No-frills tech news

Automated cloud-edge cyber-physical IoT infrastructure for optimizing the agricultural water-energy nexus and yield

Similar biological dependencies between environmental conditions and early crop development have been reported in IoT-based agricultural monitoring frameworks15. The cloud-based telemetry framework enabled continuous multi-variable monitoring and supported the evaluation of the observed environmental conditions relative to the stage-specific reference requirements. The integrated GI increased to 95.04%, indicating closer overall agreement between the observed environmental conditions and the stage-specific reference conditions during the reproductive phase. {\text{572336B}} - 0.00{158}0{\text{M}}^{{2}} - 0.0{3}0{5}0{\text{B}}^{{2}} + 0.00{\text{2526MB}} $$ $$ {\text{NIR}} = {2158}. The present study also did not include a parallel economic evaluation of manual, timer-based, or alternative IoT systems under the same experimental conditions.

Critical Healthcare Systems Aren't Quantum-Ready

The situation is particularly acute for Internet-exposed healthcare systems, many of which lack support for TLS 1.3, the foundation for deploying standardized post-quantum cryptography. Examples of OT/IoT assets in healthcare delivery organizations include VoIP phones, printers, point-of-sale systems, kiosks and physical-security equipment. Forescout also identified more than 5,500 healthcare systems containing electronic medical records and medical imaging data that were reachable from the public Internet. "The main takeaway is that healthcare organizations should start preparing now, before large-scale quantum attacks become practical," warns Daniel Trivellato, Forescout's vice president of OT, healthcare, and cyber-risk solutions. The fact that 50% IT systems in Forescout's survey were PQC-ready yet only 31% of Internet-exposed healthcare systems supported TLS 1.3 is also noteworthy.

Cybersecurity Starts in the Specification

In my role at Cochrane Supply & Engineering, my focus includes helping the design community understand building IoT, integration, and OT cybersecurity. One of the most useful tools that an engineer can provide in clarifying the overall architecture is a systems integration drawing. The drawing should show the connected systems, integration platform, OT network, enterprise connections, cloud applications, and remote access paths. NEEVE is an example of a platform that supports Zero Trust remote access, role-based permissions, and auditing. Develop the systems integration drawing, put clear requirements in the specifications, and establish how the completed system will be verified.

State of Global Critical Infrastructure Cybersecurity 2026: 95% of Leaders Concerned About Frontier AI-Powered Attacks

To find out, Palo Alto Networks surveyed more than 1,600 critical infrastructure security leaders across 11 countries and five critical sectors for the new 2026 State of Critical Infrastructure Cybersecurity Report. Today's defenses are already under pressure Incomplete visibility: OT visibility remains a fundamental challenge. And leaders are bracing for AI-powered attacks 95% of leaders cited concerns about Frontier AI-powered attacks on critical infrastructure. What Critical Infrastructure Leaders Should Prioritize Now Closing that gap doesn’t start with replacing every legacy system or piece of equipment. 91% expect AI-driven cybersecurity to play a role in defending against exploits accelerated by Frontier AI models.

Cling botnet uses STUN traffic to conceal command-and-control activity and attacks against vulnerable IoT devices

Nozomi Networks Labs has identified a botnet dubbed Cling that exploits internet-exposed IoT and networking devices and disguises its command-and-control traffic as legitimate STUN activity. Cling’s command-and-control design uses STUN-like exchanges to register infected devices and deliver operator commands, allowing the traffic to resemble normal NAT-traversal activity commonly generated by collaboration tools, browsers and real-time communications applications. This visibility helps us track exploitation trends and identify cases where routine-looking activity leads to more interesting malware behavior,” Nozomi researchers detailed in a post last week. During that time, the operator repeatedly tasked infected devices with spreading across the internet by scanning for and attacking vulnerable systems. In conclusion, the Nozomi researchers identified that Cling shows how commodity IoT botnets are evolving beyond familiar Mirai-like patterns.

ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure

Fortinet details ClingSTUN, a Linux backdoor exploiting unpatched IoT devices and abusing public STUN servers to route traffic past NAT. FortiGuard Labs researchers spotted a Linux malware family they call ClingSTUN, and the name gives away its trick immediately. It abuses public STUN (Session Traversal Utilities for NAT) infrastructure to discover externally mapped IP addresses and ports, maintain NAT bindings, and improve connectivity between compromised hosts and remote operators.” “Because many of the STUN servers it contacts are legitimate public services, the resulting traffic easily blends with normal VoIP and WebRTC communications.” The malware sends standard requests to public STUN servers to find out its external IP address and port.

