The Pilot Program for Enhancing Cybersecurity Skills Gaps in Ukraine returns in 2026 at twice the scale, bringing together six Ukrainian universities and two practical training tracks: SOC Analyst and Cyber Threat Intelligence & Incident Response. Students and faculty will gain hands-on cybersecurity experience through bootcamps, CybExer cyber range training, CTF competitions and professional certification, while the developed programs will later be integrated into university curricula.

The Rhysida ransomware attack on Berlin exposed a seven-day gap between data exfiltration and network isolation, followed by the publication of stolen government data after Berlin refused to pay the ransom. The incident highlights critical weaknesses in detection, segmentation, MFA and incident response — and shows why public-sector organisations outside the mandatory NIS2 scope should adopt equivalent security controls voluntarily.

Manchester Airports Group exposed data belonging to 8.7 million customers — much of it retained from Wi-Fi sign-ups and ancillary services. The incident shows how unnecessary data retention can turn low-value information into a high-impact security and compliance risk.

Millions of employee directory records allegedly extracted from major Azure/Entra ID environments show why identity data is far more sensitive than it looks. This case reveals how exposed organisational structures, privileged accounts, and service identities can become powerful tools for targeted phishing, impersonation, and privilege escalation.

A cyberattack on CEVA Logistics shows how a single compromised supplier can expose customer data across multiple organisations. The incident triggered twelve breach notifications and highlights a critical lesson: your cybersecurity risk extends far beyond your own network.

An autonomous AI agent breached Hugging Face’s production infrastructure, exploiting weak credentials and access-control gaps at machine speed. The incident shows that AI-driven cyber threats don’t necessarily need new attack methods — they can exploit existing security weaknesses faster than traditional defenses can respond.