News

USF Reception & Fireside Chat, May 13, 2026

We are pleased to invite you to a reception co-hosted by the University of South Florida’s Global and National Security Institute (GNSI) and Cyber Florida as part of their student DC Experience.

The reception will feature a fireside chat with Douglas Silliman, former ambassador to Kuwait and Iraq, and current President of the Arab Gulf States Institute, and Karen Sasahara, former ambassador to Kuwait, and a distinguished Fellow at AGSI. It will convene leaders, professionals, and students from across the national security, cyber, and policy enterprise to discuss the most pressing strategic challenges of our time.

Date: Wednesday, May 13, 2026
Time: 5:00 – 7:00 PM
Location: The Florida House, 1 2nd St NE, Washington, DC 20002
Kindly RSVP by May 1st

USF Reception & Fireside Chat, May 13, 20262026-04-14T12:09:34-04:00

Cynthia Wyre — Project Manager at Rapid7 and the Queen of Cyber Media

Episode 71 — Cynthia Wyre

Cynthia Wyre — Project Manager at Rapid7 and the Queen of Cyber Media2026-04-07T16:57:57-04:00

Modernizing the U.S. Cyber Talent Pipeline for the AI Era

This report examines why Florida’s entry‑level cybersecurity market struggles – misaligned curricula, mixed job postings, and limited hands‑on experiences – and lays out the CyberBay2026 Regional Workforce Alignment Action Plan. A roadmap for educators, employers, and policymakers to scale evidence‑based solutions and strengthen Florida’s cybersecurity talent pipeline.

Modernizing the U.S. Cyber Talent Pipeline for the AI Era2026-04-02T16:50:45-04:00

ThreatLocker named lead sponsor for 3rd annual CyberLaunch

CyberLaunch

CyberLaunch, presented by ThreatLocker, expands access to Florida students for the nation’s largest state-sponsored cybersecurity competition

Orlando, FL, April 01, 2026 (GLOBE NEWSWIRE) — Cyber Florida at USF and ThreatLocker, a global leader in Zero Trust cybersecurity, today announced that ThreatLocker will serve as the lead sponsor of CyberLaunch, Cyber Florida’s annual cybersecurity competition for Florida middle and high school students. The financial support will help cover travel and lodging costs for participating teams, thereby expanding access to the nation’s largest state-sponsored in-person cybersecurity competition.

“Cybercriminals and nation-state actors aren’t slowing down, and we need more people ready to stop them,” ThreatLocker CEO & Co-Founder Danny Jenkins said. “Building that workforce starts with getting students interested early and giving them opportunities like CyberLaunch to develop real skills. My own interest in cybersecurity began in grade school, and we’re proud to support a program that helps foster that same interest in the next generation of cybersecurity professionals.”

Cyber Florida, a state-funded organization housed at the University of South Florida, works to position Florida as a national leader in cybersecurity. Programs like CyberLaunch directly support this mission by strengthening education, advancing research, and building the state’s cybersecurity workforce pipeline.

This year, 500 students representing 63 Florida high schools will compete in CyberLaunch. To qualify, students first participated in a statewide virtual qualifier held last fall, which was free and open to all middle and high school students across Florida. Of the 1,300 students who participated in the virtual qualifier, 500 of the top performers earned invitations to the in-person 2026 CyberLaunch State Championship to take place on April 24 at the University of South Florida’s Tampa campus. The competition features beginner, intermediate, and advanced tracks to accommodate students of all experience levels.

“Florida is becoming the epicenter of forward-thinking cybersecurity companies, driven in part by the growth of organizations like ThreatLocker,” said Cyber Florida Senior Director Ernie Ferraresso. “To sustain that momentum, we must invest in the next generation by creating opportunities for students interested in cybersecurity careers. CyberLaunch plays a key role in expanding access to cybersecurity education across the state.”

About ThreatLocker
ThreatLocker is a global cybersecurity leader that stops cyberattacks before they happen. The company’s Zero Trust Platform prevents breaches from both known and unknown threats by allowing only explicitly trusted software and activity across endpoints, networks, and cloud systems. Built to deploy quickly and scale across complex environments, the platform reduces operational overhead while keeping business running uninterrupted. Headquartered in Orlando, Florida, with offices in Dublin, Dubai, and Brisbane, ThreatLocker protects over 70,000 organizations worldwide.

