At its annual Unify event, the Connectivity Standards Alliance, of which Apple is a member, marked the latest releases of Matter and Product Security. Building on the momentum of previous Matter releases, Matter 1.6 continues to expand the foundation for more intelligent, interoperable, and context-aware connected environments. This focused feature release enhances how devices interact across ecosystems, improves their ability to adapt to user preferences, and provides a deeper understanding of device status, offering greater visibility into the information consumers need to confidently manage their smart home experience, says Alliance President and CEO Tobin Richardson. Additionally, in response to the growing complexity of global IoT cybersecurity requirements, the release of Product Security 1.1 is the latest evolution of its Product Security Certification Program. Designed to help manufacturers navigate increasingly fragmented regulatory landscapes, version 1.1 expands the program beyond individual devices to support complete IoT systems, including apps, gateways, and remote processes, while introducing new levels of security assurance through independent testing pathways, Richardson says. I hope you’ll help support Apple World Today by becoming a patron. Almost all our income is from Patreon support and sponsored posts. Patreon pricing ranges from $2 to $10 a month. Thanks in advance for your support.
Jun 17, 2026 · via appleworld.today
The internet has transformed the way people live, work, and communicate. From smartphones and laptops to smart home devices, connected cars, and industrial systems, billions of devices now rely on internet connectivity to deliver convenience and efficiency. However, this growing digital ecosystem comes with a significant reality: anything connected to the internet can potentially be hacked. Cybersecurity experts have long warned that no internet-connected device is completely immune to cyber threats. While manufacturers and software developers invest heavily in security measures, hackers continuously search for vulnerabilities that can be exploited for financial gain, espionage, disruption, or data theft. As technology evolves, so do the methods used by cybercriminals. One of the primary reasons internet-connected devices are vulnerable is the complexity of modern software. Even the most advanced systems contain millions of lines of code, making it difficult to identify and eliminate every security flaw. A single vulnerability can provide attackers with an entry point into a device, network, or online service. Once access is gained, hackers may steal sensitive information, install malware, or use the compromised system as part of a larger cyberattack. The rise of the Internet of Things (IoT) has further expanded the attack surface available to cybercriminals. Smart televisions, security cameras, doorbells, thermostats, fitness trackers, and even household appliances are now connected to the internet. While these devices offer convenience and automation, many are released with limited security protections or outdated software. As a result, they often become attractive targets for attackers seeking easy access to home or business networks. Businesses are also facing growing cybersecurity challenges. Organizations rely on cloud platforms, remote work technologies, and connected infrastructure to support daily operations. A successful breach can expose customer data, intellectual property, financial records, and confidential communications. High-profile cyberattacks have demonstrated that even large corporations with dedicated security
Jun 17, 2026 · via cybersecurity-insiders.com
Contract expected to reach up to 6,000 active offenders, a roughly 6x increase in scale over the previous contract NEW YORK, June 16, 2026 /PRNewswire/ -- SuperCom (NASDAQ: SPCB), a global provider of secured solutions for the e-Government, IoT, and Cybersecurity sectors, today announced that it has signed the contract for and launched the national electronic monitoring (EM) project with Sweden's Prison and Probation Services, the customer, following completion of the customary standstill waiting period and contract negotiations. This project was formally awarded earlier this year through a five-company competitive bid process. The contract establishes SuperCom as Sweden's national EM provider on a far larger scale than its first national project in Sweden, launched in 2019, when it displaced a roughly 25-year incumbent. The total project value is estimated to range from $17 million, reflecting the base case scenario previously announced, to $75 million, the budget published by the customer. The published budget reflects potential expansion through a higher number of active offenders monitored, additional features and capabilities such as alcohol monitoring, the PureOne GPS solution and the Pure Officer mobile device for supervising officers. Revenues recognized by SuperCom will depend on actual usage levels. Sweden has been a pioneer in electronic monitoring for public safety in Europe, with initial probation programs dating back to 1994. The Swedish Prison and Probation Service is undergoing a period of historic expansion, and with it, broader use of electronic monitoring. The nationwide contract is designed to cover all of Sweden's prison and probation electronic monitoring programs, reflecting roughly 6x the scale of the program SuperCom first launched with the same customer in 2019. Under the contract, SuperCom will deploy its PureSecurity Electronic Monitoring (EM) Suite across a broad range of public safety programs, including GPS tracking of offenders, home detention monitoring, and indoor
Jun 16, 2026 · via prnewswire.com
By Trevor Dearing The European Parliament disabled AI features on staff devices over cybersecurity concerns. Trevor Dearing argues organisations should similarly manage and isolate AI risks. The business world is going all-in on AI. Global AI spending is on course to exceed $500bn this year, yet nearly 90% of analysed AI tools have been exposed to data breaches. The instinct for managing this risk is often binary: leave it on or switch it off. But a third, much more nuanced approach is possible. That choice was on full display earlier this year when the European Parliament disabled built-in AI features on devices issued to lawmakers and staff, concluding it could not guarantee the safety of tools like summarisers and virtual assistants. It was a measured restriction that stopped short of a full operational shutdown and didn’t impact core workplace tools such as email and calendars. At the same time, it exposes the complicated nature of AI, particularly with the growing use of agentic tools that can act autonomously. So how can organisations gain the benefits of advancing AI while keeping control? Why yes/no is a false choice Faced with AI uncertainty, most organisations default to one of two positions. They either impose blanket bans to remove risk entirely or allow AI tools to spread with minimal oversight. Neither is sustainable. While Illumio research found that over half (55%) of security leaders see AI-powered attacks as a major risk, only 19% see unapproved or unmanaged use of large language models as a top concern. Many risk sleepwalking into a major security incident by overlooking the rapid spread of unsanctioned AI within their environments. Part of this risk comes from trying to secure AI using security models that were never designed for it. Traditional security frameworks are built around trusted actors, user
Jun 13, 2026 · via europeanbusinessreview.com
Report issue
SEALCOIN QAIT
4 Watchlists
DePIN
Status
What is SEALCOIN?
