No-frills tech news

Nozomi Vantage for Government secures FedRAMP Moderate certification for federal OT and IoT monitoring

Nozomi Networks, vendor of operational technology (OT), Internet of Things (IoT), and Cyber Physical Systems (CPS) security solutions, announced Monday that Vantage for Government has achieved Federal Risk and Authorization Management Program (FedRAMP) Moderate certification. It centralizes OT and IoT security sensor management to deliver unified visibility, real-time asset monitoring, advanced threat detection, vulnerability assessment and risk management across mission-critical environments. Vantage for Government provides federal security teams with a consolidated view of their cyber posture, enabling faster response times, stronger compliance and reduced operational overhead. These features include asset inventory, vulnerability and exposure management, threat and anomaly detection, and risk management. Risk management supports the full lifecycle, from AI-driven risk identification and customizable scoring to prioritized mitigation.

Automotive architecture shifts to zonal control as AI cyber risks rise

Keep me signed in Some subscribers prefer to save their log-in information so they do not have to enter their User ID and Password each time they visit the site. To activate this function, check the 'Keep me signed in' box in the log-in section. This will save the password on the computer you're using to access the site.

France blames Iran for fridge hacks as brokers confront cyber-physical exposures

French Foreign Minister Jean-Noël Barrot said Monday that the Revolutionary Guards were responsible for October’s attacks and that France would pursue European sanctions. His statement followed Reuters reporting that French officials suspected Iranian state-backed hackers were behind the incidents. The French report attributed the operation to Shahid Kaveh, a cyber unit affiliated with the Revolutionary Guards. That range of potential harm gives brokers a reason to involve colleagues handling property and liability coverage alongside cyber specialists. Jones said threat actors’ motivations range from hacktivism to financial gain, with different objectives shaping the losses they may cause.

Why The European Supermarket Fridge Hacking Scandal Changes Everything We Know About Cyber Warfare

How a Basic Internet Login Broke Europe's Cold Chain The mechanics behind the French supermarket hacks weren't sophisticated zero-day exploits or complex nation-state code injections. Similar unexplained malfunctions hit military base commissaries in the United States, pointing toward a coordinated, multi-continent stress-testing of supply chain vulnerabilities. Securing industrial infrastructure requires fundamental shifts in how engineering and IT teams talk to each other. Isolate OT Networks: Industrial refrigeration, HVAC, and power controllers must live on air-gapped or strictly firewalled local networks. A supermarket chain is only as secure as the obscure firmware running in its basement compressors.

Cyber Attack on France’s Blood Supply: The Silent War on Healthcare

Hackers recently launched a chilling cyber assault on France’s national blood service, targeting the refrigeration systems that keep life-saving blood safe. Instead of missiles or guns, they used keyboards and malicious code to try raising storage temperatures to dangerous levels that could have spoiled critical supplies. The French Blood Service supports more than 1,900 hospitals and serves over one million patients every year. Hundreds of supermarket refrigeration systems have also been hit in previous waves, showing how industrial control systems remain vulnerable targets. In an interconnected world, healthcare systems must treat cybersecurity as seriously as physical security.

Qualys Expands Global mROC Alliance with New Technology Alliances Across Every Major Attack Surface and Partner Certification Tracks

The problem is compounded since many of the fastest-growing parts of the attack surface are also the least measured. Through the expanded technology alliances, partner telemetry flows into Qualys ETM where TruRisk, Qualys' proprietary scoring and prioritization engine, evaluates it alongside data from across the enterprise. New partner authorization tracks for the Global mROC AllianceQualys also announced two new partner authorization tracks: Authorized mROC Advisor and Authorized mROC Delivery & Implementation Partner. mROC Partner – Certified to run the customer's ROC as a managed service on ETM, from prioritization through remediation and SLA-based reporting. Media Contact: Rachel Yap Winship Qualys Media@Qualys.com SOURCE Qualys, Inc.

Nozomi Networks Vantage for Government Achieves FedRAMP Moderate Certification

It centralizes OT and IoT security sensor management to deliver unified visibility, real-time asset monitoring, advanced threat detection, vulnerability assessment and risk management across mission-critical environments. Vantage for Government provides federal security teams with a consolidated view of their cyber posture, enabling faster response times, stronger compliance and reduced operational overhead. Risk Management — Supports the full lifecycle with AI-driven risk identification, customizable scoring, prioritized mitigation and continuous monitoring via executive dashboards and benchmarks. Learn more about Vantage for Government: Watch the Webinar: Securing What Matters: Applying Zero Trust, Federal Visibility & Risk-Based Remediation Mandates to OT Environments Visit the FedRAMP marketplace About Nozomi Networks Nozomi Networks protects the world's critical infrastructure from cyber threats. www.nozominetworks.com SOURCE Nozomi Networks