About Cyber Florida 
The Florida Center for Cybersecurity at the University of South Florida, commonly referred to as Cyber Florida at USF, was established by the Florida Legislature in 2014. Its mission is to position Florida as a national leader in cybersecurity through comprehensive education, cutting-edge research, and extensive outreach. Cyber Florida leads various initiatives to inspire and educate current and future cybersecurity professionals, advance applied research, and enhance cybersecurity awareness and safety of individuals and organizations.

Contact Data

ThreatLocker Inc
321-515-3813
press@threatlocker.com

Jennifer Kleman
Cyber Florida
863-398-5610
jennifer437@cyberflorida.org
ThreatLocker named lead sponsor for 3rd annual CyberLaunch2026-04-01T13:13:12-04:00

Chrome Zero-Days Threat Advisory

I. Introduction

On 13th March, Google pushed out an emergency security patch to address a pair of critical zero-day vulnerabilities used by attackers to actively exploit the Google Chrome web browser. CVE-2026-3909 and CVE-2026-3910 both carry a high severity CVSS score of 8.8 (a standardized way to measure vulnerabilities’ severity). Both have been confirmed and recognized by Google and Cybersecurity and Infrastructure Security Agency (CISA).

Due to the nature of these flaws existing within the foundation of Chromium code base, that caused these vulnerabilities to be exploited, the attack surface extends beyond Google Chrome. Any browser or application utilizing the Chromium engine is affected, common examples include:

  • Brave
  • Opera
  • Vivaldi
  • Microsoft Edge

The vulnerabilities target two distinct core components:

  • CVE-2026-3909 (Skia Out-of-Bounds Write): An out-of-bounds memory write vulnerability in Skia 2D graphics library, allowing an attacker to remotely corrupt memory leading to browsers crashing or further exploited.
  • CVE-2026-3910 (Inappropriate implementation in V8): A severe critical code injection and memory buffer vulnerability within the V8 JavaScript engine, allowing a remote attacker to execute arbitrary code.

Since these attacks only require a simple click from a victim or to visit a malicious webpage, the risk is immediate; users are urged to update their browsers to mitigate any potential threats.

II. Technical Analysis

Both of these zero-day vulnerabilities target the renderer process, a sandboxed environment responsible for parsing HTML, executing JavaScript, and drawing visual elements on the screen. Since the renderer handles a lot of untrusted data on the web, it is a primary and common target for browser exploitation.

To understand the severity of CVE-2026-3909 and CVE-2026-3910, it is important to look at how the foundational architecture of the Chromium engine manages untrusted web content.

CVE-2026-3909:

Skia Out-of-Bounds (OOB) Write: Skia is a foundational open source 2D graphics library used by Chromium. It renders all visual elements on a webpage: SVG (Scalable Vector Graphics) paths, HTML elements, CSS borders and web fonts.

  • The Vulnerability: An Out-of-Bounds (OOB) write occurs when a program writes data past the intended boundary of an allocated memory buffer. In the case of CVE-2026-3909, a logical flaw in how Skia calculates the memory requirements for specific, complex graphic rendering tasks (likely related to path stroking, matrix transformations, or clipping bounds) results in the allocation of a heap buffer that is too small for the resulting data.
  • An attacker cannot simply crash the browser; they must control the crash to hijack the system. To exploit this Skia flaw, an attacker could use JavaScript to meticulously arrange the browser’s memory layout, also known as “heap grooming” technique. By precisely positioning specific data structures adjacent to the vulnerable Skia buffer, the attacker triggers the OOB to write to overwrite the neighboring data.
  • The attacker’s goal is to overwrite a function pointer or a C++ virtual table (vtable) pointer. Once the browser attempts to use that corrupted pointer for a subsequent graphic operation, the execution flow is redirected to the attacker’s malicious shellcode, granting them control over the renderer process.

CVE-2026-3910

V8 Inappropriate Implementation: V8 is Google’s JavaScript and WebAssembly engine. V8 has a multi-tiered architecture, which relies on an interpreter and “Just-In-Time” optimizing compiler.

