RIT Cyber Security Class Blog

By: Alexander Leal Rogers In today’s cybersecurity landscape, the conversation usually revolves around data: stolen passwords, leaked credit card numbers, or compromised emails. However, there is a far more dangerous frontier known as Operational Technology (OT). These are the physical systems, the pumps, valves, and sensors, that keep our water clean and our lights on.

By: Seyma Senliler 23andMe is a direct-to-consumer genetic testing company that allows users to submit a saliva sample to learn about their ancestry, genetic traits, and potential health risks. 23andMe is not a healthcare provider, so it is not covered under HIPAA protection laws. As a consumer service, the sensitive genetic data it collects is not fully protected, raising unique privacy concerns. Unlike insurers or medical providers, 23andMe is not subject to traditional healthcare regulations.

By Josh Berty In the world of cybersecurity, one big thing has been making it easier and less expensive to commit an attack, AI. The usage of Artificial intelligence in cyber attacks poses a great threat to many companies, as the barrier to entry is so much easier. An answer for this recent progression in cyber attacks is to invest more into security. So if this is an answer then why are many companies accepting the attacks and not investing as much as they can into security?

Picture Source: https://spectrum.ieee.org/fiber-optic-cable-record The fiber optic cable in your wall is more than just a gateway to high-speed internet; it is a sensitive, vibrating string of glass that can be turned into a high-fidelity microphone. According to groundbreaking research presented at the NDSS Symposium (Network and Distributed System Security Symposium.) 2026, the last mile of our communication infrastructure is vulnerable to an undetectable acoustic attack.

4/13/2026 Mike N. https://time.com/article/2026/04/07/ai-quantum-computing-advance/ According to a recent time magazine article, Researchers recently uncovered concerning findings in new studies from Google and the quantum computing firm Oratomic. The data indicates that quantum computers could soon be advanced enough to compromise the encryption protocols that currently secure the internet.

In today’s digital world, messaging apps like WhatsApp have become one of the main ways people communicate. These apps use end-to-end encryption, which ensures that only the sender and receiver can read messages—not even the company itself can access them. While this is a major advancement for cybersecurity and personal privacy, it has also created a serious challenge for law enforcement.

Right now, somewhere in the world, an adversary is quietly collecting encrypted data they can’t read yet. Government communications, healthcare records, financial transactions, intellectual property. They’re storing it, patiently, because they know that within the next few years, quantum computers may hand them the keys to decrypt all of it. This strategy is called “harvest now, decrypt later,” and it’s not a theoretical risk. According to the NSA, CISA, and NIST, adversaries are already doing it.

By John Connelly In February 2024, Change Healthcare, a subsidiary of UnitedHealth Group, experienced a ransomware attack attributed to the ALPHV/BlackCat group. The incident has been widely described as the largest healthcare data breach in U.S. history, ultimately impacting approximately 190-193 million individuals, nearly half of the U.S. population.

By Cole Wisniewski Chinese state-sponsored hackers were able to spend as long as two years inside the biggest US telecom networks using the same wiretap technology that the U.S. Government ordered telecom companies to create for law enforcement — and what followed would totally flip a 30 year debate on encryption. The Salt Typhoon hack got into at least 9 major U.S. telecom companies and acquired call metadata for over a million U.S. citizens.

According to the FBI, acts of online sextortion have seen a rise among many sites and messaging platforms. Sextortion is the act of threatening or coercing a person into sending explicit images online. Usually starting out as a simple favor, the criminals ask for intimate pictures before threatening to publish the content they have received. Victims consist of minors who are usually then pressured to send more photos, send money, or do certain deeds.