sanitised. IoT & ICS/OT Daily Briefing · Tuesday 20 October 2026
 |
ICS / OT & Critical Infrastructure
How to Get Your Freezers (and Other Stuff) Off the Internet!
Waterfall Security
Andrew Ginter’s practical advice for the smallest retailers and water utilities with Internet-exposed freezers and OT devices: bring in a firewall, allow only fixed IP addresses, and go live safely.
|
|
|
|
 |
IoT & Hardware
Secure Remote Access: The Data Center Risk Not on the Uptime Slide
Forescout Vedere Labs
Ask anyone who runs a data center what keeps them up at night and you’ll get a familiar list: power, cooling, redundancy, uptime. Maybe a generator that didn’t start during the last load test. Those are the right worries. They’re just not the whole list. Here’s the one I’d add. Every one of those facilities has a small…
|
|
|
|
|
|
 |
IoT & Hardware
Researchers Hack Broadcom Wi-Fi Routers Without Passwords and Gain Full Root Access
GBHackers
A flaw in Broadcom’s Wi-Fi software can let someone within wireless range take control of vulnerable routers without knowing the Wi-Fi password. The issue affects the company’s implementation of Wi-Fi Protected Setup (WPS), a feature designed to help devices join a wireless network. Researcher Quentin Kaiser showed tha…
|
|
 |
IoT & Hardware
MapQuest now shows Flock camera locations on your route
Cybernews
An online mapping service has unveiled its Surveillance Layer, which allows users to plan their trips without being “flocked.” MapQuest announced the new feature on October 16th, 2026, that allows users to see known automatic license plate readers (ALPRs) from Flock Safety and other companies, including Axon, Axis Comm…
|
|
 |
IoT & Hardware
Secret Broadcom chip flaw lets nearby hackers take over millions of routers
Cybernews
Millions of routers, including devices from Movistar, Cisco, TP-Link, Netgear, Nokia, and ZTE, may be exposed to an old Broadcom chip flaw that allows nearby attackers to execute malicious code without knowing the WiFi password. The bug affects legacy WiFi software developed by chipmaker Broadcom and used in equipment …
|
|
 |
ICS / OT & Critical Infrastructure
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
The Hacker News
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches,…
CVE-2026-110936
|
|
 |
IoT & Hardware
The journey of a paper unicorn: adventures inside a modern warehouse
Kaspersky Securelist
Imagine you’ve ordered a small paper unicorn from an online marketplace. You clicked “Buy”, received a cheerful notification, and expect a courier to bring the box tomorrow. If the unicorn is delayed by a day, it will be annoying but not catastrophic: an apology, a discount promo code — and the incident is forgotten. N…
|
|
 |
IoT & Hardware
Claude AI Detects Hidden Crypto Miner While Building Temperature Monitor App on Mac
Cyber Security News
An ordinary coding task led to an unexpected security discovery when Claude Code reportedly found a hidden cryptocurrency miner on a developer’s Mac. The AI assistant was building a temperature monitoring app when unusually high sensor readings prompted it to investigate CPU activity. It identified XMRig consuming abou…
|
|
 |
ICS / OT & Critical Infrastructure
ICANN testing tech to let law enforcement access non-public WHOIS info
The Register (Security)
Single sign-on to help address imminent threats to life, critical infrastructure, or kids ICANN has started testing authentication schemes that will allow law enforcement agencies to make urgent requests for non-public WHOIS information – when needed to address threats to life, critical infrastructure, or child exploit…
|
|
