Cybersecurity

PUNE, India – October 21, 2026 -- QKS Group named Radware a technology leader in its global SPARK MatrixTM: Bot Management, Q4 2026, with strong ratings across technology excellence and customer impact. The study ranks leading vendors and assesses market dynamics, major trends, vendor landscape and competitive positioning.

Radware shifts bot detection from static signatures to intent analysis

Sofia Ali, Principal Analyst at QKS Group, said Radware has moved detection away from static signatures and score-based rules toward intent-driven analysis of automation behavior. Its engine combines three elements in one self-learning framework: pre-emptive blocking through the ERT Active Attackers Feed, AI-based behavioral analysis across hundreds of signals, and real-time signature generation. According to Ali, the framework catches evasive, human-like bots with less manual tuning.

Orlando – October 20, 2026 -- Industrial Defender has released a platform update that adds internal network security monitoring (INSM) and a remediation tool called Risk SignalTM, targeting utilities that must comply with the FERC-approved NERC CIP-015-1 standard.

The standard requires entities with high and medium impact BES Cyber Systems to monitor internal network traffic, detect and evaluate anomalies, and retain and protect the resulting data.

INSM learns device baselines and flags deviations

Built into the existing platform, the INSM solution learns each device's baseline communications. It flags new connections, unexpected protocols, anomalous traffic volume and unknown devices communicating.

Each anomaly is correlated with the asset data Industrial Defender maintains, including configuration changes, vulnerabilities and risk score. Operators can see immediately what a network change means to operations, the company said.

Ohio – October 20, 2026 -- Todd Lukens, chief technology and information security officer at Nationwide, has been named to the inaugural Cyber25 list from Ohio Tech News and OhioX, which honors 25 cybersecurity leaders protecting Ohio's businesses, hospitals, schools and critical infrastructure.

Selection criteria weigh two years of Ohio-linked results

Honorees were chosen on four criteria: real-world impact, demonstrated leadership, a meaningful Ohio connection, and work completed or significantly advanced during the past two years.

Lukens oversees eight security and technology functions at Nationwide

Lukens has more than two decades of experience in cybersecurity and technology leadership. His remit covers Cybersecurity, Information Risk Governance, Continuity and Crisis Management, Infrastructure, Technology Operations, Development Platform Engineering, Enterprise Digital Platform, and Protective Services.

United States – October 20, 2026 -- CloudFit said the Department of War's pause on parts of the CMMC rollout does not change cybersecurity obligations for the more than 220,000 organizations in the Defense Industrial Base (DIB) that are entrusted with protecting Controlled Unclassified Information (CUI).

CloudFit says DFARS and NIST requirements remain in force

The company said the implementation timeline for portions of CMMC may be changing, but obligations to safeguard sensitive information under DFARS and NIST requirements have not been paused. It added that cyber threats have not paused either.

Cost and complexity block adoption across the DIB

CloudFit argues that compliance mandates alone will not secure the DIB. It says many companies have had to choose between expensive custom implementations, delaying security investments, or attempting compliance on their own. In its view, that model does not scale to the size of the DIB.

Global – October 20, 2026 -- Attackers are now capturing valid multi-factor authentication (MFA) codes in real time, so a single phishing click can give them full account access and a path into an entire organization, according to Chris Bentkowski, Service Engineer at CloudFit.

Fake login pages harvest passwords and live MFA codes

The typical attack starts when a user clicks a malicious link and lands on a fake login page that mimics a trusted application. The user enters a username and password, then a valid code from an authentication app. The attacker can then complete authentication, capture session details and potentially reconfigure or take control of MFA mechanisms. Bentkowski calls the technique MFA phishing, or token/session capture.

Atlanta – October 19, 2026 -- Scientific Games' U.S. instant scratch game production facility, which serves nearly every U.S. state lottery, has achieved Level 2 certification under the World Lottery Association Security Control Standard 2024 (WLA-SCS:2024). Level 2 is the highest certification level for lottery suppliers under the standard.

The plant, located at the company's global headquarters in metro Atlanta, is the world's largest lottery scratch game production facility. It has held WLA security certification since 2011.

Standard combines ISO 27001:2022 with lottery-specific integrity controls

WLA-SCS:2024 Level 2 merges the ISO/IEC 27001:2022 information security requirements with lottery-specific security and integrity controls set by the WLA. It specifies the practices needed for a security management structure that protects the integrity, availability and confidentiality of information critical to a lottery operator.

Hoboken – October 19, 2026 -- MiniOrange CEO Anirban Mukherji will tell small and midsize business executives on October 21, 2026, that stolen credentials, not malware, are now the primary entry point for attacks, as eMazzanti Technologies hosts its annual ASPIRE 2026 conference at the Microsoft Conference Center in New York City's Times Square.

Mukherji targets six operational and compliance pain points

His session will cover password fatigue, application sprawl, remote workforce security, regulatory compliance requirements, cyber insurance mandates and third-party access management.

He will present five technologies as ways to reduce risk while simplifying access to business applications: multi-factor authentication (MFA), single sign-on (SSO), adaptive authentication, identity governance and privileged access management.

Hoboken – October 19, 2026 -- eMazzanti Technologies, the Hoboken-based cybersecurity and managed services provider founded in 2001, has been named a finalist in the NJBIZ 2026 Business of the Year Awards, with honorees to be recognized at a live event on Dec. 8 at The Marigold in Somerset.

Panel of past honorees selects finalists on growth and innovation criteria

An independent panel of judges made up of previous program honorees chose the finalists. The program recognizes organizations for sustained growth, innovation, leadership and positive impact on New Jersey's business community.

Lansing – October 19, 2026 -- Nexcess has made Acronis Endpoint Detection and Response (EDR) available from October 19, 2026 as an add-on for any eligible server on its managed cloud platform, bundling real-time threat monitoring into the hosting relationship.

Nexcess targets AI-accelerated attacks with continuous server monitoring

Nexcess argues that artificial intelligence has removed two barriers to sophisticated attacks: the need for deep engineering expertise and months of patient reconnaissance. Acronis EDR is its response, monitoring how programs behave on a server, flagging activity that looks like an attack and keeping a record of what happened.

The company positions EDR as a step beyond antivirus, which blocks known threats. EDR instead monitors activity continuously, identifies suspicious patterns, and contains threats in real time. Customers receive the details and tools to respond.

Jupiter, Florida – October 19, 2026 -- Bloomberg Television will broadcast a Discoveries Today episode hosted by Daymond John on Saturday, October 24, 2026, at 8:00 p.m. ET, covering four segments: disability support services, AI security governance, automotive retail marketing and behavioral healthcare.

AI governance segment focuses on zero-trust security for critical infrastructure

The security segment addresses zero-trust architecture, operational technology protection, and verifying AI identities, permissions and actions before they can affect sensitive systems. It covers how AI governance is being designed for critical infrastructure and regulated environments. It also covers how AI governance software is being aligned with federal security requirements and frameworks. The segment stresses accountability and verifiable decision-making as ways for organizations to keep control over increasingly autonomous technologies.