Securing AI systems in industry: why semiconductors matter more than ever

Industrial AI agents face unique challenges compared to AI systems used in offices or the Cloud. Without this hardware-level security, AI systems could become vulnerable, potentially causing production halts, equipment damage, or safety risks. AI agents gain ground across industrial automation Industrial automation leaders are already embedding AI agents into their operational platforms. The semiconductor industry responds to industrial AI demand To support this transition, semiconductor manufacturers are developing increasingly specialised hardware aimed specifically at industrial AI workloads. How industrial AI priorities differ across global markets Regional approaches to industrial AI adoption are also beginning to diverge.

AI Fuels a New Cybercrime Wave

Artificial intelligence is transforming cybercrime into a faster, more sophisticated and increasingly expensive global threat. Cybercriminals are exploiting AI to automate attacks, identify vulnerabilities and execute large-scale fraud with unprecedented speed and precision. AI is fundamentally changing the economics of cybercrime. Enterprises must embrace real-time threat intelligence, behavioural analytics, deepfake detection and zero-trust architectures. As cybercriminals weaponise artificial intelligence, organisations must respond with equally intelligent, proactive and resilient security systems.

The Expanding Attack Surface Demands a New Operating Model

Why the Risk Operations Center Is Becoming the System of Record for Proactive Enterprise Risk Reduction The cybersecurity industry has spent years improving how we discover vulnerabilities. At the same time, the enterprise attack surface has fundamentally changed. The Risk Operations Center was never intended to be another dashboard, nor was it intended to replace the SOC. It is an operating model for continuously identifying, prioritizing, validating, and reducing risk across the enterprise before those vulnerabilities can ever be exploited. And that is why the Risk Operations Center is emerging as the operating system for proactive cyber risk reduction in the age of AI.

Hybrid Feature Selection Boosts IoT DDoS Detection Accuracy

Researchers from multiple institutions have developed a hybrid feature selection framework that significantly improves the detection of Distributed Denial-of-Service attacks in Internet of Things networks. Feature selection was performed using a wrapper approach, where LightGBM served as a proxy classifier to evaluate the fitness of candidate feature subsets. The findings support the use of hybrid feature selection methods to balance the competing demands of accuracy and efficiency in securing the expanding IoT ecosystem against evolving cyber threats. Subject of Research: Hybrid metaheuristic feature selection for IoT DDoS attack detection Article Title: Hybrid PSO–GWO feature selection for IoT DDoS detection with IDS/IPS-oriented deployment Article References: Hyassat, A. S., Abualhaj, M. M., Elshourbagy, M. M., Shambour, Q. Y., Daoud, M. S., Alsharaiah, M. A., Yousif, M., & Anbar, M. (2026). Hybrid PSO–GWO feature selection for IoT DDoS detection with IDS/IPS-oriented deployment.

Robonomics Price, XRT Price, Live Charts, and Marketcap - Coinbase Australia

About Robonomics What is Robonomics Network? Robonomics Network is a Web3 cloud platform designed to manage IoT devices and robotics, facilitating decentralized and secure interactions between humans and machines. Interested in the various use cases and possibilities with Robonomics Network? Discover more about Robonomics: What is a Robonomics Network (XRT) token? On Reddit, Robonomics was mentioned in 0 Reddit posts and there were 0 comments about Robonomics.

Robonomics Price, XRT Price, Live Charts, and Marketcap

About Robonomics What is Robonomics Network? Robonomics Network is a Web3 cloud platform designed to manage IoT devices and robotics, facilitating decentralized and secure interactions between humans and machines. Interested in the various use cases and possibilities with Robonomics Network? Discover more about Robonomics: What is a Robonomics Network (XRT) token? On Reddit, Robonomics was mentioned in 0 Reddit posts and there were 0 comments about Robonomics.

Vinchin Releases 2026 Whitepaper Collection to Strengthen Enterprise Data Protection and Cyber Resilience

Vinchin, a provider of enterprise backup and disaster recovery solutions, has released a collection of four technical whitepapers for 2026, addressing the growing complexity of data protection in modern IT environments. For organizations seeking a broader strategic approach, the unified data protection whitepaper examines how data security, backup, recovery, and business continuity can be managed as interconnected priorities to strengthen long-term cyber resilience. According to Vinchin, the collection reflects the evolving requirements of enterprise data protection, as organizations adopt different platforms and face emerging cybersecurity threats. The release underscores the importance of collaborative approaches to data protection as enterprises navigate infrastructure modernization and evolving cybersecurity challenges. By providing technical resources that address both infrastructure-specific and strategic aspects of data protection, Vinchin aims to help organizations simplify data protection, improve recovery readiness, and build more resilient IT infrastructures.

