IoT & Hardware

Cybernews

Owners of TP-Link security cameras are being urged to install updates immediately after researchers demonstrated how hackers could take complete control of the devices, install malware and attack other systems on their home networks. OPSWAT has revealed how a new command-injection flaw can be chained with an earlier au…

IoT & Hardware

Hackread

MDR vs EDR vs SOC explained for 2026, covering tools, monitoring, incident response, staffing and how each option supports CMMC compliance.

ICS / OT & Critical Infrastructure

Industrial Cyber

Not-for-profit organization MITRE has released details of version 20 of its ATT&CK framework, expanding its coverage of critical infrastructure threats, AI (artificial intelligence)-enabled attacks and cyber espionage. The update adds campaigns documenting attacks on more than 30 Minnesota water and wastewater utilitie…

ICS / OT & Critical Infrastructure

Industrial Cyber

Following reports of cyberattacks on French supermarket refrigeration systems that disrupted hundreds of stores overnight from Oct. 11 to 12, 2026, forcing them to discard fresh and frozen food after attackers manipulated temperature controls and defrost settings, the vulnerability has been identified. The attack explo…

ICS / OT & Critical Infrastructure

Industrial Cyber

Global software company IGEL announced that Randy Resnick, a recognized Zero Trust leader and architect, has joined IGEL as field CTO, government and critical industries. The former DoD and NSA cybersecurity executive brings nearly four decades of technical and mission leadership to advance the IGEL Adaptive Secure End…

ICS / OT & Critical Infrastructure

Industrial Cyber

SANS Institute launched dedicated training tracks, designed for practitioners across enterprises, including CII sectors to strengthen the capabilities of cybersecurity capabilities in managing advanced persistent threats across critical digital and operational environments. Two specialised pathways have been introduced…

ICS / OT & Critical Infrastructure

Cyber Security News

MITRE released ATT&CK v20 on October 13, adding nine Enterprise techniques that describe how attackers may target AI systems, steal application-specific passwords to bypass multi-factor authentication (MFA), and get around CAPTCHA checks. The update also expands coverage for industrial control systems (ICS) and mobile …

IoT & Hardware

Cybernews

Amazon has released 2 new AI products that serve as on-the-go note-takers. However, some users say it’s a curse in disguise. Bee Frontier, which Amazon calls its “next-generation AI wearable,” is a bracelet-type device that takes notes by listening to conversations that are later turned into summaries, reminders, to-do…

IoT & Hardware

Cybernews

The Consumentenbond, the consumers’ association in the Netherlands, is taking legal action against Meta after it refused to modify its AI glasses. Two weeks ago, the consumer interest group demanded that Meta stop selling camera-equipped glasses in the Netherlands and modify the product to comply with privacy legislati…

IoT & Hardware

Dark Reading

Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.

ICS / OT & Critical Infrastructure

Dark Reading

Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.

ICS / OT & Critical Infrastructure

SecurityWeek

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access. Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and conti…

Data Breaches & Leaks

The Record · also reported by DataBreaches.net

Russian authorities have reportedly detained three suspected members of the DataSuckers hacking group following a cyberattack on a popular restaurant chain that exposed vast amounts of customer information.

Vulnerabilities & Exploits

Cyber Security News · also reported by GBHackers

Security researchers from the cybersecurity firm Calif demonstrated a working untethered jailbreak for iOS 27.0.1 on Apple’s newest iPhone 18 Pro. The live demo took place at Hexacon 2026, the offensive security conference organized by Synacktiv in Paris on October 16. It is one of the first public signs that Apple’s l…

Supply Chain & Third Party

The Hacker News

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a clou…