  • The Vulnerability: As JavaScript runs, TurboFan monitors the code. If a function is executed repeatedly, TurboFan compiles it into highly optimized machine code. To do this quickly, TurboFan makes strict assumptions (speculative optimization) about the types of variables being used based on past behavior. “Inappropriate implementation” indicates a critical bug where TurboFan’s internal logic incorrectly models the side-effects of a specific JavaScript operation, causing it to drop essential security boundaries (like bounds checks or type checks) in the optimized code.
  • By feeding the optimized function an unexpected data type, the attacker intentionally violates TurboFan’s assumptions. Since the safety checks were compiled out, the engine experiences “type confusion.” For example, the V8 engine might be tricked into treating a raw integer as a memory pointer, or treating a standard array as an array of executable objects.
  • Once type confusion is achieved, the attacker uses it to construct an arbitrary memory read and an arbitrary memory write. The attacker can now scan the V8 heap, locate executable memory pages (often utilizing WebAssembly memory allocations, which are marked as Read/Write/Execute), inject their malicious payload, and execute it.

III. Remediation and Mitigation

Since CVE-2026-3909 and CVE-2026-3910 are being actively exploited in the wild and require no user interaction beyond visiting a malicious webpage, organizations must prioritize immediate remediation.

1. Immediate Remediation: Software Updates

The only definitive method to eliminate the risk posed by these vulnerabilities is to update the affected software. Security and IT operations teams should utilize automated patch management systems to push these updates across their respective networks. 

  • Google Chrome: Verify that all endpoint deployments of Google Chrome are updated to the following versions (or later):

    Windows and macOS: Version 146.0.7680.75 or 146.0.7680.76

    Linux: Version 146.0.7680.75 

  • Chromium-Based Browsers: Ensure that all other approved browsers utilizing the Chromium engine (e.g., Microsoft Edge, Brave, Opera, Vivaldi) are updated to their respective vendors’ patched versions. 
  • Electron Applications: Monitor vendor advisories for desktop applications built on the Electron framework (e.g., Slack, Microsoft Teams) and apply updates as they are released, as these applications bundle the vulnerable Chromium components. 
2. Threat Detection and Hunting 

Security Operations Centers (SOC) should continue to ensure their Endpoint Detection and Response (EDR) platforms are configured to monitor for anomalous behavior originating from browser processes. Specifically, analysts should hunt for: 

  • Unexpected child processes spawning from chrome.exe or msedge.exe (e.g., command shells, PowerShell, or unknown executables). 
  • Browser processes attempting to write executable files to disk outside of standard download directories. 
  • Unexpected network connections initiated by the browser to known Command and Control (C2) infrastructure following a browser crash event. 
  • Monitor for unexpected chrome.exe crashes and Ensure the website or external website is legible. 
Chrome Zero-Days Threat Advisory2026-04-01T10:09:15-04:00

Teacher Spotlight: Yoel Mozote

Yoel Mozote

Teacher: Yoel Mozote

District: Miami-Dade County

Yoel Monzote is a cybersecurity and computer science educator at iPrep Academy North in Miami, where he prepares the next generation of digital defenders through real-world instruction in network security, ethical hacking, and IT.

Under his leadership, iPrep Academy North has become a hub for hands-on, competitive learning. His students have earned:

  • 3rd Place (Beginner Level) at CyberLaunch 2025, a statewide competition hosted by Cyber Florida with more than 1,000 participants
  • 1st Place in the Innovate Challenge 2025 district competition, outperforming nine high school programs

Mr. Monzote emphasizes critical thinking, problem-solving under pressure, and technical excellence. He has also secured donated devices so students can practice on real hardware.

He also teaches at Miami Dade College (MDC), where he is known for connecting academic theory with the rigorous demands of today’s cybersecurity industry.

Thanks for all you do, Mr. Monzote!

Would you like to be featured in our Teacher Spotlight? To nominate yourself or another deserving teacher, complete the interest form below!