Trending Coins and Tokens
- 240RSK Infrastructure Framework RIF $ 0.09238 11.7%
- Messari
- Ai Pay With Crypto
- 263SIREN SIREN $ 0.1147 17.7%
- 235ChainOpera AI COAI $ 0.4934 40.4%
- SEALCOIN - QAIT
- 19Gram (prev. Toncoin) GRAM $ 1.71 2.16%
Jun 13, 2026 · via cryptorank.io
As reported by Security Affairs, a significant number of internet-connected cameras are found to be streaming live video without any form of authentication, posing a serious privacy and security risk. The investigation by Mysterium VPN highlights that cheap, budget devices are the primary culprits, often lacking basic security measures.A recent analysis by Mysterium VPN revealed that over 21,000 live cameras are accessible online without any login credentials or security barriers. While major brands like Hikvision and Dahua have largely addressed this vulnerability by enforcing mandatory password setup, the issue persists predominantly with low-cost devices. These budget cameras, often utilizing protocols like RTSP, act as open conduits, broadcasting feeds to anyone who discovers their IP address. The report indicates that Japan and the United States have the highest number of such exposed feeds, largely due to residential broadband connections. This lack of security is not a result of hacking but rather a failure to implement basic security practices, such as setting unique passwords.The findings echo the vulnerabilities exploited by the Mirai botnet in 2016, which leveraged default credentials. Despite regulatory efforts to ban default passwords, millions of older devices remain vulnerable, potentially revealing sensitive information about individuals and their routines to strangers.Source: Security Affairs Get daily email updates SC Media's daily must-read of the most current and pressing daily news You can skip this ad in 5 seconds
Jun 12, 2026 · via scworld.com
India is facing a shortage of cybersecurity specialists in emerging areas such as cloud, AI, operational technology and IoT security, even as companies deploy AI systems and prepare for a new generation of machine-speed cyber threats. The country has around 300,000 cybersecurity professionals, but nearly 19% change employers every year, resulting in the same pool of specialists moving between companies instead of expanding the talent base. Around 39,000 cybersecurity positions remain open despite an annual addition of 40,000-60,000 professionals, according to Careernet's India Cybersecurity Talent Outlook 2026. The report also said that demand is highest in domains with the smallest talent pools. IoT and connected devices security recorded a demand ratio of 237% despite having only 4,612 professionals, while blockchain and Web3 security reported a demand ratio of 230% with a workforce of 1,736 specialists. Cloud-native and container security recorded the highest workforce churn at 26.67%, followed by AI and machine learning security at 25.97%, reflecting competition for a limited pool of specialists. "Cybersecurity hiring has become one of the few areas where companies are increasingly unwilling to compromise on quality, even under hiring pressure," said Neelabh Shukla, chief business officer at Careernet. "In cybersecurity, especially across cloud, OT, infrastructure, and AI-led environments, the cost of a capability gap is far more immediate," he said. The shortage comes as organisations adopt agentic AI systems. Research by Veeam Software showed that 93% of Indian organisations are already using or piloting AI agents and 44% have deployed them in production. However, 42% of executives identified risks arising from autonomous agent behaviour and decision chaining as a key factor slowing AI adoption. The pressure on cyber teams has increased following the emergence of Anthropic's Claude Mythos Preview, a restricted AI model that was evaluated by the AI Security Institute and found to represent
Jun 12, 2026 · via newindianexpress.com
Most companies still approach cyber security as if attackers are trying to “break in”. That thinking is outdated. Modern cyber criminals are not smashing through firewalls wearing hoodies in dark rooms. They are logging in through the front door using stolen credentials, hijacked Microsoft 365 accounts and employees who unknowingly hand over access every single day. The uncomfortable reality is this: many businesses are already hosting attackers inside their environments long before anyone notices. By the time ransomware appears on screens or operations grind to a halt, the damage has already been done. Data has been stolen, systems mapped, backups identified and trust compromised. Cyber security is no longer an IT discussion, it’s now a business survival discussion. Every organisation today is a digital business whether it wants to admit it or not. Manufacturing plants rely on connected systems. Retailers depend on online payments and logistics platforms. Professional services firms operate through cloud applications and email. Healthcare environments rely on digital patient information and connected infrastructure. If those systems stop functioning, the business stops functioning. This is why cyber resilience has become one of the defining operational challenges facing modern organisations. The issue is no longer whether a business will be targeted. The issue is whether the business can continue operating when prevention eventually fails. Prevention does fail. Cybercrime has fundamentally changed over the last few years, attacks are now automated, scalable and increasingly powered by artificial intelligence. Criminal groups no longer need deep technical expertise to launch sophisticated attacks. Entire cybercrime ecosystems now operate as commercial businesses complete with subscription models, technical support and ready-made attack kits. Today, attackers can purchase ransomware as a service, phishing kits, stolen credentials and automated attack tools with very little effort. AI generated phishing emails are becoming increasingly difficult to distinguish from legitimate
