Cybersecurity

Global – October 24, 2026 -- Agentic intrusions tripled in the second half of 2026 compared with the first half, according to CrowdStrike data, as threat actors hand hacking decisions and command execution to AI agents.

CrowdStrike's report, published on Wednesday, documents four threat actors. Two used sophisticated AI harnesses, the software that connects a large language model to external resources. Two used simpler setups. The firm said the main constraint on scaling such campaigns is "token budgets," not engineering complexity.

Spanish- and English-speaking actor breaches at least 15 Argentine healthcare organizations

The actor used a penetration-testing harness built on the open-source PentestGPT framework, modified with extra hacking scripts. One Anthropic Claude Code agent acted as supervisor and assigned tasks to a second agent. CrowdStrike observed the activity between mid-May and mid-August.

Global – October 24, 2026 -- Cloudflare provides free cyber security protection to more than 2,900 vulnerable Internet properties through Project Galileo, its program for human rights, civil society, journalism and democracy organizations targeted by DDoS and other cyber attacks.

Cloudflare launched Project Galileo in 2014 after attacks on vulnerable targets

Founded in 2014, the program was a response to devastating cyber attacks against humanitarian organizations, civil society groups and human rights defenders. Cloudflare notes that these organizations often face powerful, entrenched opponents while operating on limited budgets.

Journalists, social activists and minority groups flooded with malicious traffic risk being knocked offline.

Orlando – October 24, 2026 -- Enterprise AI adoption is continuing in 2026 despite mounting security, accountability and control concerns, CIOs attending Gartner's IT Symposium/Xpo told CIO Dive. In financial services, three-quarters of leaders reported using the technology this year, up from less than one-third in 2024.

Several CIOs compared AI's impact to the dot-com era and the arrival of cloud: it enables business reinvention but brings security and social risks. Gartner analysts said in the keynote that most tech executives are weighing those risks against AI's measurable and unquantifiable value.

Capital One Software executive calls non-adoption an 'extinction event'

Prashant Prahlad, SVP of product at Capital One Software, said skipping AI is not an option for enterprises. "If you don't get on board, it's going to be an extinction event," he said.

Global – October 24, 2026 -- Cloudflare's Learning Center covers 16 topic areas, from DDoS attacks and DNS to AI, SASE and domain registration, according to the resource index.

Security guides cover DDoS, bots, email and web applications

The DDoS guide describes a network of computers working in tandem to overflow an access point and block legitimate users from a service. The bots guide separates helpful automated applications from malicious ones that can harm sites and applications.

The web application security guide calls for a holistic approach to mitigating attacks. The email security guide covers preventing email-based cyber attacks, protecting accounts from takeover and securing message contents. The SSL guide describes the protocol, known today as TLS, as an encryption protocol running on top of HTTP to protect communication between servers and clients.

Vienna, VA – October 22, 2026 -- Target took three of the top honors at the 2026 RH-ISAC awards: Team of the Year, Cybersecurity Practitioner of the Year for senior threat intel analyst Chris De La Rosa, and a first-place finish in the Sharing & Collaboration Challenge team rankings. The Retail & Hospitality Information Sharing and Analysis Center announced the winners at its Member Celebration Dinner and Awards Ceremony on April 15 in Austin, Texas.

Crocs CISO Lena Taylor wins Peer Choice Award for CISO of the Year

Lena Taylor, CISO at Crocs, received the 2026 Peer Choice Award for CISO of the Year. The award goes to a thought leader whose experience adds strategic value to the wider community.

Vienna, VA – October 22, 2026 -- The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) has scheduled 14 confirmed in-person cybersecurity workshops across North America, Europe and Asia-Pacific for 2026, with a 15th planned for London in November.

Series opens in Singapore on 3 June and closes in Sydney on 11 November

The one-day events start in Singapore on 3 June, followed by Herndon, Virginia, on 11 June and Herzogenaurach, Germany, on 7 July. Stops in Natick, Massachusetts (29 July), Brampton, Canada (30 July), Bangalore, India (5 August), Louisville, Kentucky (13 August) and Richfield, Minnesota (18 August) complete the summer calendar.

The autumn run begins in Parsippany, N.J., on 16 September, then moves to Paris (25 September), Las Vegas (1 October), Vancouver (14 October), Atlanta (3 November) and Sydney (11 November). RH-ISAC has not yet released details for the London date.

Vienna, VA – October 22, 2026 -- The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) has announced the 2026 schedule for its Regional Workshop series, a global program hosted in key markets across North America, Europe and Asia-Pacific. The workshops bring cybersecurity practitioners together for in-person collaboration, threat intelligence sharing and professional development.

RH-ISAC and IANS publish 2026 CISO Benchmark Report on 1 April

The workshop announcement follows a run of releases from the group. On 1 April 2026, RH-ISAC and IANS released the 2026 CISO Benchmark Report. It examines how cybersecurity leaders in retail and hospitality are handling economic pressure, evolving threats and the rapid rise of artificial intelligence.

DURHAM – October 21, 2026 -- NineTenths, a Saudi Arabia-based technology company founded in 2019, has joined ISASecure, the certification program that validates conformance to the ISA/IEC 62443 cybersecurity standards for industrial automation and control systems (IACS), the International Society of Automation (ISA) announced.

NineTenths ties its OT security services to ISA/IEC 62443

The company works in drones, robotics, infrastructure inspection, surveying and operational technology (OT) cybersecurity. Its clients span oil and gas, petrochemicals, energy, water and wastewater, manufacturing and other critical infrastructure.

NineTenths already uses ISA/IEC 62443 as the framework for its OT security services. Its capabilities are aligned to cybersecurity management systems, risk-based assessments, zones and conduits, industrial system security requirements and secure product development practices.

San Francisco – October 21, 2026 -- Crest Data has added 15 commercial plugins to the Grafana Marketplace, more than doubling its portfolio to 25 as Grafana Labs moves the Marketplace to general availability at ObservabilityCON 2026.

Plugins query source systems via APIs without exporters or ingestion costs

All 25 plugins are native, agentless data source plugins that query their source systems through APIs. Crest Data states they require no exporters, no extra collection layer and no data ingestion costs. Each plugin ships with pre-built dashboards and was built in partnership with Grafana Labs.

The new plugins cover cloud security, virtualization and data protection platforms. IT, platform and security teams can monitor these systems in Grafana alongside existing telemetry rather than switching between separate vendor consoles.

WASHINGTON – October 21, 2026 -- Corsha has launched Folio, a module for its Industrial Identity Security Platform that automatically generates and updates maps and documentation of how operational technology (OT) systems are connected and communicating, replacing manual assessments that the company says take weeks.

Folio draws on live network and access data captured by Corsha Gatekeepers. It records which machines are communicating, when, why and how, and produces derived hardware lists, real-time connection maps and Microsoft Visio data flow diagrams. The outputs are designed for IEC 62443, NERC CIP and Zero Trust frameworks.

Folio targets documentation gaps that slow OT compliance and incident response

Corsha says OT documentation is often missing or has drifted too far from the running environment to be useful. Compliance artifacts built through manual assessments are frequently incomplete or inaccurate, according to the company.