The AI vulnerability surge is breaking the OT patch cycle
IEC 62443 already provides the vocabulary for acting on those answers: zones and conduits to define exposure, plus compensating countermeasures where patching is not feasible…
Month: September 2026
OSC Global and InfraShield launch Janus Cyber to address advanced reactor OT, nuclear and military cybersecurity
OSC Global and InfraShield announced Janus Cyber, a cybersecurity teaming initiative created to help advanced reactor developers address the nuclear regulatory, Department of War (DoW)…
Pharmaceutical sector urged to shift cyber resilience focus from systems to medicine value chains
Pharmaceutical companies need to rethink cyber resilience around the continuity of medicine value chains rather than recovery of individual systems, Ashish Gupta, partner at PwC,…
Defeating Kubernetes Privilege Escalation: A Cloud Detection & Response Case Study
Attackers are constantly searching for new ways to target cloud environments and escalate initial access into full administrative privileges. In recent months, our research team…
Chinese-speaking threat actors targeting Mexican Android users with remote access Trojan
Intel 471 Malware Intelligence researchers recently uncovered a sprawling phishing operation that used Meta Ads to distribute a newly identified Android remote access trojan (RAT)…
Agentic Frameworks Summary | Elastic Security Labs
Security teams and SOC analysts still face the same tier-1 response challenges since the early 2000s, from alert volumes to missed threats. While generative AI…
US charges Russian for infecting 80,000 freelancers with malware
A California federal grand jury has indicted a Russian national for his role in a phishing campaign that infected thousands of freelancers with TVRAT and…
Critical SonicWall Remote Code Execution Vulnerabilities Actively Exploited in Attacks
SonicWall has warned that attackers are actively exploiting two critical vulnerabilities affecting SMA1000 Series secure mobile access appliances. The flaws could allow unauthenticated attackers to…
Retired Devices, Active Risks: How an ITAD Company Protects Data After Decommissioning
A laptop can be removed from an employee’s desk, disconnected from the network and marked retired in an asset system within the same afternoon. None…
Google Patches 26 Chrome Vulnerabilities, Including Critical WebGL and Shared Tab Groups Flaws
Google has released a new update for the Chrome Stable Channel on desktop platforms, addressing 26 security vulnerabilities. This includes two critical use-after-free flaws affecting…
Keepnet launches free SMS/Call Reporter for iOS
Keepnet, an Extended Human Risk Management (xHRM) and Secure Behavior Management platform, today launched the Keepnet SMS/Call Reporter. It is a free app that turns…
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout Research – Vedere Labs said it used Anthropic’s Claude to port a working pre-authentication remote code execution (RCE) exploit from one WAGO programmable logic…