As generative AI sparks increased curiosity over its potential uses, many also fear the consequences the tools could have on society. As a result, legislators are emphasizing the need to address the labor shortage in the cybersecurity sector. There it is again—that assertion of a labor shortage.

But what’s the reality? In the words of Rob. T. Lee, “A pendulum swing is underway across the cybersecurity hiring landscape, with traditional four-year college degree requirements increasingly becoming an entity of the past.”

I was recently joined by Kim Jones and Ben Rothke, who shared their views on the real problem of  increasing the cybersecurity workforce. Jones made the point that the industry has done a lot of work to feed the pipeline, and we continue to see that effort across institutions of higher learning. Vermont Business Magazine reported, “The United States Secret Service (USSS) and the National Computer Forensics Institute (NCFI) have awarded a multi-million dollar Cyber Range Contract to Champlain College.”

In yet another example, Louisiana State University also celebrated some generous investments in cybersecurity education this week, “a new center dedicated to protecting higher education statewide and providing a pathway to careers in cybersecurity for LSU students.” Additionally, the K-12 sector has added cybersecurity to classroom curricula. 

If these younger generations are raised with cybersecurity front of mind, surely whatever gap exists will only narrow—or one can hope. Until then, check out our Library of content to sharpen your skills.

Now let’s look at what else made industry headlines this week.

Oct. 20: As we near the close of October, government agencies, including the Commerce Department, are making headlines for their new or continued efforts to improve cybersecurity.

Oct. 20: Bleeping Computer reported, “Two weeks into an ongoing IT outage, Kwik Trip finally confirmed that it's investigating a cyberattack impacting the convenience store chain's internal network since October 9.”

Oct. 20: Information stealing malware, traditionally used to target Windows and Linux platforms, are  becoming increasingly popular in macOS, according to a post in Forbes.

Oct. 19: According to the ENISA Threat Landscape 2023, evolving trends by threat actors targeting the EU have elevated concerns that AI could have “disruptive impacts” on EU elections in 2024.

Oct. 19: According to a statement from the State Gaming Commission in New York, two casinos, Jake’s 58 and Resort World Hudson Valley, were shut down because of a cybersecurity incident. 

Oct. 18: Exploring the different uses of AI-generated facsimiles could create unexpected consequences for content creators.

Oct. 18: Medical and dental supply distributor, Henry Schein, reportedly took its systems offline in an effort to contain a cyber incident.

Oct. 17: Space News reported, “The cybersecurity firm SpiderOak has signed an agreement with the U.S. Space Development Agency to research the use of the company’s software to protect ground systems that control military satellites.”

Oct. 16: CISA issued a press release announcing, “an update to “Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software” that includes further detail on key principles, guidance, and is co-sealed by eight additional international cybersecurity agencies.