Teacher Spotlight: Yoel Mozote2026-03-30T13:14:36-04:00

Securing Florida’s K-12 Schools Against Cyber Threats

Cyber Florida’s 2025 research examines operational cyber readiness in Florida’s K–12 districts, drawing on semi-structured interviews with IT and cybersecurity leaders from 17 districts. The report highlights vulnerabilities in student privacy protection, incident response, patching and network segmentation, policy gaps, staffing and budget barriers, and vendor risk. Evidence-based findings and practical recommendations guide district leaders, policymakers, and education IT teams to strengthen resilience, compliance, and data-security practices across public schools.

Securing Florida’s K-12 Schools Against Cyber Threats2026-04-08T10:04:39-04:00

CISSP Certification Boot Camp

The Cyber Florida FirstLine Program, in partnership with the Florida Digital Service, is proud to offer a CISSP Certification Boot Camp delivered by The Knowledge Academy. This training is designed to equip participants with the knowledge and preparation needed to pursue the Certified Information Systems Security Professional (CISSP) credential. Participants who complete the boot camp are expected to take the certification exam within 30 days of finishing the course.

Class Date: May 4th -May 8th
Location: Capital Circle Office Complex (specifics will be sent to approved registrants)
Registration is now closed. Please contact FirstLine@cyberflorida.org for additional information.
CISSP Certification Boot Camp2026-05-04T09:52:22-04:00

SEC+ Certification Boot Camp

The Cyber Florida FirstLine Program, in partnership with the Florida Digital Service, is proud to offer a SEC+ Certification Boot Camp delivered by The Knowledge Academy. This training is designed to equip participants with the knowledge and preparation needed to pursue the Security Plus (SEC+) credential. Participants who complete the boot camp are expected to take the certification exam within 30 days of finishing the course.

Class Date: May 11 – May 14
Location: Capital Circle Office Complex (specifics will be sent to approved registrants)
Please note this bootcamp requires approval. Complete the form below to request your seat, and our team will confirm your eligibility.
SEC+ Certification Boot Camp2026-04-11T09:14:59-04:00

CyberBay 2026 Showcases Collaboration, Competition, Innovation

CyberBay

Tampa Bay’s growing cybersecurity ecosystem

CyberBay Summit 2026 brought together leaders from across industry, government, academia, and defense to tackle one of the most pressing challenges of the digital age: protecting our systems, infrastructure, and data while preparing the next generation of cyber defenders.

Held at the JW Marriott Tampa Water Street, the three-day conference welcomed cybersecurity educators, entrepreneurs, policymakers, professionals, researchers, and students from across the region and beyond. They explored emerging technologies, partnerships, and workforce initiatives shaping the future of cybersecurity and helping Tampa Bay become a growing national hub for cyber innovation.

A collaborative approach to cybersecurity

From the opening sessions through the closing events, the Summit emphasized a central theme: cybersecurity is not a challenge any single sector can solve alone.

Across dozens of panels, workshops, and technical sessions, speakers explored topics ranging from artificial intelligence and threat intelligence to critical infrastructure protection and workforce development. The discussions reflected the shared responsibility among businesses, defense partners, public agencies, and universities to strengthen cyber resilience.

Leaders from government, industry, and academia highlighted the need to align training, research, and operational experience to address the growing global cybersecurity workforce gap.

Programs like the Security Operations Center Apprenticeship Program (SOCAP), operated by Cyber Florida at USFhttps://cyberflorida.org/, demonstrate how collaborative initiatives can prepare students and early-career professionals to defend real-world systems while supporting public-sector organizations.

That commitment to workforce development was underscored during the summit when Tampa-based cybersecurity company and CyberBay lead sponsor, ConnectSecure, announced a $100,000 investment to expand SOCAP, adding five new student apprentices to the program.

The initiative provides hands-on cybersecurity training while helping protect Florida organizations from real cyber threats, an example of how industry investment can directly support workforce readiness.

Keynote speakers set the tone for cybersecurity’s future

Two dynamic keynote speakers helped anchor CyberBay Summit 2026, offering timely perspectives on the evolving cybersecurity landscape and the shared responsibility required to defend it.

Jen Easterly, former Director of the Cybersecurity and Infrastructure Security Agency, and now CEO of RSAC, delivered a powerful message on national resilience, emphasizing the importance of public-private collaboration in protecting critical infrastructure and strengthening the nation’s cyber defenses.

