No-frills tech news

AI-powered cyberattacks threaten Pakistan’s banks, critical infrastructure

ISLAMABAD: The threat of artificial intelligence (AI)-powered cyberattacks against Pakistan’s financial institutions and critical infrastructure is increasing, with banks, energy installations, water utilities, electricity networks, manufacturing facilities and transport systems potentially at risk. According to the advisory, banks’ core banking systems, digital banking platforms, application programming interfaces (APIs), payment systems and customer-facing applications could become potential targets. The advisory also warns that critical infrastructure faces growing risks from third-party service providers and connected Internet of Things (IoT) devices. It further calls for comprehensive security reviews of core banking systems, APIs and payment gateways, alongside integrity checks to ensure consistency between customer-facing applications and core banking records. Regarding critical infrastructure, the advisory recommends identifying all internet-connected IoT and operational technology (OT) assets and restricting direct internet access as well as third-party maintenance connections.

Banks, utilities among services put on alert against AI-enabled cyberthreats

However, two sectors require particular attention,” it stressed, referring to financial services, along with operational technology (OT) and critical infrastructure. It warned banks that they could face attacks targeting core banking systems, digital banking platforms, payment systems and customer-facing applications, with potential scenarios including the disruption of online services, automated credential attacks, and manipulation of displayed account balances. “A compromise could disrupt physical processes and critical services,” it added. For critical infrastructure, NCERT said changes to refinery, pipeline, grid, power generation or distribution parameters could indicate an attack, as could unexpected changes to pressure, temperature, cooling or heating control settings. NCERT also urged all organisations to check their preparedness against bot-driven AI cyberattacks, maintain incident logs and enhance arrangements for incident response, business continuity and security monitoring.

Cybersecurity and Digital Trust: Protecting the Future of Global Business and Building a Secure Digital Economy

As businesses and governments increasingly depend on digital infrastructure, cybersecurity and digital trust are becoming essential foundations of economic growth, business continuity, innovation, and global competitiveness. Building a secure digital economy requires cyber resilience, data protection, trusted digital identities, responsible AI, secure financial systems, and international cooperation. Secure Digital Infrastructure and Supply Chains Industrial Opportunity: Develop resilient digital infrastructure to support global business competitiveness. Strategic Priority: Position India as a global hub for cybersecurity innovation, secure digital infrastructure, and cybersecurity talent development. India can strengthen its global position through cybersecurity research, secure digital infrastructure, AI innovation, skilled professionals, and international partnerships.

Russian involvement in European attacks assessed as ‘credible’, security sources say

But sources stress that without actual evidence, such hybrid attacks provide perpetrators with “plausible deniability”. Irish security services are keeping a close watch on developments as they update their threat assessment for next week’s major political events in Dublin. The Irish Examiner understands that security services assess the likelihood that Russian intelligence is behind these incidents as “credible” — with the caveat that investigations by European police and cyber agencies will take time. Extensive contact is taking place among European intelligence and cyber agencies to share and analyse information. “The key challenge for intelligence services is that plausible deniability is interwoven into the design of these attacks.”

Can Britain afford to take its supermarket fridges offline?

and declaring that ‘smart fridges are one of the dumbest things ever’, a chorus which will only grow in the coming months if our supermarkets can’t provide food. The big advantage of having your supermarket fridges connected to the internet is that it allows engineers to deal with some issues remotely. The connections also allow companies to monitor what is happening in their fridges around the clock. When these sorts of small individual maintenance efficiencies are multiplied over huge supermarket estates the savings are substantial. But this will come with tradeoffs, namely increasing the cost of food and demand on the grid – two pressures which Britain, with its inflation and net zero-addled energy grid – is poorly equipped to manage.

OpenAI says its cyber model found and patched nearly 1000 Linux kernel security issues

The pipeline covered vulnerability discovery, dynamic validation, exploitability assessment, patch generation, and human review, and once it was done, it found 948 privilege escalation flaws in the Linux kernel. Guerilla marketing “The Linux kernel underpins Android devices, cloud infrastructure, supercomputers, and other systems used by billions of people,” OpenAI said. After eliminating double entries and false positives, the researchers arrived at 948 distinct escalation flaws and built patches for them. OpenAI said its researchers reviewed all of the generated exploits and patches before reaching out to Linux kernel maintainers. They include kernel memory manipulation, page grooming, and privilege escalation through data-only attacks.

