More than 9.1 million distributed denial-of-service (DDoS) attacks were recorded globally in the first half of 2026, as a sharp rise in high-capacity incidents and increasingly short attacks put pressure on telecommunications networks and enterprise defences.
The company recorded attacks across 209 countries and territories between January and June, a 14% increase on the second half of 2025.
NETSCOUT recorded more than 2.08 million attacks against wired communications and 2.84 million against wireless communications, bringing the combined total to nearly 5 million.
Carpet-bombing attacks, which distribute traffic across multiple addresses or parts of a network, rose from 3.97% to 4.54% of attacks.
The report is based on attack traffic directly observed by NETSCOUT through its global network visibility and mitigation infrastructure.
Oct 15, 2026 · via iotinsider.com
Representatives from the ASEAN Secretariat and ASEAN Dialogue Partners were also involved in discussions regarding regional digital security challenges.
Increasingly Complex Cyber Threats Digital technological developments bring new challenges to information security.
During the meeting, ASEAN nations welcomed the ASEAN Cybersecurity Cooperation Strategy 2026–2030 as a framework to bolster cybersecurity collaboration over the next five years.
Systems that support strategic services require adequate protection to ensure that digital security disruptions do not escalate into broader issues.
Quantum Computing as a New Challenge Beyond existing cyber threats, the 11th AMCC forum discussed the region's readiness to face quantum computing technology.
Oct 15, 2026 · via jurnalpost.com
The U.S. government is moving closer to requiring covered critical infrastructure organizations to report significant cyber incidents within 72 hours and ransomware payments within 24 hours.
For critical infrastructure operators, the emerging question is whether they can demonstrate the integrity of the measurements, setpoints and commands on which safe operations depend.
CIRCIA raises stakes for incident detection CIRCIA's proposed 72-hour incident reporting window and 24-hour ransomware payment disclosure window would formalize federal notification obligations for organizations within the rule's scope.
"OT operators will have to prove what happened in their environment, not assume it," said Thomas Plank, CEO of Tributech, an industrial IoT data infrastructure provider.
That gap may become more consequential as AI systems make decisions using real-time industrial data.
Oct 15, 2026 · via techtarget.com
PCA Cyber Security has launched PCA CERVUS, a vulnerability monitoring and threat intelligence platform for embedded and connected products.
The system is designed to give product security teams visibility of cyber risks across individual devices, product lines and wider portfolios.
Compliance push PCA Cyber Security positioned the launch against rising regulatory scrutiny of product security across the full lifecycle of connected devices.
Budapest-based PCA Cyber Security was founded in 2019 and specialises in embedded cybersecurity work including penetration testing, threat intelligence and continuous monitoring.
PCA Cyber Security said PCA CERVUS addresses that problem by correlating software component data with vulnerability intelligence and continuously monitoring those components for newly disclosed risks.
Oct 15, 2026 · via itbrief.co.uk
On October 12th, several supermarket chains and food retailers began reporting problems with their refrigeration systems, which is when the attack came to light.
The attackers reportedly triggered forced defrosting functions remotely in refrigeration systems, causing their temperatures to increase sharply.
Besides refrigeration systems, there are other important connected ecosystems: distribution networks, cold storage warehouses, logistics platforms, and more.
While trying to limit the number of connected devices might sound like the most logical solution, it’s not feasible.
It would do more long-term good if supported systems were to be updated and scanned at regular intervals and if connected devices were to move away from legacy solutions.
Oct 15, 2026 · via sify.com
AI models could soon be capable of replicating themselves across internet-connected devices without relying on data centres, according to new research from Anthropic.
To challenge this, Anthropic researchers tested whether AI models could run on cheap consumer electronics instead of relying on data centres.
In one experiment, they managed to run an AI model across 15 Android TV boxes, each costing around $55.
Although, the system was slow, it worked and showed that AI models could operate using relatively inexpensive devices, rather than the specialist hardware usually associated with advanced AI.
However, the researchers also tested whether AI could improve its chances of success by using information from previous attempts.
Oct 15, 2026 · via mobileeurope.co.uk
It’s a question federal cybersecurity officials are confronting as investigators uncover the scale of China-linked cyber operations targeting American telecommunications networks, government systems, and critical infrastructure.
