sanitised. IoT & ICS/OT Daily Briefing · Saturday 24 October 2026
|
|
 |
IoT & Hardware
Dual BIOS: The laptop security feature SMBs don’t know they need
CSO Online
Every security checklist starts with the basics: strong passwords, multifactor authentication, spotting phishing, and keeping software up to date. All four protect what happens after a laptop starts. But some attackers are more focused on what happens before. That’s the domain of the BIOS, the first code that runs when…
|
|
|
|
 |
ICS / OT & Critical Infrastructure
Indurex secures €7 million to unify engineering intelligence, OT security and process safety
Industrial Cyber
Indurex, a company developing artificial intelligence (AI) for cyber-physical systems (CPS) security, has raised €7 million in a funding round led by Contrarian Ventures, with participation from Axeleo Capital and Curiosity. The funding will support the company’s commercial expansion across Europe and the Middle East a…
|
|
|
|
|
|
 |
IoT & Hardware
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
The Hacker News
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sp…
|
|
|
|
 |
IoT & Hardware
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
The Hacker News
Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. "Artifacts from this investigation also indicate that operators in this campaign have obtained access to numerous organizat…
|
|
 |
IoT & Hardware
Giving away your old TV? You should wipe it just like you would your phone
Cybernews
Most of us wouldn't dream of handing over an old smartphone without wiping it first. There are messages, photographs, and accounts on it that we wouldn't want a stranger to get their hands on. But when the time comes to replace the television in our living room, we aren't always quite so careful. That's a mistake. Toda…
|
|
 |
IoT & Hardware
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
SecurityWeek
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access. Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to shar…
|
|
 |
ICS / OT & Critical Infrastructure
UK proposes 14-year jail terms for subsea cable saboteurs
Help Net Security
Damaging a cable on the seabed off the UK coast could soon cost someone 14 years of their life behind bars, under plans the British government published this week. The proposal comes from a White Paper by the Department for Digital, Culture, Media and Sport that would update laws protecting undersea cables and pipeline…
|
|
|
|
 |
Vulnerabilities & Exploits
Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products
Cyber Security News
Palo Alto Networks has confirmed that two critical PHP remote code execution vulnerabilities affect PAN-OS and previously impacted two cloud services. Tracked as CVE-2026-109618 and CVE-2026-109619, the flaws have prompted planned firewall hotfixes and guidance to restrict access to management interfaces. The company u…
CVE-2026-109618, CVE-2026-109619
|
|
 |
Vulnerabilities & Exploits
OpenAI AI Agents Bypass Security Isolation, Exploiting 0-Days in Red-Teaming Tests
Cyber Security News
OpenAI says its AI agents found zero-day flaws, escaped sandboxes, reached the live internet, and exchanged information across isolation boundaries during large red-teaming tests of its research systems. The findings, published on October 23, show how advanced models can chain software bugs and setup errors to bypass c…
|
|
