Marco Casassa Mont
@marcocasassamont.bsky.social
BMT Fellow (cyber) | Principal Cyber Security Consultant | Architect | ChCSP, CISM, CISSP, CCSP, IEEE, CIISec, MSc, BSc | Innovation, Strategy, Digital Transformation, Technology, AI | Cloud, Enterprise | Leadership, Management
Good to know! Another important steps towards wider PQC adoption and potentially mitigating "Harvest Now Decrypt Later" risks ... www.helpnetsecurity.com/2026/09/30/c... #PQC #Clouddflare #PQCreadiness #HNDL
Post-quantum website certificates from Cloudflare are scheduled for early 2027 - Help Net Security
Cloudflare certificate authority will issue post-quantum Merkle Tree Certificates from early 2027 and has applied to four root programs.
helpnetsecurity.com
UK AISI's security findings about latest OpenAI GPT-6 Astra model ... www.theregister.com/ai-and-ml/20... #OpenAI #GPT6Astra #SupplyChainAttacks #AISI
OpenAI GPT-6 Astra really good at supply chain attacks, UK gov warns
During testing, the model showed it can violate security rules more often than its predecessors
theregister.com
A key initiative to provide a trusted and safe framework for Agentic AI. It's definitely worth further investigating its capabilities and types of AI Assurance that it can provides ... cybersecuritynews.com/nvidia-launc... #NVIDIA #AgenticAI #SafetyPlatform #AI #Assurance
NVIDIA Launches Open Agent Safety Platform With 100 Industry Partners to Secure Autonomous AI Agents
NVIDIA launched Open Agent Safety Platform, an open framework to secure autonomous AI agents across models, tools, code, data, and networks.
cybersecuritynews.com
On the P(Doom) rise and impact on thw cyber security market ... www.ft.com/content/c3d9... #cybersecurity #AI #PDoom #MarketValue
Cyber security stocks are pumped up on P(doom)
Besieged by growing cyber threats, organisations are hurling money at the problem
ft.com
FYI - 'British ministers will brief defence companies and providers of critical national infrastructure on the threat posed by Russia amid increasing concerns about possible sabotage operations and cyberattacks' - www.reuters.com/business/aer... #Defence #CNI #UK
UK ministers to brief defence companies, infrastructure providers on Russia threats
British ministers will brief defence companies and providers of critical national infrastructure on the threat posed by Russia, the government said on Friday, amid increasing concerns about possibl...
reuters.com
Very relevant and insightful OT Security Report about OT cybersecurity programs. Quite worrying (but not unexpected ...) cyber security findings ... industrialcyber.co/reports/hone... #cybersecurity #OT #ReportFindings
Honeywell 2026 OT Security Benchmark highlights gaps in OT visibility, incident recovery, cybersecurity readiness - Industrial Cyber
Honeywell 2026 OT Security Benchmark highlights gaps in OT visibility, incident recovery, and cybersecurity readiness.
industrialcyber.co
Excellent and ambitious paper on 'AI-Assurance Ecosystems: Building the Infrastructure to Enable Confident Adoption of Safe AI' ... institute.global/insights/tec... #Assurance #AI #Ecosystem
institute.global
Great National Cyber Security Centre article discussing the key differences between Offensive and Defensive usage of Agentic / Frontier AI ... www.ncsc.gov.uk/blogs/one-do... #cybersecurity #NCSC #Defence #Offence #AgenticAI #FrontierAI
One does not simply defend agentically
Defenders can’t use AI in the same way attackers can, but there’s much they can do to unlock the potential of agentic cyber defence.
ncsc.gov.uk
Is this really the case? Interesting trends and findings discussed in the last IANS and Artico Search 2026 Security Budget report ... www.csoonline.com/article/4223... #cybersecurity #CyberSpending #CISO #AI
Security spending is growing — except for the typical CISO
AI is becoming the biggest destination for new security dollars, but spending remains uneven and strongest among organizations with mature AI governance.
