Cybersecurity

Singapore – October 14, 2026 -- Protiviti's February 2026 AI Pulse Survey found that 47% of large organizations have incomplete visibility into employees' use of AI tools, a gap Armor Founder and CEO Chris Drake cited at GovWare 2026 while arguing that CISOs should set conditions for AI adoption rather than ban it.

Drake said banning AI does not work and that ignoring it "is how the breach report gets written." In his Tech Talk Spotlights session, he said AI is already arriving through employees' browsers, productivity tools and machines, often without a separate security decision.

Singapore – October 14, 2026 -- WEMIX has relaunched its joint bug bounty program with blockchain security firm CertiK, offering payouts of up to $10,000 per finding for vulnerabilities in its WEMIX3.0 Layer-1 blockchain. The program runs on CertiK's CertiK Hunt platform, and rewards scale with the severity of each finding.

Program targets WEMIX3.0 blockchain and governance smart contracts

Reports will focus on core ecosystem components: the WEMIX3.0 blockchain (DLT) and its Governance Smart Contracts. Rewards are denominated in USD and paid in Tether (USDT) on the Ethereum network.

Findings classed as "Critical" cover major risks such as total network outages or direct financial loss.

United States – October 13, 2026 -- CrowdStrike's Counter Adversary Operations team and the FBI disrupted several U.S.-based laptop farms run by the DPRK-nexus adversary FAMOUS CHOLLIMA in late September 2026. The farms let North Korean operatives pose as remote workers at American companies while hiding their location and identity.

CrowdStrike says dozens of victim organizations were identified across the disrupted clusters. They span aerospace, energy, financial services, healthcare, cybersecurity, defense engineering, government technology and consumer technology. The company describes the targeting as sector-agnostic: any employer offering remote work is a revenue opportunity.

Global – October 13, 2026 -- Tenable has released Nessus detection plugins built from CIQ's security advisories, so CVEs that CIQ has already fixed on Rocky Linux from CIQ Pro (RLC Pro) hosts now resolve in scan results instead of showing as unpatched.

Community advisories left CIQ fixes uncounted on pinned LTS hosts

RLC Pro LTS lets customers pin a host to a minor release and keep receiving security fixes on it. Even-numbered minor releases receive four years of security patching, and CIQ documents those fixes in its own advisories.

Tenable's existing Rocky Linux plugins draw on community Rocky Linux advisories, which do not include CIQ's. Nessus therefore compared a pinned host against the latest release, and a CVE that CIQ had already fixed on that release could still appear as unpatched. The same gap applied to packages CIQ adds beyond community Rocky Linux.

Buenos Aires – October 13, 2026 -- Coalfire, a cybersecurity and compliance services provider, has opened Argentina Integrated Solutions (AIS) in Buenos Aires, adding delivery capacity to its global operating model.

AIS links Argentina-based staff to Coalfire teams and clients worldwide

The new location builds on Coalfire's existing international presence. AIS will connect Argentina-based professionals with Coalfire teams, clients and delivery capabilities around the world. Coalfire says this adds capacity for growth and strengthens local collaboration and continuity of service.

The company did not disclose headcount, investment size or a hiring timeline for the Buenos Aires site.

Milwaukee – October 13, 2026 -- Rockwell Automation (NYSE: ROK) has launched the CompactLogix 5390 controller, a unit with a footprint 43% smaller than the CompactLogix 5380 and security capabilities aligned to IEC 62443-4-2. The controller is the newest addition to the company's Integrated Architecture family and targets machine builders and OEMs.

CompactLogix 5390 builds in cybersecurity aligned to IEC 62443-4-2 and the EU Cyber Resilience Act

The controller combines built-in cybersecurity, integrated safety and higher performance on one control platform. Rockwell says its security capabilities are aligned to IEC 62443-4-2 and that the unit is ready for the EU Cyber Resilience Act. The aim is to let machine builders address evolving global requirements without adding complexity to machine architecture.

Zurich – October 13, 2026 -- Approximately 30% of monitored organizations experienced at least one fake IT support impersonation attempt through Microsoft Teams in the first half of 2026, according to Ontinue's 1H 2026 Threat Intelligence Report. The managed detection and response (MXDR) provider says attackers are gaining scale by exploiting trusted identities, collaboration platforms, software supply chains and routine business workflows rather than by building more sophisticated malware.

The findings draw on incident investigations, threat intelligence research and telemetry from Ontinue's Advanced Threat Operations team.

Dallas – October 12, 2026 -- Japan recorded more publicly disclosed cybersecurity incidents in the first nine months of 2026 than in all of 2025, according to TrendAITM Forward-Looking Threat Research data. TrendAITM, the enterprise business unit of Trend Micro Incorporated (TYO: 4704), issued a threat advisory for Japanese organizations after a senior ruling-party lawmaker declared that "cyberspace is in a state of emergency."

September incidents rise 37% from July to 86

September alone saw 86 incidents, about 18% more than August and 37% more than July. Masaaki Taira, who chairs the Liberal Democratic Party's National Cybersecurity Strategy Headquarters, made the emergency statement. The headquarters met on Oct. 9 and called on the government to strengthen public-private cooperation.

Falls Church – October 12, 2026 -- General Dynamics Information Technology (GDIT) has won the $1.3 billion Enterprise Network Operations and Cybersecurity Support (ENOCS) contract to run enterprise IT and cybersecurity services for the Army National Guard and other federal partners.

GSA awards contract with one base year and six option years

The General Services Administration (GSA) Assisted Acquisition Services issued the award. It has a one-year base period followed by six one-year option periods. GDIT is a business unit of General Dynamics (NYSE:GD).

GDIT to operate and defend classified and unclassified Guard networks

Under the contract, GDIT will help the Guard and its federal partners upgrade and build enterprise IT environments. The scope covers:

Vancouver – October 12, 2026 -- Anthropic committed $250 million across two new initiatives in the past two weeks, while OpenAI rolled out GPT-6 to every ChatGPT user. Most announcements from the two private AI developers targeted large organizations and government customers.

Anthropic launches cheaper Haiku 5.5 and funds two programs worth $250 million

Anthropic introduced Claude Haiku 5.5 on October 7, calling it "the cheapest, fastest, and most capable small model we've ever released." The company said the model costs about 75% less to run on average than Haiku 4.5. It is available on Amazon Web Services, Google Cloud and Microsoft Azure.