IoT & Hardware

IoT Security Foundation

As one of the pioneers of IoT, Rob Tiffany has spent three decades building the Internet of Things, starting with connected vending machines in 1994, five years before anyone called it the Internet of Things.

ICS / OT & Critical Infrastructure

The Record

Up to 500 under-resourced utilities will get access to a range of free cybersecurity software, hardware, deployment services and training through a new program offered by the global services company Accenture, the cybersecurity firm Dragos and the SANS Institute training organization. The three organizations announced …

ICS / OT & Critical Infrastructure

Industrial Cyber

Accenture, Dragos Inc. and the SANS Institute announced a major initiative to help strengthen cyber defenses for under-resourced U.S. water, electric and natural gas utilities. These utilities provide essential services but often lack resources for adequate protection for their operational technology (OT) environments.…

ICS / OT & Critical Infrastructure

Industrial Cyber

Resilience’s analysis of cyber insurance claims in the energy and utilities sector found that email compromise accounted for 21% of claims filed between Jan. 1, 2023, and Sept. 5, 2026, compared with 10% across other sectors in its portfolio. Ransomware accounted for about 70% of the sector’s incurred losses, including…

ICS / OT & Critical Infrastructure

The Register (Security)

When it comes to cyberattacks that shut down power grids, drinking-water systems, and other critical infrastructure, AI doesn’t – yet – turn script kiddies into sophisticated, nation-state attackers. But “the potential is there,” according to operational technology (OT) security experts. "One thing that we've relied on…

ICS / OT & Critical Infrastructure

Industrial Cyber

Nozomi Networks, vendor of OT, IoT and CPS security solutions, and Schweitzer Engineering Laboratories (SEL) announced an expansion of their global partnership to help critical infrastructure operators strengthen cyber resilience, improve operational visibility and address evolving regulatory requirements. The expanded…

ICS / OT & Critical Infrastructure

Industrial Cyber

Dispel announced an integration with exposure management company Tenable Holdings that combines Tenable One OT Exposure with the Dispel Zero Trust Engine, the OT secure remote access platform. This integration extends Tenable’s real-time OT/IoT asset intelligence directly into every Dispel remote access decision. Most …

IoT & Hardware

Kaspersky Securelist

Since the release of these updates, the BlackLotus bootkit has gone quiet — no publicly known attacks have used it. Yet in early 2026, we discovered a malware sample similar to BlackLotus that was used in an APT campaign in Central Asia. In this report, we share our findings, including new payloads and possible attribu…

IoT & Hardware

Security Affairs

A Russian satellite made a close approach to a commercial radar satellite linked to Ukraine, raising concerns about surveillance and security in space. A Russian-made satellite called Kosmos 2612 got very close to ICEYE-X36 last week, a commercial Earth-observation satellite that may support countries like Ukraine. CNN…

IoT & Hardware

EFF Deeplinks

Police agencies across the U.S. have deployed Automated License Plate Readers (ALPRs) to capture images of passing vehicles along with time, date, and GPS coordinates. While the technology itself isn’t new (ALPRs have existed in various forms for more than 50 years, and in the U.S. since 1998), the surveillance landsca…

IoT & Hardware

The Register (Security)

Careful what you say after goodbye, or better yet, update your messaging app Make sure you don’t say anything mean or secret after hanging up a call on Signal, as a bug in the encrypted messaging app’s calling library could prevent a call from ending properly, potentially leaving audio and possibly video active. The vu…

ICS / OT & Critical Infrastructure

Cybersecurity Dive

The group has been linked to a 2025 attack targeting technology firm Ingram Micro.

AI & Emerging Tech

Hackread · also reported by Cyber Security News, GBHackers

New York, NY, USA, 21st October 2026, CyberNewswire

Vulnerabilities & Exploits

Palo Alto Unit 42 · also reported by Kaspersky Securelist

Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. Both are remote code execution (RCE) vulnerabilities rated as 9.2 (CVSS 4.0). We encourage reviewing the PHP Group’s security advisory and patching guidance. PHP is widely used across web servers and content management systems…

Fraud & Cybercrime

GBHackers · also reported by Cyber Security News

Google has enhanced Chrome’s AI-powered scam defenses with a new server-side Gemini model that detects fake antivirus alerts, fraudulent browser updates, and other deceptive websites. Announced on October 20, 2026, these changes expand protection to all users who enable Safe Browsing’s Enhanced Protection mode. This up…