csoonline.com
SANS key contribution to support cyber community's ever changing needs for Incident Response. Their 'Framework for Dynamic Incident Response' covers enterprise, Cloud and OT domains. industrialcyber.co/news/sans-la... #cybersecurity #SANS #DynamicIncidentResponse #Enterprise #Cloud #OT
SANS launches new Dynamic Incident Response framework to help security teams adapt as attacks evolve - Industrial Cyber
SANS launches Dynamic Incident Response framework to help security teams adapt to evolving attacks, shifting findings, changing priorities.
industrialcyber.co
Interesting cybersecurity developments in the FrontierAI domain ... techcrunch.com/2026/09/18/r... #FrontierAI #AI #cybersecurity
Researchers used Anthropic's Claude to hack into OpenAI | TechCrunch
Security researchers used Anthropic’s Claude to exploit vulnerabilities in OpenAI’s systems, taking over employee accounts and gaining access to an internal code repository before reporting the flaws.
techcrunch.com
FYI - Cyber Warfare Market Trends & Insights: www.prnewswire.com/news-release... #cybersecurity #CyberWarfare #Defence
Cyber Warfare Market worth $28.75 billion by 2031 - Exclusive Report by MarketsandMarkets™
/PRNewswire/ -- According to MarketsandMarkets™, the Cyber Warfare Market is projected to grow from USD 14.99 billion in 2026 to USD 28.75 billion by 2031, at...
prnewswire.com
Latest CISA recommendations about organisations' usage of Cyber Deception capabilities... www.helpnetsecurity.com/2026/09/17/c... #CISA #cybersecurity #CyberDecoys #CyberDeception
CISA wants critical infrastructure orgs and smaller security teams to start using cyber decoys - Help Net Security
Intruders will eventually get a foothold, so the smart move is to place cyber decoys in the environment, CISA says in latest guidance doc.
helpnetsecurity.com
This is a very important shift towards a risk-based approach to vulnerability management. Many organizations will need to change their VM processes and mentality as well as time to fully embrace this approach www.theregister.com/security/202... #CISA #VulnerabilityBulletin #RiskBasedApproach
CISA decides weekly vulnerability bulletin isn't necessary anymore
Agency's shift from static CVSS scores to risk-based prioritization sends the old format packing September 28
theregister.com
Thought-provoking article about the emerging cyber security challenges cutting across digital, physical and operational environments ... www.csoonline.com/article/4221...
AI is exposing a security structure built for yesterday’s threats
AI-driven threats are blurring cyber and physical security, making integrated, cross-functional defense essential for resilience.
csoonline.com
FYI - 'The EU Agency for Cybersecurity switched on the Cyber Resilience Act‘s Single Reporting Platform on 11 September 2026' www.helpnetsecurity.com/2026/09/14/e... #ENISA #CRA #VulnerabilityReporting
ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities - Help Net Security
The CRA Single Reporting Platform is live, and manufacturers now have 24 hours to report actively exploited vulnerabilities to EU CSIRTs.
helpnetsecurity.com
On EU CRA and Dynamic Software SBOM requirements ... - insight.scmagazineuk.com/eu-cyber-res... #cybersecurity #EU #CyberResilienceAct #ENISA #DynamicSBOM
EU Cyber Resilience Act to impose new software security obligations
insight.scmagazineuk.com
I am honoured to present at Offshore Renewable Energy (ORE) 2026 "The Quantum Wake-Up Call: Cyber Security Risks Facing Offshore Wind". If you cannot attend, register your interest share.hsforms.com/14Ej5f5pXQiW... for a copy of my presentation.