OpenAI cyber model found 948 Linux kernel exploits

OpenAI’s automated kernel research pipeline found 948 working local privilege escalation exploits in a single mid-October 2026 run. The five-stage system runs on an upcoming cyber model. The pipeline scales a June disclosure in which GPT-5.5 Cyber identified kernel flaws and built 24 such exploits to validate and report them. GPT-5.6 Sol, an earlier OpenAI model, produced 166 such exploits in a late-July run. The comprehensive event is part of TechEx and is co-located with other leading technology events including IoT Tech Expo and the Cyber Security & Cloud Expo.

Why Cybersecurity Needs Facilities Managers

Content Smart Buildings & Technology Why Cybersecurity Needs Facilities Managers 05 November 2026 | Updated 04 November 2026 Terry Keller, Chief Technology Officer at MRI Software, looks at why cybersecurity is increasingly becoming a challenge for facilities managers, rather than something that sits solely with IT teams. Connected building systems are changing the role of facilities teams in cybersecurity. Facilities teams know which contractors should be connecting, what maintenance has been authorised and whether system data reflects conditions on site. Facilities teams understand operational requirements and the consequences of downtime, while IT can assess connectivity, security and support arrangements. Building Awareness Into Everyday Work Training should reflect the decisions facilities teams make, supported by reporting procedures and joint exercises with IT.

Seven-in-ten businesses hit by data breaches in interconnected era

According to Kroll’s Data Breach Outlook 2026, 69% of organisations surveyed experienced a data breach in the past year, with over a third 34% breached more than once. As AI agents are given more access to systems and sensitive data, breach risk also rises across both human on non-human identities. Data and identity governance are becoming even more complex, and we expect AI to feature more prominently in Kroll’s Data Breach Outlook next year, both as a tool used by attackers and as a source of exposure for businesses adopting it.” Of the incidents handled by Kroll in the 12 months between June 2025 and June 2026, 69% of affected individuals were impacted by a third-party breach. Katherine Keefe, global cyber insurance industry lead at Kroll, concluded, “Kroll’s breach data shows a single supplier breach can trigger dozens or even hundreds of cyber insurance claims from businesses whose only connection is that they use the same provider.

A generative adversarial network-augmented dual-stream Mamba-transformer framework for advanced intrusion detection and cyber threat mitigation in smart healthcare networks

These limitations highlight the need for a unified, efficient, and robust intrusion detection framework capable of addressing heterogeneity, temporal modeling, imbalance, and computational constraints simultaneously. The proposed framework is evaluated on the CICIoMT2024 dataset and compared with several baseline models, including MLP, CNN, BiLSTM, Transformer-only, and Mamba-only architectures. Ben et al.13 introduced IDS-GraphMamba, an innovative intrusion detection framework that combines Mamba-style selective state-space modeling with Markov-based aggregation. The arp_spoofing class (class 0) achieves a recall of 78.91% and an F1-score of 0.8059, reflecting the benefit of CTGAN augmentation for this low-frequency spoofing category. In addition, attack labels were harmonized by mapping dataset-specific attack categories to a consistent multi-class intrusion detection framework while preserving normal traffic labels.

Allot Brings IoT Security into the 5G Network to Help Protect Against AI-Driven Cyberattacks

As businesses connect cameras, sensors, meters, industrial equipment and other IoT devices, securing those devices presents a particular challenge. Allot NetworkSecure gives telcos a cyber shield for business IoT services, built into the network itself. "By applying AI-driven intelligence and enforcement inside the network, Allot helps telcos protect and control the IoT environments of their business customers while turning security into a valuable service and a new revenue opportunity.” ### Additional Resources: Allot Blog: https://www.allot.com/blog Follow us on X: @allot_ltd Follow us on LinkedIn: https://www.linkedin.com/company/allot-communications About Allot Allot (NASDAQ & TASE: ALLT) makes networks safer, smarter and more valuable. At the core of Allot’s solutions is Deep Network Intelligence, powered by advanced AI/ML technologies, enabling unmatched app-aware visibility, even when traffic is encrypted.

Hacker alert for HVAC&R – what you need to do

This is a risk that both European and Australian cyber security experts have been foreshadowing for some time. Australian authorities issue alert The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) recently released its seventh Annual Cyber Threat Report (ACTR). It shows that during the 2025-26 financial year, ASD’s ACSC received more than 82,000 cybercrime reports, averaging one report every six minutes. The report also incorporates guidance for businesses, individuals and critical infrastructure operators on how to strengthen defences against cyber security threats. “While ASD’s ACSC has not seen active targeting in Australia, businesses and organisations should remain vigilant,” the alert states.

