sanitised. IoT & ICS/OT Daily Briefing · Monday 19 October 2026
Today in IoT & ICS/OT
 |
IoT & Hardware
16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password
Security Affairs
A Broadcom Wi-Fi flaw dating back to 2010 allows attackers within Wi-Fi range to execute code on vulnerable routers without authentication. Researcher Quentin Kaiser presented a talk at Hexacon in Paris documenting a vulnerability in Broadcom’s proprietary 802.11 implementation that has been present in their SDK since …
|
|
 |
IoT & Hardware
Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
The Hacker News
A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working against home gateways supplied by three Belgian internet pr…
|
|
 |
IoT & Hardware
Ukrainian drones hit VK data center and Ozon warehouse near St. Petersburg
Cybernews
Drones hit St. Petersburg overnight, striking one of VK’s data centers in the Leningrad region and hitting a logistics center belonging to major Russian retailer Ozon. During the night of October 17th-18th, Ukraine launched a large-scale drone attack across Russia, setting fire to the St. Petersburg Oil Terminal and th…
|
|
Catch up
Recent IoT & ICS/OT stories you haven't had in a briefing yet.
 |
IoT & Hardware
Your Docking Station Has a Patching Problem
GBHackers · 17 Oct
Summary: One BIOS setting can stop a dock from updating, and two dock CVEs live in the update tools themselves. Here’s how docks end up unpatched, and what to check on DMA protection. The easiest way to leave a dock unpatched is to lock down the laptop it’s plugged into. Dell’s support article for the […]
|
|
 |
IoT & Hardware
AI Decision Models and Their Impact on AI SOC Platforms
The Hacker News · 16 Oct
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cribl published cribl-…
|
|
Also in security today
 |
AI & Emerging Tech
US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars
SecurityWeek · also reported by DataBreaches.net
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access. Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and conti…
|
|
 |
Data Breaches & Leaks
Frontier settles data breach affecting 59K Connecticut residents for $625K
Cybernews
Frontier Communications and the Office of the Attorney General of Connecticut have agreed to a $625,000 settlement to resolve a 2024 data breach. In April 2024, the American telecommunications company detected unauthorized access to its internal IT systems. The attacker used compromised credentials belonging to Frontie…
|
|
 |
Fraud & Cybercrime
Interpol-led operation strikes online child abuse networks, resulting in 95 arrests
Cybernews
An international law enforcement operation spanning 17 countries from Latin America and Europe has disrupted a criminal network responsible for the production and distribution of child sexual abuse material (CSAM). The operation, coordinated by Interpol, involved 4 parallel investigations conducted between March and Se…
|
|