sanitised. IoT & ICS/OT Daily Briefing · Friday 23 October 2026
|
|
 |
IoT & Hardware
Police warned to watch people opposing Flock cameras at public meetings
Cybernews
The Orange County Intelligence Assessment Center (OCIAC), a government intelligence fusion center in California, issued a bulletin to police in July warning that city council meetings about Flock surveillance cameras could attract security risks. The bulletin, obtained by 404 media, stated that council meetings “may be…
|
|
 |
ICS / OT & Critical Infrastructure
Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
SecurityWeek
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access. Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to shar…
|
|
 |
IoT & Hardware
Samsung and Vizio Smart TVs Continue Sending Viewing Data Even After Users Opt Out
GBHackers
Samsung and Vizio smart TVs continued sending traffic consistent with automatic content recognition (ACR) even after researchers disabled the feature. This raises concerns about how reliable privacy controls are at preventing surveillance of viewing. However, encrypted connections made it impossible for researchers to …
|
|
 |
ICS / OT & Critical Infrastructure
Corsha launches Folio to automate OT network mapping and industrial system documentation
Industrial Cyber
Corsha, a provider of industrial identity security solutions, announced on Wednesday Folio, a new module on the Corsha Industrial Identity Security Platform that automatically creates and updates operational maps and documentation showing how industrial systems are connected and communicating. Built on live network and…
|
|
 |
IoT & Hardware
Samsung and Vizio Smart TVs Still Send Tracking-Like Traffic After Users Turn It Off
Cyber Security News
Samsung and Vizio smart TVs kept sending traffic consistent with automatic content recognition (ACR) even after researchers turned off the feature in the privacy settings. The findings raise questions about whether smart TV privacy controls stop viewing-related data flows, while also clarifying an important limit. Encr…
|
|
 |
IoT & Hardware
Drone program compliance: What a CTO says most agencies get wrong
Help Net Security
In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody for flight logs and video, how to publish drone activity without exposing sen…
|
|
 |
IoT & Hardware
Signal Vulnerability Could Keep Calls Alive After Users Hang Up
Security Affairs
A critical Signal flaw could keep calls active after hang-up, exposing microphone or camera. Update to a fixed version immediately. A critical vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 of 10), in Signal ’s calling library could allow a malicious caller to interfere with call termination, potentially lea…
CVE-2026-113380
|
|
 |
IoT & Hardware
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
BleepingComputer
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. VCO is a web-based management portal that helps administrators configure, monitor, and manage VeloCloud SD-WANs (Software-Defined Wide Area Networks) and associated…
CVE-2026-114625
|
|
 |
IoT & Hardware
Cold Chain, Open Control: Exposed Refrigeration Systems Reveal Global Risk
Forescout Vedere Labs
In October 2026, French authorities and incident responders investigated cyber incidents affecting internet-exposed refrigeration management systems across more than 700 supermarkets in the country. CERT-FR confirmed that compromises involved Danfoss AK-SM and AK-SC systems, as well as Copeland and Dixell XWEB. Public …
|
|
 |
IoT & Hardware
Signal’s sneaky bug: mic and camera eavesdropping on you post-call
Cybernews
Avoid saying anything sensitive after ending a Signal call, as a bug in the encrypted messaging app’s calling library might prevent calls from disconnecting fully, leaving video and audio feeds active. The vulnerability, CVE-2026-113380, was published by MITRE on Tuesday and given a CVSS score of 9.3. That’s high, so t…
CVE-2026-113380
|
|
 |
ICS / OT & Critical Infrastructure
Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code
GBHackers
Siemens has confirmed that the CVE-2026-110936 vulnerability, a DLL side-loading flaw in Siemens Software Center, is being actively exploited. Attackers are using this vulnerability to execute malicious code through a legitimate, digitally signed application. Siemens published advisory SSA-580366 on October 15 and has …
CVE-2026-110936
|
|
|
|
 |
Nation-State & APT
North Korea Hit by Multiple Waves of DDoS Attacks, Knocking Over 40 Websites Offline
GBHackers
Multiple waves of DDoS attacks disrupted North Korea’s internet infrastructure this week, intermittently knocking over 40 official websites offline for about 32 hours. Network monitoring company Kentik linked the outages to synchronized surges of inbound traffic that began on October 20, 2026. Doug Madory, Kentik’s dir…
|
|
|
|