Supermarkets and plasma banks. Industrial hackers are now targeting electricity and water

In this instance, the breach occurred via a supplier to the Établissement français du sang (EFS), the French public blood and plasma transfusion service. According to press reports, the systems at three sites, normally set to minus 30 degrees, were reprogrammed to 110 degrees. The target, according to the French press, was Coolworld, a supplier and maintenance provider for numerous storage facilities. The authority called for public interfaces to be removed and for configurations, defrost cycles and alarms to be checked. With the ability to change set-points, defrost cycles or alarms, the attacker carries out normal but unauthorised operations.

Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet

Google and industry partners disrupted the XCPE botnet, a cybercriminal operation that planted a backdoor in more than 1.3 million Android-based set-top boxes, turning consumer devices into infrastructure for malicious activity. "These secondary modules were conducting ad-fraud; silently enrolling infected devices into residential proxy networks; and loading additional malware onto XCPE-compromised devices." Vulnerable Devices Ensnared in XCPE Most devices infected by the XCPE botnet were Android TV set-top boxes. However, the botnet also included other Android-based IoT devices, including telehealth equipment, karaoke machines, and digital signage systems, according to Google. Botnet Repercussions for Businesses Although the operation primarily targeted consumer devices, it has significant security implications for businesses and enterprise organizations.

Grid Solutions at Scale, in a Small Footprint: Visit Cisco at Enlit Europe

Reliable network communications help operators meet these demands. They enable teams to monitor grid conditions, control equipment remotely and make better use of existing capacity. At Enlit Europe 2026, Cisco will showcase live architectures based on real-world implementations across three areas of grid modernisation, from field cabinets to control centres. Built-in firewall capability helps protect field communications without a separate appliance, reducing the space, power and maintenance requirements. For field networks, you can manage IR1000 with Cisco Field Network Director, which helps teams deploy, configure, monitor and troubleshoot thousands of connections.

Malicious Software Planted at Manufacturing Stage in Home IoT Devices by Chinese Contractor Without Authorization; Japan's National Police Agency and Google Neutralize Over 1.3 Million Devices

A Chinese contractor tasked with manufacturing the devices was shipping them with the malicious software embedded without the knowledge of the company that placed the order. This marks the first time that malicious software has been found to be introduced without the involvement of either the seller or the purchaser. The malicious software was found in connected devices compatible with Google's television operating system "Android TV." In the wave of unauthorized access incidents targeting companies in 2026, IoT devices were used in more than a dozen cases. Even after the command-and-control servers were shut down, the malicious software itself is believed to remain within the firmware.

Is Facebook Listening? Privacy Under Threat

4 November 2026 1 min read 0 views Keep reading Related stories View all news → Video Global Call to Pause Frontier AI 5 October 2026 Video Why Bill Gates Is Sounding the Alarm Now 3 October 2026 Video Claude's Shadow Market in China 3 October 2026 Video When the Danger Comes From Within: Fly Dubai 3 October 2026

Brazilian Automotive Experts Map Which Industry 4.0 Technologies Could Rebuild Post-COVID Supply Chains

The research team built their investigation around a survey of sixteen manufacturing engineers working in the automotive industry, all experts in manufacturing processes. Of the surveyed engineers, 87.5 percent worked at two automotive OEMs in the Brazilian Northeast, and the same proportion reported more than ten years of experience in the automotive industry. Although the evaluation method itself could be applied to assess the automotive industry in any region or country, the results presented reflect only the Brazilian Northeast automotive industry and cannot be considered a snapshot of the national scenario. Subject of Research: Industry 4.0 technology adoption in the Brazilian Northeast automotive OEM supply chain after COVID-19 Article Title: Supply chain resilience and industry 4.0: a evaluation of the Brazilian northeast automotive OEM scenario post COVID-19 Article References: Soares, M. C., Ferreira, C. V., & Murari, T. B. Supply chain resilience and industry 4.0: a evaluation of the Brazilian northeast automotive OEM scenario post COVID-19.

Google alleges Chinese Business Partner turned Android Devices into Spying Gadgets

Google has reportedly uncovered a serious cybersecurity threat involving millions of Android-powered devices manufactured by one of its Chinese business partners. Google reportedly discovered the suspicious software during its investigation and review process. It also raises broader concerns about the security practices followed by manufacturers operating within the global electronics supply chain. However, it would be unfair to assume that every Chinese technology company engages in such activities based on allegations involving a single manufacturer. Manufacturers, technology partners, and platform providers must share responsibility for ensuring that the devices entering consumers’ homes are secure, transparent, and trustworthy.