sanitised. IoT & ICS/OT Daily Briefing · Thursday 15 October 2026
 |
ICS / OT & Critical Infrastructure
The internet’s attack surface moves at very different speeds
Help Net Security
Censys found that AI-related software exposed to the public internet grew 63% in nine months, from 164,088 IP addresses in October 2025 to 267,915 in July 2026. Elsewhere in its scans, the internet-scanning company measured much slower movement. Exposed industrial control systems rose about 4% in two and a half years. …
|
|
 |
IoT & Hardware
AI worms could spread across your smart devices, Anthropic warns
Malwarebytes Labs
Your streaming box might not look like much of a computer. But connect enough inexpensive devices together, and they can run an AI model. Researchers at Anthropic demonstrated this by running a Google Gemma model across 15 off-brand Android TV boxes. They warn that small models could soon spread across vulnerable inter…
|
|
 |
ICS / OT & Critical Infrastructure
ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
SecurityWeek
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access. Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and conti…
|
|
|
IoT & Hardware
Cyberattack on Connected Fridges in France
Schneier on Security
Another IoT cyberattack, this one in France: Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket chain affected. […] Normally, supermarket freezers go through a short period of defrosting overnight,…
|
|
|
|
 |
IoT & Hardware
Ukraine says their troops suddenly face restrictions over Starlink access
Cybernews
SpaceX seems to have limited Starlink operations in Ukraine, thus disrupting several important military missions, an advisor on military technology to Ukraine’s president Volodymyr Zelensky announced. Serhyi Beskrestnov, Zelensky’s advisor who’s also a popular blogger, said on Telegram that Starlink terminals travellin…
|
|
|
|
|
|
|
|
 |
ICS / OT & Critical Infrastructure
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
Dark Reading
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
CVE-2026-104935
|
|
 |
ICS / OT & Critical Infrastructure
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
The Register (Security)
Vendor promises fix for separate privilege-escalation flaw in the coming weeks Ivanti customers are being urged to update Connect Secure and check for compromise after attackers exploited a newly disclosed zero-day vulnerability. On Tuesday, Ivanti released updates for Connect Secure (ICS) to fix CVE-2026-104935, an au…
CVE-2026-104935
|
|
 |
ICS / OT & Critical Infrastructure
AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds
SecurityWeek
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access. Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and conti…
|
|