New Linux malware turns vulnerable IoT devices into proxy nodes

A new Linux backdoor is turning vulnerable internet-facing devices into remotely controlled proxy nodes, while using the public Session Traversal Utilities for NAT (STUN) infrastructure to blend into normal VoIP and WebRTC traffic. Fortinet’s FortiGuard Labs said it has been tracking the malware, dubbed ClingSTUN, across multiple attacks exploiting known vulnerabilities in routers, IoT devices, DVRs and other network-connected hardware. Fortinet described it as a “back-connect proxy backdoor” capable of maintaining persistence, executing remote commands and propagating itself to other vulnerable devices. The malware uses legitimate STUN traffic STUN is normally used to help applications discover their public-facing IP address and port and establish connectivity through Network Address Translation (NAT). The network security company said the malware contains exploits for seven vulnerabilities that can be used to spread to additional devices.

SEALSQ Leads $10 Million PIPE Investment in WISeSat.Space

Insider Brief SEALSQ led a $10 million PIPE investment in WISeSat.Space that closed on October 1, 2026, alongside WISeSat.Space’s business combination. The investment provides WISeSat.Space with equity capital for planned satellite infrastructure expansion and integration of post-quantum security technologies across its space, ground and user segments. PRESS RELEASE — SEALSQ Corp (NASDAQ: LAES) (“SEALSQ” or “Company”), a company that focuses on developing and selling Semiconductors, PKI, and Post-Quantum technology hardware and software products, today announced that it led a $10 million private investment in public equity (PIPE) in WISeSat.Space Holdings Corp. (Nasdaq: SAIQ) (“WISeSat.Space”), a space technology company. WISeSat.Space is engaged in the development of a new generation of WISeSat.Space satellites, intended to support trusted communications, digital identity, and data exchange through space-based infrastructure. For WISeSat.Space, it provides capital to advance our next generation of satellites and to build post-quantum security into our space, ground and user segments.

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

Malware Targets a Growing List of IoT Vulnerabilities Fortinet’s FortiGuard Labs researchers identified the malware, which they have dubbed "ClingSTUN," after tracking attacks targeting at least 24 known vulnerabilities in IoT devices. Leveraging Legitimate STUN Servers ClingSTUN periodically sent that information back to the STUN servers. In comments to Dark Reading, Li says ClingSTUN demonstrates how vulnerable Internet-facing Linux and IoT devices can become infrastructure for malicious proxy operations. Therefore, indiscriminately blocking public STUN servers to address the ClingSTUN threat could disrupt legitimate services. John Gallagher, vice president at Viakoo, says ClingSTUN is a textbook example of how operational technology (OT) and IoT devices remain the enterprise's vulnerable soft underbelly.

GAO Urges OMB to Update Cybersecurity Guidance for Agencies’ Networked Devices

GAO said the guidance should set a clear priority and timeline for completing device inventories, which help agencies protect connected systems from cyberattacks. GAO published the report Wednesday as the last of three evaluations mandated by the IoT Cybersecurity Improvement Act of 2020. Together, those memos required initial device inventories by September 2024 and set eight data categories for each connected asset, including software and firmware versions and security controls. What Challenges Are Agencies Facing in Completing IoT and OT Inventories? The Department of Housing and Urban Development said a new hardware asset management system identified more than 160 IoT devices its legacy system had not reported.

ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes

A Linux proxy backdoor has been observed exploiting known, unpatched flaws in internet-facing IoT devices and abusing legitimate public STUN servers to keep compromised systems reachable as remotely controlled proxy nodes. FortiGuard Labs, which dubbed the malware ClingSTUN, said in research published on October 5 that it tracked the campaign across three periods, each with a different download server. The operators then spread the malware through command injection flaws in Linear, Realtek, TP-Link, AVTECH and D-Link devices. STUN Traffic Blends With VoIP and WebRTC ClingSTUN works as a back-connect proxy. Read more on IoT malware: New Mirai-Based Linux Botnet 'Evooo1Bot' Turns Victims Into Proxies Defenders Weigh Containment Against Patching Louis Eichenbaum, federal CTO at ColorTokens warned.

WISeSat.Space Completes Business Combination and Begins Nasdaq Trading

Insider Brief WISeSat.Space, a sister company of SEALSQ, completed its business combination with Columbus Acquisition Corp. and began trading on Nasdaq under the ticker SAIQ on October 2, 2026. The transaction establishes WISeSat.Space as a separately listed company focused on post-quantum-secure satellite communications and IoT connectivity. WISeSat.Space plans to combine satellite communications with digital identity, secure semiconductors and post-quantum technologies for connected devices and other applications. Effective today, October 2, 2026, WISeSat.Space ordinary shares have commenced trading on the Nasdaq Capital Market under the ticker symbol “SAIQ.” “The Nasdaq listing represents an extraordinary milestone for WISeSat.Space and for everyone who has contributed to this journey,” said Carlos Moreira, Chief Executive Officer of SEALSQ, WISeQey and WISeSat.Space.