As expected and anticipated by many other investigations ... 'More than 100 firms, including rivals, say enterprises must fix systemic gaps before AI scales exploitation beyond current defenses' www.csoonline.com/article/4215... #cybersecurity #AI #CompressedCyberattackTimeline #Coalition
OpenAI-led coalition warns AI will compress cyberattack timelines, expose enterprise weaknesses
More than 100 firms, including rivals, say enterprises must fix systemic gaps before AI scales exploitation beyond current defenses.
csoonline.com
FYI - 'CREST has launched a Security Testing of AI standard and accreditation for cybersecurity aimed at giving buyers independent assurance over providers testing GenAI- and LLM-enabled systems' itbrief.co.uk/story/crest-... #cybersecurity #AI #AITesting #CREST #accreditation
CREST launches AI testing standard for cyber firms
Buyers of AI tools now have a benchmark to judge testing providers, as CREST's new standard targets gaps in assurance and due diligence.
itbrief.co.uk
These findings are quite alarming, expecially as this is likely to involve critical business sectors such as CNI, Maritime, Ports, etc. Please have a look at our view on Quantum Risks and designing a Post-Quantum Future: www.helpnetsecurity.com/2026/08/21/a...
Nearly half of enterprises have no one leading PQC migration - Help Net Security
Axiad research reveals gaps in enterprise PQC migration readiness, as ownership, testing and visibility lag behind confidence.
helpnetsecurity.com
On '30000 feet' cyber attacks to airplane Wi-Fis ... www.bleepingcomputer.com/news/securit... #cybersecurity #WiFi #Airplane
Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees
Delta Air Lines is investigating an unauthorized Wi-Fi network that appeared aboard a flight from Las Vegas to Atlanta carrying passengers who had attended the DEF CON hacker convention.
bleepingcomputer.com
On the supply chain risks for hardware and software solutions ... www.upday.com/uk/uknews/ch... #SupplyChain #Risks
Chinese cameras in elite forces' drones sent 'heartbeat' signals to IP address in China | The latest National and International News - upday News
Royal Navy surveillance drones used by elite special forces contained Chinese-made cameras that secretly transmitted data to China, prompting the Ministry of Defence to strip internet connectivity fro...
upday.com
Here we go. It is Meta turn to disclose that they had a rogue AI Agent / Model ... 'If AI companies are collecting badges for "our model escaped the test environment," Meta just earned one ...' www.theregister.com/ai-and-ml/20... #cybersecurity #FrontierAI #Risks #RogueAIAgents
Meta latest to tell world its AI agent wandered out of test pen
Another week, another firm explaining why one of its models reached somewhere it wasn't supposed to
theregister.com
FYI - 'New research from IBM indicates a significant rise in AI-related security breaches affecting UK businesses, with over 1 in 5 firms experiencing such an incident in the past year, according to IT Pro' insight.scmagazineuk.com/news-briefs/... #cybersecurity #AI #SecurityBreaches
AI-related security breaches surge in UK firms, IBM report reveals
insight.scmagazineuk.com
On the importance of Operational Technology (OT) cyber securityand proper governance ... #OT #cybersecurity #cyberattacks www.bleepingcomputer.com/news/securit...
CISA warns of cyberattacks disrupting U.S. water utilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and waste...
bleepingcomputer.com
Interesting article and analysis. The fact that cybersecurity isn't (only) an IT problem should be well understood but unfortunately it is not ... www.cio.com/article/4199... #cybersecurity #CISO
3 cybersecurity issues that should keep every CEO awake at night
Cybersecurity isn't an IT problem anymore — it's a leadership issue that fails when CEOs rely on flashy dashboards instead of fixing outdated operating models.
cio.com
The debate is ongoing, with interesting analysis (e.g. see this article) if this was just a 'convoluted marketing stunt' and assessment of the actual implications in the medium/long term ... www.theregister.com/ai-and-ml/20... #OpenAI #HuggingFace #cybersecurity #FrontierAI #Risk
OpenAI scored an own goal with HuggingFace attack, showing how open Chinese models are winning
Closed models with guardrails can still cause harm, but may also not be able to fix problems they caused
theregister.com
