sanitised. IoT & ICS/OT Daily Briefing · Tuesday 27 October 2026
 |
ICS / OT & Critical Infrastructure
Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
SecurityWeek
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access. Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to shar…
|
|
 |
IoT & Hardware
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Hacker News
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration and creating third-party accounts have be…
|
|
 |
IoT & Hardware
Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking
Cyber Security News
A cybersecurity researcher says he gained root access to a 2025 Samsung Smart TV and found software built to track far more than the picture on the screen. Known online as log4j, he started after the set kept showing ads that seemed oddly specific to his household. He says the Tizen firmware was AES-encrypted, so […]
|
|
|
IoT & Hardware
Ukraine disputes Musk's claims of Starlink misuse as military connectivity restored
The Record
Ukraine's leadership rejected Elon Musk's accusations that its military had misused Starlink's satellite internet service to carry out offensive drone strikes, as Kyiv announced that restrictions disrupting critical military communications had been lifted. Ukrainian Defense Minister Yevhen Khmara said Saturday that Sta…
|
|
 |
IoT & Hardware
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
The Hacker News
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response (NDR) platform, connects individual alerts into one timeline, and it feeds the defensive systems that can tie all events together into one…
|
|
|
|
|
|
 |
IoT & Hardware
Samsung accused of spying on users and then sharing data with 400+ partners
Cybernews
Samsung may be secretly spying on you by collecting insane amounts of data from built-in microphones, connected devices, and even AI you didn’t know about. Reverse engineer Log4j started noticing that their Samsung 2025 TV was delivering “weirdly targeted ads,” something the user found unsettling. Looking to get to the…
|
|
|
|
|
|
 |
IoT & Hardware
Apple Patches for October 2026, (Mon, Oct 26th)
SANS Internet Storm Center
Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update. CVE-2026-86950: This is an already exploited vulnerability in CoreGraphics, and was patched originally a month ago. This month's update delivers the corre…
CVE-2026-28864, CVE-2026-86950, CVE-2026-86990
|
|
|
|
 |
Data Breaches & Leaks
University of Copenhagen data breach exposes data of 525,000 people
BleepingComputer · also reported by GBHackers
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. The educational organization detected the breach last Tuesday and disclosed it on Friday. In an update yesterday, the university added another 20,000 staff and stude…
|
|
 |
Security
Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Linux Kernel 7.1
Cyber Security News · also reported by GBHackers
Kali Linux 2026.3 has been released as the third Kali update of 2026, bringing six new penetration testing tools, Linux kernel 7.1.5, KDE Plasma 6.7, refreshed image-building scripts, and a large set of Kali NetHunter changes. The release arrived on October 26 with 126 package updates and moves the kernel from version …
|
|
 |
Malware & Tooling
Fake Microsoft Teams IT Support Messages Lead to Remote Access and Malware Infections
GBHackers
More than 400 incidents in which attackers abused Microsoft Teams external chats to impersonate IT support, obtain remote access, and deliver malware. Researchers identified recurring tenant names, deceptive display names, remote administration tools, and payload infrastructure across incidents. Teams federation, enabl…
|
|
