant's old notes, but the name tag was blank. Here are a few that I recommend with short excerpts: PC Magazine — Stop Replying 'Stop': The Danger of Responding to Spam Texts (And How to Block Them for Good): “Tired of spam texts?

This Week's Top Five Stories in Cyber

Cognizant: How the CISO Role Evolves in the Age of AI Agents It is no secret that indeterminate systems like autonomous agents have changed the cybersecurity landscape as we knew it. Able to interpret information, make decisions and take action across connected systems, agents introduce new risks when their context, permissions or behaviour are compromised. His industry experience is long standing, and as Vishal puts it: "Three decades in cybersecurity gives you a particular kind of perspective." How a Rogue OpenAI Agent Hacked Australia's Medicare System In yet another addition to the recurring news cycle of rogue AI incidents, OpenAI agents hacked into Medicare – Australia’s universal healthcare system. Users visiting the site on 19 September 2026 would have seen the message: “Domain Seized By ShinyHunters.”

Cyber security stocks are pumped up on P(doom)

"Expert, reliable, considered, actionable opinion" "Brief with no waffle, to the point and has real insight into the corporate world" "Entertaining and often insightful in a way that’s different to most newsletters"