Banks, financial institutions: National CERT warns of rising AI-powered cyberattacks

In an advisory, National CERT said the growing use of AI, automated bots, botnets and agentic tools was enabling cybercriminals to accelerate reconnaissance, identify system vulnerabilities, conduct credential-based attacks and launch coordinated cyberattacks on a much larger scale. READ ALSO: Pakistan govt entity hit by cyberattack last week, official says National CERT cautioned that banks could face attacks targeting core banking systems, digital banking platforms, application programming interfaces (APIs), payment systems and customer-facing applications. For the critical infrastructure sector, National CERT highlighted vulnerabilities arising from third-party service providers, connected Internet of Things (IoT) devices, industrial control systems and insecure remote access. National CERT has advised financial institutions to review the security of core banking systems, APIs, third-party integrations, payment gateways and digital banking applications. National CERT urged all organisations to assess their preparedness against bot-driven AI cyberattacks and strengthen incident response, business continuity and security monitoring arrangements.

Cyber attack in Europe a warning for India

The attackers proved that non-military, everyday commerce can also be exploited to destabilize local food security. The rapid integration of smart sensors, remote telemetry, and cloud-managed controllers has vastly expanded the physical attack surface. To mitigate these systemic threats, cyber security architects and policymakers are advocating for a return to standalone, air-gapped control systems for critical infrastructure, alongside more robust protocol-security standards for consumer IoT. Re-establishing standalone and secure controls offers several defensive advantages through elimination of remote attack vectors and making remote manipulation of physical processes mathematically impossible over digital channels. The recent cyber attacks against European food supply chains, national alert systems, and the emerging vulnerabilities within smart residential environments serve as an urgent warning.

AI tools increase cyberattack risks

ISLAMABAD: The National Cyber Emergency Response Team (NCERT) has warned of a growing use of artificial intelligence (AI), automated bots, botnets and agentic tools in coordinated cyberattacks, saying banks and critical infrastructure face heightened risks. It warned that banks could face attacks targeting core banking systems, digital banking platforms, payment systems and customer-facing applications. Other warning signs include abnormal transaction patterns, discrepancies between core banking records and displayed account balances, and unauthorised access to payment systems. NCERT urged financial institutions to review the security of core banking systems, APIs, third-party integrations, payment gateways and digital banking applications. It recommended multi-factor authentication, safeguards against automated login attempts and integrity checks to ensure that customer-facing applications accurately reflect core banking records.

Federal agencies urge cold chain operators to lock down refrigeration controllers

Five federal agencies have given grocery stores, cold storage operators and other cold chain businesses a clear set of steps for securing the controllers that keep their products cold. The agencies say malicious cyber actors are targeting vulnerabilities and weaknesses in unpatched or internet-accessible electronic temperature controllers and commercial refrigeration controllers in retail grocery and cold storage facilities. TechCrunch also reports that some affected systems were remote-controlled refrigeration units made by Danish company Danfoss that no longer receive security updates. The steps for operators The fact sheet's mitigations align with the Cross-Sector Cybersecurity Performance Goals from CISA and NIST. The agencies also recommend a dedicated OT VLAN to separate refrigeration controls from business networks.

The cyber threat landscape in aerospace manufacturing

The expanding attack surface in aerospace manufacturing Cyberattacks in aerospace and aviation are, research shows, growing in number and evolving in sophistication. Notable cyber threats and incidents Sadly, it’s all too easy to see the effects of cyber threats upon aerospace manufacturing thanks to recent high-profile incidents. Regulatory landscape and compliance challenges Cybersecurity compliance in the aerospace manufacturing industry is often broad and complex. Of course, these are just a few ideas on how to get started in improving cyber resilience in the aerospace manufacturing industry. With no end in sight to cyberattack growth in aerospace manufacturing, there has never been a better time to be introspective.

FBI, CISA warn of cyberattacks targeting refrigeration systems

According to the the FBI and CISA, threat actors may exploit flaws in these refrigeration and cooling systems via an authentication bypass, arbitrary code injection, and weak configurations. “The FBI and CISA warning hits close to home,” said Melvin Lammerts, co-founder and head of hacking at Hadrian. “We’ve already seen refrigeration controllers taken over in European supermarkets and blood-storage sites, and the Pentagon is investigating similar freezer failures at U.S. military commissaries. Responsibility for cyberattacks unconfirmed To date, it's unclear who's responsible for the string of suspected cyberattacks. “Refrigeration systems cannot be taken offline while equipment is replaced, many older controllers no longer receive security updates, and AI can find and exploit vulnerabilities in even the most up-to-date systems.