In September 2025, the U.S. Cybersecurity and Infrastructure Security Agency and international partners warned that Chinese state-sponsored cyber actors had targeted networks worldwide.
U.S. officials, meanwhile, maintain that the cyber operations identified through their investigations pose a threat to American networks and national security.
Sources: U.S. Department of Justice, FBI, National Security Agency, Cybersecurity and Infrastructure Security Agency, and Reuters.
Editor’s note: This article covers multiple China-linked cyber operations and the October 8, 2026, federal enforcement action.
Oct 15, 2026 · via thekatynews.com
This transforms OT/IoT malware from a rigid script requiring command-and-control into an adaptive agent that can pivot when an initial installation fails.
There are over 150,000 unique operating systems with OT/IoT devices, and without AI that would otherwise be a barrier to the reach of bots placed on OT/IoT devices.
Automating OT/IoT device cyber hygiene is non-negotiable.
Every OT/IoT device must have automated firmware patch enforcement, active certificate management, and automated password rotation to eliminate initial access entirely.
A worm carrying its own AI model moves gigabytes to spread, and a model running across several devices keeps those devices exchanging traffic.
Oct 14, 2026 · via securitymagazine.com
French prosecutors have opened a cybercrime investigation into the attack, which caused food losses and equipment damage.
Strand said connected devices often lack regular security patches, endpoint detection and response tools, and basic network protections.
He said the models involved in the French incident had reached end-of-life status between 2016 and 2021, leaving operators with limited options for addressing newly discovered vulnerabilities.
OT risks The precise entry point used in the French attack has not been publicly established.
Plank argued that connected equipment should verify both the origin of a command and whether the requested action falls within permitted operating limits.
Oct 14, 2026 · via iotinsider.com
Cybersecurity Awareness Month, observed every October, is increasingly focusing on new and evolving threats, particularly those involving artificial intelligence.
While fundamental cybersecurity practices remain crucial, the emergence of agentic AI presents novel challenges for securing digital foundations.
This year's Cybersecurity Awareness Month activities, themed "Securing the Next 250" by NIST, emphasize the integration of AI into cybersecurity.
A key focus is the impact of agentic AI on software development, with a webinar scheduled on "DevSecOps and the Impact of Agentic AI."
Providers can help clients establish identity and access controls for AI agents, define what those agents are authorized to do, and monitor their activity for unexpected behavior.
Oct 14, 2026 · via channele2e.com
This week, that warning moved from theory to reality when hackers reportedly targeted refrigeration systems in hundreds of French supermarkets, causing food spoilage, operational disruption, and even fires.
They now have the potential to affect food supplies, public safety, and critical infrastructure.
According to reports, cybercriminals gained access to internet-connected refrigeration management systems used by major French retailers.
Just imagine a similar attack against hospital refrigeration units storing medicines, pharmaceutical manufacturing facilities, airport systems, data center cooling infrastructure, or food distribution warehouses.
While this French incident involved supermarket refrigeration, it highlights a broader risk surrounding connected operational technology.
Oct 14, 2026 · via gulfnews.com
Therefore, protecting healthcare systems is not just about preserving data: it means maintaining the ability to care for patients safely and continuously.
Healthcare data: the impact of a breach beyond the incident Data protection is the other major dimension of the problem.
The exposure of medical information can facilitate fraud, extortion, and impersonation, in addition to causing personal and reputational damage that is difficult to repair.
Therefore, protecting healthcare systems is not just about preserving data: it means maintaining the ability to care for patients safely and continuously.
Healthcare data: the impact of a breach beyond the incident Data protection is the other major dimension of the problem.
Oct 14, 2026 · via escudodigital.com
Join the community of 2M+ industry professionals Subscribe to our Daily, Weekly, and Evening NewsLetter, Take a look
Oct 14, 2026 · via ciso.economictimes.indiatimes.com
This is partially in response to internationally firming regulations, and partially in response to its recognition of the necessity for ironclad cybersecurity for operational technology (OT) systems.
But the regulatory environment reflects the relatively recent addition of OT systems to the cybersecurity estate.
This detailed, verifiable cybersecurity birth certificate records every component, firmware version, and hardware element at the point of origin, while also folding cyber resilience into essential health and safety requirements.