Rachel Wilson, a seasoned cybersecurity executive and former intelligence leader, brought a global perspective to the stage, highlighting how geopolitical dynamics, emerging technologies, and sophisticated threat actors are reshaping risk for organizations of all sizes.

Together, their insights reinforced a central theme of the summit: that cybersecurity is not just a technical challenge but a strategic imperative that requires coordination across academia, defense, government, and industry.

Showcasing innovation and emerging technologies

CyberBay Summit also spotlighted innovation across the region’s rapidly growing cybersecurity ecosystem through the Democratizing Cybersecurity Innovation Challenge, a competition designed to accelerate practical security solutions for real-world use.

Developed by CyberBay’s Innovation Solutions Working Group and led by Manish Agrawal, professor at the University of South Florida and academic director at Cyber Florida, the challenge focuses on identifying cybersecurity technologies that are not only effective but also usable and affordable for organizations that may lack large security budgets.

During the Summit, three finalist companies pitched their solutions live to a panel of investors and technology leaders from organizations including Tampa Bay Wave, Embarc Collective, and Florida Funders.

The competition’s $70,000 non-dilutive grant, provided by Bellini Capital, was awarded to Actualization.ai for its SquarePact platform, which helps make cybersecurity tools more accessible and cost-effective for small and medium-sized organizations. The company is led by John Licato, USF associate professor, researcher, and entrepreneur focused on advancing practical applications of human and machine reasoning in cybersecurity.

Two additional companies, HACKsee and RedShield, were also recognized as finalists for their innovative approaches to strengthening cybersecurity capabilities.

By bringing together startups, investors, researchers, and industry leaders, the Innovation Challenge demonstrated how collaboration within the CyberBay ecosystem is helping accelerate the development of practical cybersecurity technologies that can be deployed in organizations today.

Hands-on competition and talent development

CyberBay also served as a proving ground for rising cybersecurity talent.

Students and professionals competed in multiple cybersecurity challenges, including capture-the-flag competitions and technical exercises designed to test skills in threat analysis, problem-solving, and system defense.

And the 2nd Annual CyberBay Cup winners are…

1st Place – $20,000
Reigning Champions: Squid Proxy Lovers
• Brayden Borges (BraydenPikachu)
• Andrew Effenhauser (corgo)
• Salah Abbas (outwrest)
2nd Place – $10,000
lamenting llamas
• Beau B (corial)
• Jason Mercier (KA0x)
• Non Dylan (bobdylan)
• turingdot (turingdot)
3rd Place – $5,000
Waka Flocka Flocto – Hard in the plate
• Varun Iyer (Varoon5)
• Vishwa Iyer (vishiswoz)
• Arjun Lalith (flyingpies)
4th Place – $2,500
Kali Pro
• Derek Rook (r00k)
• Jose Rodriguez (joehacksalot)
• Ethan Puchaty (n0decaf)
• Cooper Wiegand (shiloh)
5th Place – $2,500
Five Knights at Bellini’s – University of Central Florida
• Ardian Peach (oatzs)
• Caitlin Whitehead (Knittingirl@UCF)
• Tyler Waddell (brosu)
• Andy Pompura (vv10n)

Memorable moments

Beyond the technical discussions, CyberBay Summit also delivered memorable experiences that brought attendees together, including special presentations, networking receptions, and entertainment that celebrated the energy and innovation driving the region’s cybersecurity community.

A special lunch presentation, Beyond the Imitation Game – From Alan Turing and James Bond to e-Commerce and Quantum Encryption, explored the fascinating history of codebreaking and the enduring impact of the Enigma machine on modern cybersecurity.

The supporters who made it possible

CyberBay Summit would not have been possible without the strong support of its exhibitors and sponsors.

Organizations across the cybersecurity ecosystem contributed their expertise, leadership, and resources to make the Summit a success, sharing new technologies, showcasing solutions, and building connections that will help strengthen cybersecurity resilience across the region.

Their participation helped create an environment where attendees could learn from one another and forge new collaborations.

