sanitised. IoT & ICS/OT Daily Briefing · Friday 16 October 2026
 |
IoT & Hardware
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
BleepingComputer
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims’ internet connections through a commercial residential proxy network. The operator installed Pawns.app, a legitimate bandwidth-sharing application that lets users earn money by sharing their internet connections, on devices without the own…
|
|
 |
ICS / OT & Critical Infrastructure
Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers
SecurityWeek
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access. Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and conti…
|
|
 |
IoT & Hardware
WiFi can be used to detect hidden guns and alert security, study shows
Cybernews
Excerpt: WiFi setup can distinguish who carries a hidden gun, and who has a water bottle WiFi signals can be used to detect concealed handguns and cover some blind spots in surveillance cameras and metal detectors, a study by the Swedish Defense Research Agency (FOI) has proposed. The researchers demonstrated a prototy…
|
|
|
|
|
|
|
|
 |
IoT & Hardware
ROMULUS: Analysis of a New Multi-Payload ClickFix Delivery Platform
Forescout Vedere Labs
We recently reported how cybercriminals use ClickFix to deliver malware loaders that are then leveraged to deploy final payloads such as RATs or ransomware on victim machines. On September 28, Huntress reported a campaign that adds a new link to that common attack chain: threat actors abused ChatGPT’s Custom GPTs that …
|
|
 |
IoT & Hardware
Raven AI lets cops find your home from a photo taken inside
Malwarebytes Labs
Photos you take with your phone and some digital cameras can contain hidden information, including where they were taken. You can strip that data out before sharing a photo with someone, which would help to protect your location. But the image itself may still give you away. A company called Graylark says its Raven AI …
|
|
 |
IoT & Hardware
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
CyberScoop
That online ad you saw for earbuds, a drone or bubble gum-scented car air freshener may have been a gateway for mercenary spyware that can infect your device without you ever having to click on it. The likely goal, according to the researchers, is large-scale tracking and surveillance, enabled by accident by major indu…
|
|
 |
IoT & Hardware
UK keeps AI safeguards in the maybe pile for Cyber Security BIll
The Register (Security)
Officials say amendments remain under consideration despite minister's pledge to act UK officials have stopped short of committing to AI-specific measures in the Cyber Security and Resilience Bill despite ministers promising to legislate wherever necessary. The uncertainty comes amid warnings about autonomous AI threat…
|
|
 |
IoT & Hardware
Grok Bot catches phishing emails, but could expose users to attacks
Cybernews
Grok Bot caught a phishing email claiming to be from SpaceXAI, but there are a few reasons why having it check malicious emails could be disastrous. Wes Morrill, the lead Cybertruck engineer at Tesla, took to X to praise Grok Bot for catching a phishing email in his inbox. The engineer posted an email inviting Morrill …
|
|
|
|
 |
Ransomware & Extortion
Ransomware Attacks Intensify: Criminals Shift Focus to Target Employees and Their Families
Cyber Security News · also reported by DataBreaches.net
Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force companies to pay. According to the Semperis 2026 Ransomware Risk Report, 37% of successful attacks included threats against workers’ friends or relatives. The findings show that ran…
|
|
 |
Vulnerabilities & Exploits
BeyondTrust patches zero-day exploited in attacks since August
BleepingComputer
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. Remote Support is the company's enterprise-grade support solution that helps IT service desks, help desks, and customer support teams troubleshoot issues remotely. …
|
|
 |
Security
Why Active Directory weaknesses stay open for years in teams with one or two admins
Help Net Security
David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a cohort works, with weekly sessions, homework and measurements at the start and end. He explains …
|
|
