The National Institute of Standards and Technology released a new white paper, Small Business Cybersecurity: Non-Employer Firms, aimed at the roughly 28 million U.S. solopreneurs who run businesses alone. The guide updates an earlier, broader publication on small-business information security and instead focuses specifically on protecting digital systems, using plain language drawn from the NIST Cybersecurity Framework 2.0.
nist.gov
· 2026-11-02
Apple has issued high-confidence threat notifications to iPhone users across 110 countries, warning that they may have been targeted by mercenary spyware. The company has not disclosed the attackers' identity, the attack method, or whether any devices were actually compromised, but said the campaign involves narrowly targeted attempts rather than broad phishing. Researcher Costin Raiu first reported the alerts on October 30, noting they are separate from a similar round of notifications Apple sent in August.
techspot.com
· 2026-11-02
Curl ended its paid bug bounty program on January 31, 2026, after maintainer Daniel Stenberg said the share of genuine vulnerabilities in submissions dropped from above 15% to below 5% starting in 2025. Over its run, the program had confirmed 87 vulnerabilities and paid out more than $100,000. Google has separately paused supply-chain bounty submissions, though its broader vulnerability rewards programs paid $17.1 million in 2025.
bleepingcomputer.com
· 2026-10-31
At the annual DataTribe Challenge, a competition for early-stage cybersecurity startups, investors evaluated new entrants and discussed which types of security technology they would prioritize funding going forward. The event showcased emerging companies while giving venture investors a platform to share views on where the cybersecurity market is heading.
darkreading.com
· 2026-10-30
An Entrepreneur contributor outlines nine technology-related problems that can quietly undermine business growth, including outdated systems, fragmented applications, poor data management and weak cybersecurity. The piece argues these issues often start small but compound as a company expands, eventually raising costs and limiting scalability.
entrepreneur.com
· 2026-10-30
Four U.S. officials told Reuters that the military is investigating a suspected cyberattack on freezer systems at base commissaries, after the equipment malfunctioned and spoiled frozen goods including ice cream. The incident is being treated as a possible hacking case rather than a routine mechanical failure.
gizmodo.com
· 2026-10-30
A Reporters' Notebook video segment examines themes from Cybersecurity Awareness Month, including the use of artificial intelligence to improve security training and efforts to prepare upcoming workforces for new types of digital risk. The discussion touches on how organizations are adapting awareness programs to address emerging threats.
darkreading.com
· 2026-10-29
A commentary piece argues that as AI tools automate many entry-level cybersecurity tasks, hands-on capture-the-flag (CTF) competitions are becoming a more valuable way for newcomers to build practical skills. The piece frames CTFs as a hedge against shrinking early-career learning opportunities in the field.
darkreading.com
· 2026-10-29
Mistral has released the open weights of Mistral Large 4, its flagship 1-trillion-parameter multimodal model, following a public preview earlier this month. The company says added reinforcement learning has improved coding, cybersecurity and reasoning efficiency since preview, and the model now ranks as the top open-weight model for coding among the most capable open models overall.
mistral.ai
· 2026-10-29
French AI company Mistral has released the finalized version of its trillion-parameter model, nicknamed Le Chonk, freely to the public. The company says the model now outperforms open-weight offerings from Chinese labs like DeepSeek and Z.ai on coding and cybersecurity tasks, achieved by training it on progressively harder security and coding problems. Mistral VP of science Pierre Stock announced the claims during a press briefing.
wired.com
· 2026-10-29
Google has launched Gemini 4 Carbon, a frontier AI model it says tops rival systems from OpenAI and Anthropic on the AA Index v5.0 benchmark and leads in categories like agentic coding, computer use and science. The company highlighted particularly strong results in cybersecurity, claiming the model is better at finding, prioritizing and patching vulnerabilities at the root cause, and twice as likely to generate secure code as its predecessor, Gemini 4 Argon. Carbon will initially be restricted to select cybersecurity defense firms for testing before wider release through Google's Fairwind Program.
engadget.com
· 2026-10-29
Google has launched Gemini 4 Carbon, its second new frontier AI model in a month following Gemini 4 Argon. The model improves on coding, agentic tasks, scientific reasoning and multimodal understanding, with Google saying its biggest gains are in cybersecurity, including more than doubling secure-code generation rates versus Argon. Carbon will first go to select cyber defenders before wider release, priced at $2 per million input tokens and $10 per million output tokens.
androidauthority.com
· 2026-10-28