Luminary Sponsor: ConnectSecure

Visionary Sponsors: CyberFox and SkillBit

Innovator Sponsor – Podcast: ThreatLocker

Connector Sponsor – Enigma Presentation: Rapid7 Women

Exhibitors:

Bellini Center for Talent Development, USF
Bellini College, USF
BlackCloak
Caju AI
CommHIT
Columbia Southern University
Conceal, Inc
ConnectSecure
CyberFox
Devicie
Digicert
EC-Council
Florida Department of Law Enforcement (FDLE)
Florida International University Jack D. Gordon Institute for Public Policy
Fox Pick
Ginger Cybersecurity
Jones & Bartlett Learning
Live Wildly
Maritime Hacking Village
Mayweather Group
MSP Influencer
Netsync
Rapid7
Resecurity
Saint Leo University
SimSpace
SkillBit
Tampa Bay Wave
ThreatLocker
TierPoint
University of South Florida Cybercriminology
USF Muma College of Business
University of South Florida Office of Corporate Training and Professional Education
University of Tampa
University of West Florida
Vilkas Cybersecurity
Wolfeevo

Building the future of cybersecurity in Tampa Bay

Events like CyberBay Summit demonstrate how partnerships between academia, defense, government, and industry can accelerate innovation, develop talent, and strengthen our collective cyber defenses.

By bringing together a diverse audience from across the cybersecurity community, CyberBay plays an important role in shaping the region’s cyber ecosystem and preparing the workforce to defend tomorrow’s digital infrastructure.

Continuing the momentum

While CyberBay Summit serves as the region’s annual gathering for the cybersecurity community, the work continues long after the conference ends. Through CyberBay Working Groups, collaboration takes place year-round to turn ideas into action and advance practical cybersecurity solutions.

Commissioned by Bellini Capital and supported by institutional partners, including Cyber Florida, the working groups were created to address the key challenges identified in the CyberBay 2025 community survey. These groups focus on closing critical gaps in cybersecurity infrastructure, bridging the divide between thought leadership and real-world implementation, and maintaining momentum across the region’s cybersecurity ecosystem between annual summits.

Each working group is led by distinguished experts and focuses on a core pillar of the cybersecurity landscape: strengthening undergraduate cybersecurity education, accelerating innovation in practical security solutions, and advancing workforce development strategies to build a stronger regional talent pipeline. Leaders include USF professors and researchers Sriram Chellappan, Manish Agrawal, and Michelle Angelo-Rocha.

Building on the momentum of the CyberBay Summit 2026 and insights from the CyberBay 2026 survey, a new Cyber Insurance Working Group is being launched to address one of the most influential forces shaping cybersecurity practices today. Survey findings identified cyber insurance as a key driver for improving cyber hygiene across organizations, underscoring its growing role in risk management and resilience.

This new working group will bring together stakeholders from across industry, government, and the broader cybersecurity community to focus on two primary objectives: normalizing insurability criteria and simplifying risk management practices. By aligning standards and reducing complexity, the group aims to clarify and make more attainable cybersecurity expectations for organizations of all sizes.

CyberBay is actively seeking participants to help shape this effort and contribute their expertise. Those interested in joining the Cyber Insurance Working Group can sign up on this form.

Together, these working groups ensure that CyberBay is more than a conference; it is an ongoing collaborative effort to strengthen Florida’s cybersecurity capabilities and build a resilient digital future. Organizations and professionals interested in contributing to these initiatives are encouraged to get involved and help shape the next phase of CyberBay’s impact.

But wait! There’s more! Let’s keep the conversation going…

While CyberBay Summit 2026 may have concluded, the conversations and connections continue year-round, including through the CyberBay Podcast.

Featuring real people and real stories from the heart of Tampa Bay’s cybersecurity community, the podcast offers a more personal look at the individuals shaping the field. Each episode explores the journeys, values, and unexpected paths that brought today’s cyber leaders, innovators, and rising talent into the industry and into the CyberBay ecosystem.

From career insights and emerging tech trends to stories of growth, purpose, and community, the CyberBay Podcast goes beyond job titles to highlight the human side of cybersecurity. Tune in to stay connected, inspired, and engaged with the voices driving CyberBay forward.

Don’t miss a single CyberBay update. Follow the momentum on the CyberBay LinkedIn page and the CyberBay website. See you next March for CyberBay Summit 2027!

CyberBay 2026 Showcases Collaboration, Competition, Innovation2026-03-26T10:29:15-04:00