Older machines run for decades, necessitating retrofitting the cybersecurity birth certificate and updating to bring them within accepted and emerging standards.
"That's why we think of it like a birth certificate.
Oct 14, 2026 · via itbrief.asia
Selecting a hardware root of trust, including secure elements that generate and protect private keys and enable cryptographic operations.
To download Designing for the Cyber Resilience Act, visit https://resources.mouser.com/manufacturer-ebooks/microchip-designing-for-the-cyber-resilience-act/.
For more Mouser news and the latest new product introductions, visit https://www.mouser.com/newsroom/.
About Mouser 2026 - Mouser is a leading authorized distributor of electronic components and industrial automation products.
Trademarks Mouser and Mouser Electronics are registered trademarks of Mouser Electronics, Inc. All other products, logos, and company names mentioned herein may be trademarks of their respective owners.
Oct 14, 2026 · via militaryaerospace.com
The resulting break in the cold chain forced the affected supermarkets to remove large quantities of fresh and frozen products.
Hospitals, factories, energy providers, transport companies, logistics centres and water treatment facilities all rely on connected systems to manage physical processes.
All of these remain essential, but they are not enough when an attack affects physical systems.
Segment IT and OT networks Corporate networks and operational systems should not share an environment without appropriate separation.
It can also increase the temperature of a cold room, halt a production line, interrupt a service or disrupt an entire supply chain.
Oct 13, 2026 · via pandasecurity.com
Key takeaways 01 Anthropic warns small open AI models may eventually copy themselves across everyday smart devices.
Anthropic claims that small open AI models may be months away from autonomously replicating across everyday internet-connected devices and potentially creating an independent AI botnet.
The debate over closed vs open AI models is heating up with the latest warning from Claude's developer.
"It’s uncertain exactly what form autonomous AI replication will take.
In 2025, Cybernews reported on a massive botnet, Kimwolf, that included more than 1.8 million Android devices.
Oct 13, 2026 · via cybernews.com
Months before hackers targeted refrigeration equipment across hundreds of grocery stores in France, a U.S.-based cybersecurity firm discovered high-severity flaws in internet-exposed equipment that could make such an attack possible.
Researchers at Claroty, in an August report, warned of multiple flaws in the web management interface of Danfoss AK-SM 800A controllers, which are used in refrigeration equipment across multiple industries.
Claroty disclosed the vulnerabilities to Danfoss, and the Danish manufacturer issued an advisory for two vulnerabilities, including CVE-2025-41451 and CVE-2025-41452.
About 300 Intermarché and Netto stores were affected by the attack, which reportedly targeted a service provider that manages refrigeration equipment at the stores.
Braley said information from Danfoss shows that most of the targeted systems are older and are no longer receiving active firmware or security updates.
Oct 13, 2026 · via cybersecuritydive.com
Anthropic’s experiments suggest that small AI models may be months away from being capable enough to self-replicate on commercial internet-of-things (IoT) devices, like smart ovens and off-brand Android TV boxes.
"They include the risk of losing control of AI systems, misuse of AI for cyberattacks and bioterrorism and serious economic disruption.
The pair suggest that AI researchers’ prior work has already shown that AI agents can act like one: scanning their network, executing an exploit and copying model weights to a target machine across a GPU cluster.
The capabilities that make AI models generally powerful coding agents also generalise to cyber tasks, including autonomous replication.
“It’s uncertain exactly what form autonomous AI replication will take,” they write.
Oct 13, 2026 · via aimagazine.com
AI safety fears have jumped from sci-fi talking point to front-page risk, and that shift is pulling cybersecurity and IoT security stocks into the spotlight.
AI safety concerns are drawing more attention to vendors that secure networks and connected devices.
GMO internet group matters here because it sits where internet plumbing, built in security and AI heavy services meet, and that mix is exactly what rising AI safety concerns are pushing investors toward.
Investors tracking cybersecurity demand may find that the key variable is how security led projects interact with stricter AI governance budgets.
Seeking Alternatives Beyond Cybersecurity Plays Fresh themes are gaining breakout momentum while most eyes stay glued to headline AI risks.
Oct 13, 2026 · via simplywall.st