Federated AI Learns to Spot IoT Cyberattacks Without Sharing Private Data

Against existing federated intrusion detection baselines, the system outperformed by up to 5.7 percentage points in heterogeneous environments, the very settings where competing approaches tend to falter. Federated learning systems can choke on communication costs when they require frequent exchange of large model updates among thousands of devices. Federated AI Learns to Spot IoT Cyberattacks Without Sharing Private Data. “Federated AI Learns to Spot IoT Cyberattacks Without Sharing Private Data.” “Federated AI Learns to Spot IoT Cyberattacks Without Sharing Private Data.”

What is changing as Kerala govt renames its IT department for the AI and future-tech era?

The Government of Keralam has officially renamed its Electronics and Information Technology Department as the Department of Information Technology, Artificial Intelligence and Future Technologies. According to an official statement, the move reflects a significant expansion of the department's mandate beyond conventional electronics and information technology. These major IT parks helped drive employment opportunities, technology investments, and the steady growth of the state's Information Technology and IT-enabled Services (ITES) industry. Under a state Gazette order, the AI portfolio was placed under the Industries and Commerce department alongside Information Technology. Senior Indian Union Muslim League (IUML) leader PK Kunhalikutty was given charge of Industries and Commerce, Information Technology, and the new Artificial Intelligence portfolio, alongside startups, mining and geology, handlooms, and textiles.

From RIT Kosovo to Leadership in Business and Innovation

Besa Gjonbalaj is the Managing Director of Rrota, where she has progressed through leadership roles including Project Manager and Chief Operating Officer. With experience spanning public institutions, business development, and international organizations, she has led strategic initiatives, supported organizational growth, mentored teams, and contributed to innovative digital products and national-level projects. She holds a Master’s degree in Business Management from Masaryk University, completed in 2021. Studying at RIT Kosovo: Studying at RIT Kosovo gave me a strong foundation in critical thinking, adaptability, and real-world problem-solving. The values of resilience, innovation, and leadership that I developed at RIT Kosovo continue to shape my professional journey and the way I lead today.

GISEC Global 2026: Security no longer stops at cyber

Visibility — the Biggest Gap Despite growing awareness, experts consistently identified one critical weakness across Middle East organisations: visibility. Top Security Priority As Middle East organisations accelerate digital transformation, security leaders are recalibrating their priorities. Industry experts at GISEC Global 2026 agree that cybersecurity can no longer be viewed as a standalone IT function. Without that visibility, security teams struggle to identify vulnerabilities, detect malicious activity, and determine where the most significant business risks reside. Shift From Controls to Exposure Management ElOuazzani believes operational visibility will define security success over the coming year.

Tuned Decision Trees Catch Black Hole Attacks in IoT Networks With 98.71% Accuracy

Subject of Research: Machine learning detection of black hole attacks in RPL-based Internet of Things networks Article Title: An optimized machine learning approach to mitigate black hole attacks in IoT networks Article References: Das, A., Adhikari, N., & Mohapatra, S. K. (2026). An optimized machine learning approach to mitigate black hole attacks in IoT networks. Tuned Decision Trees Catch Black Hole Attacks in IoT Networks With 98.71% Accuracy. “Tuned Decision Trees Catch Black Hole Attacks in IoT Networks With 98.71% Accuracy.” “Tuned Decision Trees Catch Black Hole Attacks in IoT Networks With 98.71% Accuracy.”

Top Cybersecurity Stocks To Watch Now - October 3rd

Bernstein Downgrades 3 Cybersecurity Stocks: How Concerned Should Investors Be? Palo Alto Networks, CrowdStrike, Fortinet, SentinelOne, BlackBerry, Globant, and NetScout Systems are the seven Cybersecurity stocks to watch today, according to MarketBeat's stock screener tool. These companies had the highest dollar trading volume of any Cybersecurity stocks within the last several days. Palo Alto Networks (PANW) Palo Alto Networks, Inc. provides cybersecurity solutions worldwide. 2 Cybersecurity Stocks Breaking Out as AI Continues to Be a Tailwind Read Our Latest Research Report on PANW CrowdStrike (CRWD) CrowdStrike Holdings, Inc. provides cybersecurity solutions in the United States and internationally.

GAO: Most Agencies Fall Short on Cyber Requirements for Networked Devices

Of the 22 civilian Chief Financial Officers (CFO) Act agencies GAO reviewed, 15 had established inventories of networked IoT and OT devices as of September 2026. Only seven agencies had fully met all three requirements, GAO found. “Until OMB issues this guidance, agencies will lack appropriate direction on how and when to complete their device inventories,” GAO said. GAO recommended that OMB issue updated cybersecurity guidance for networked IoT and OT devices and oversee agencies’ compliance with the requirements. The report is the third and final GAO review required under the IoT Cybersecurity Improvement Act of 2020.