ICS / OT & Critical Infrastructure

SecurityWeek

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access. Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to shar…

IoT & Hardware

Cybernews

Ransomware attackers hacked an Idaho school district last weekend, taking control of school cameras, electronic locks, and heating systems – forcing district officials to shut down all schools for two days. The district first became aware of the attack on October 17th after teachers began reporting issues with the netw…

IoT & Hardware

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 200day Rubbish Research Team is publicly disclosing a vulnerability in TRENDnet TV-IP302PI firmware 1.02.38, the closed-source IP surveillance camera from TRENDnet (United States). The camera's application daemon is shipped at /hunt/hunt_server: an ARM 32-bit EABI5 version…

IoT & Hardware

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 200day Rubbish Research Team is publicly disclosing a vulnerability in the ProSoft RLX-IFH24E, version v2.2.44, the industrial wireless radio from ProSoft Technology, Inc. (United States). The appliance is a closed-source embedded device and an OEM build of the MicroHard S…

IoT & Hardware

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 200day Rubbish Research Team is publicly disclosing a vulnerability in the Edimax BR-6478AC, firmware image BR6478AC_v2.20.bin, the dual-band AC1750 SOHO wireless router from Edimax Technology Co., Ltd. (Taiwan). A single authenticated POST to a manufacturing radio-calibra…

IoT & Hardware

Cyber Security News

October is Cybersecurity Awareness Month, a good time to rethink how SOC analysts detect and investigate threats, draw conclusions from the first three quarters of 2026, and see how exactly your daily workflows could be improved. One important takeaway is that visibility into your company’s internal environment alone i…

ICS / OT & Critical Infrastructure

Industrial Cyber

Upstream oil and gas production is often determined by distance, with wellheads, gathering systems and offshore platforms relying on satellite, cellular and radio links. These operations are usually run by a crew and sometimes by no one at all. The interconnections add the communication pathway to the attack surface. T…

ICS / OT & Critical Infrastructure

Help Net Security

AppGate has expanded its zero trust offering for operational technology (OT) with Session Governance capabilities that help critical infrastructure operators reduce third-party access risk, simplify compliance audits and protect operational uptime. The expansion builds on the ZTNA for OT offering AppGate introduced in …

ICS / OT & Critical Infrastructure

Industrial Cyber

Frontier artificial intelligence models, given limited human direction, achieved all eight objectives in controlled tests of an industrial environment, showing they can turn digital access into physical action, Booz Allen Hamilton disclosed in its latest report. In testing at the company’s OT (operational technology) c…

ICS / OT & Critical Infrastructure

Industrial Cyber

The Tactien Group, an independent aviation advisory firm for critical infrastructure, announced CAST (Counter-UXS Assessment & System Testing), the software platform its advisory team uses to plan, run, and score counter-drone evaluations in customers’ environments. End-users get a measured answer on which detection sy…

ICS / OT & Critical Infrastructure

Industrial Cyber

A new post published on ISASecure highlighted need for industrial asset owners to integrate functional safety and operational technology (OT) cybersecurity into a single lifecycle, arguing that the two disciplines address interconnected risks within the same industrial control systems. Rafael Barreto Jijón, managing di…

ICS / OT & Critical Infrastructure

Industrial Cyber

As the European Union’s Cyber Resilience Act (CRA) enters its implementation phase, cybersecurity compliance is becoming an increasingly important requirement for industrial equipment and Edge AI products entering global markets. Advantech announced the signing of a Memorandum of Understanding (MOU) with DEKRA. By comb…

Vulnerabilities & Exploits

The Hacker News · also reported by DataBreaches.net

Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN co…

Cloud & Identity

Cyber Security News · also reported by Security Affairs

Revolut suffered a major service outage on Tuesday, October 20, 2026, disrupting payments, cash withdrawals, and access to its banking app. The digital bank said customer money and data remained safe while engineers worked to restore affected services. The disruption came as Google Cloud reported problems in its London…

Malware & Tooling

The Hacker News · also reported by Cyber Security News

An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider say…