Charlottesville reflects on delayed cloud migration after years of ERP challenges
The city, which was plagued by staff turnover following the deadly 2017 white supremacist rally, upgraded its back-office hub one year ago.
Read the original article →Security & Technology Briefing
Important technology news—without the noise.
Automatically updated cybersecurity alerts, municipal technology developments, and practical resources for local governments and businesses.
Latest Updates
Security and municipal technology
Recent developments that may affect networks, public services, critical infrastructure, employees, Microsoft environments, and technology planning.
Automatically refreshed from trusted sources. Last successful update: September 28, 2026 at 1:30 PM CDT.
JadePuffer agentic AI attacks target Azure, destroy cloud resources
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components. [...]
Read the original article →Modernizing SNAP starts with better data
Modernizing SNAP is not about collecting more data, but about making the data states already have work better together.
Read the original article →NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intrusions that combines custom loaders, encrypted archives, and extensible components to maintain long-term access and support follow-on operations.…
Read the original article →Multiple Vulnerabilities in NetScaler ADC and NetScaler Gateway Could Allow for Remote Code Execution
Multiple vulnerabilities have been discovered in NetScaler ADC and NetScaler Gateway, the most severe of which could allow for remote code execution. NetScaler ADC is a networking product that functions as an Application Delivery Controller (ADC), optimizing, secu…
Read the original article →80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking
Infostealer logs exposed AI account credentials and sessions tied to more than 80,000 corporate domains, creating risks ranging from stolen conversations to LLMjacking. SOCRadar examines the growing market for stolen AI logins and how organizations can identify th…
Read the original article →US soldier gets 70 months in prison for extorting 10 tech, telecom firms
A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024. [...]
Read the original article →CISA orders feds to patch exploited Citrix flaws by Wednesday
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities. [...]
Read the original article →OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle email
OpenAI is testing a new always-on assistant called "o", and references to the unannounced feature briefly showed up on the company's website. [...]
Read the original article →Citrix confirms two NetScaler RCE zero-days exploited in attacks
Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix the flaws. [...]
Read the original article →Federal privacy law highly unlikely in 2026, leaving states to continue setting their own rules
Experts said amid midterms and other congressional priorities, the prospects of federal data privacy legislation passing this year appear highly unlikely.
Read the original article →Multiple Vulnerabilities in ServiceNow's AI Platform Could Allow for Unauthorized Access
Multiple vulnerabilities have been discovered in ServiceNow's AI Platform, the most severe of which could allow for unauthorized access. The ServiceNow AI Platform is a unified, cloud-based foundation that integrates artificial intelligence, data, and workflow aut…
Read the original article →NYC tests electric construction equipment at city worksites
A new pilot will test six pieces of zero-emission construction equipment in Queens and Staten Island, with findings expected to inform the city’s next climate plan.
Read the original article →Storm-3168: Agentic-driven cloud attacks using compromised service principals
Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised service principals, identifying the activity as associated with Storm-3168 and providing guidance for defenders. The post Storm-3168: Agentic-drive…
Read the original article →Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the lo…
Read the original article →States look to lidar, machine learning and satellites to map landslide risks
New federal grants from the U.S. Geological Survey are helping states build landslide databases that can improve hazard mapping, emergency planning and public awareness.
Read the original article →Multiple Vulnerabilities in IBM Concert Software Could Allow for Remote Code Execution
Multiple vulnerabilities have been discovered in IBM Concert Software, the most severe of which could allow for remote code execution. IBM Concert is an agentic IT operations (IT Ops) and resilience platform designed to unify fragmented data, context, and actions…
Read the original article →Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involving Qilin, DragonForce, Anubis, and BERT ransomware, and provides guidance to help defenders detect and disrupt this activity before ransomware…
Read the original article →Trusted Sources
Go directly to current information
Official advisories and established technology publications provide the source material shown above.
CISA AdvisoriesUrgent threats and mitigation guidance.
MS-ISACCybersecurity resources for state and local governments.
BleepingComputerBreaking cybersecurity and technology reporting.
StateScoopState and local government technology news.
Microsoft SecurityThreat research and Microsoft security guidance.
CISA KEV CatalogVulnerabilities known to be actively exploited.
Government TechnologyCybersecurity reporting for government leaders.
Security Update GuideMicrosoft vulnerability and update details.
AI-Assisted Research
Ask questions and explore a topic with ChatGPT.
ChatGPT can help users search the web, explain unfamiliar technology, compare approaches, summarize public information, and develop follow-up questions.
Open ChatGPT ↗Article titles and excerpts are supplied by third-party publishers and displayed for informational purposes. Lantech Solution LLC does not control third-party content or endorse every opinion or recommendation. Verify critical details with official sources before making security, purchasing, legal, or policy decisions.