Jun 12, 2026 · via cybersecurity-insiders.com
The oil and gas industry is spending billions on cybersecurity — and much of it is pointed in the wrong direction. Network monitoring tools, vulnerability scanners, and vendor questionnaires are the pillars of most operators’ OT security programs. They’re necessary. They’re also insufficient. Because none of them answer the one question that matters most—what is actually running inside the firmware of the controllers, RTUs, and SCADA systems keeping your pipelines flowing and your refineries processing? That question, paired with the industry’s collective failure to answer it, is the most dangerous blind spot in critical infrastructure security today. The Numbers Are Moving the Wrong Way The threat landscape isn’t abstract. In 2024, Halliburton suffered a ransomware attack that cost $35 million. CISA reported a 145% surge in OT-targeted cyberattacks that same year. Dragos documented an 87% increase in ransomware groups targeting industrial organizations. The average cost of a single OT security incident in oil and gas has reached $4.4 million. These aren’t outliers. They’re a pattern. And the pattern that stems from decades where operational technology lived in isolation, running proprietary protocols on air-gapped networks. IT/OT convergence changed that. Remote monitoring, predictive maintenance, and real-time optimization connected those systems to networks that threat actors have been probing for years. Over this time, however, the underlying equipment stayed the same. I’m referring to fifteen-year-old controllers, firmware that was never designed to face the internet and protocols that predate modern encryption. The attack surface expanded. The software inside the devices didn’t change. And almost nobody has looked inside it. What’s Actually in the Firmware Here’s a real-world example that illustrates the gap. A deep binary analysis was recently performed on firmware from a major RTU vendor widely deployed across upstream oil and gas operations. This is a reputable vendor whose product has passed
Jun 12, 2026 · via cybersecurity-insiders.com
Every company selling a networked device, connected component, or software product into the European Union faces a binding new deadline: beginning September 11, 2026, manufacturers must file an early warning with EU cybersecurity authorities within 24 hours of detecting an actively exploited vulnerability in any product on the EU market. Today, June 11, marks the first formal milestone in the CRA's phased rollout — the date on which national authorities were required to designate conformity assessment bodies under the law's Chapter IV — and the window to complete the internal pipeline work that makes 24-hour compliance possible is now measured in weeks, not months. The regulation driving this change is the EU Cyber Resilience Act (Regulation EU 2024/2847), which entered into force on December 10, 2024, and covers virtually any hardware or software product that connects directly or indirectly to a device or network. Consumer smart speakers, home routers, industrial control systems, enterprise software suites, and connected vehicle telematics units are all in scope. Non-compliance can result in product withdrawal from the EU's 450-million-person single market and financial penalties of up to €15 million or 2.5% of global annual turnover, whichever is higher. The most immediate challenge for vendors is not what the regulation requires — the requirements are now clearly documented — but whether the internal engineering, legal, and security operations infrastructure exists to meet a 24-hour notification clock that starts the moment an organization becomes aware of an exploitation, not when it has confirmed or analyzed it. CRA Vulnerability Reporting: What the 24-Hour Pipeline Requires Under Article 14 of the CRA, manufacturers must submit notifications through the ENISA Single Reporting Platform (SRP), a centralized EU web portal that routes each submission simultaneously to the national Computer Security Incident Response Team (CSIRT) of the manufacturer's main EU establishment and
Jun 11, 2026 · via techtimes.com
Threat actors have been disguising malware as AI study guides and developer resources to trick professionals into running a multi-stage attack that ends in the AsyncRAT trojan. New analysis from Fortinet's FortiGuard Labs described booby-trapped files with names like "AI-Ready PostgreSQL 18" and a fake guide to agentic coding with Claude Code, all aimed at people hunting for AI learning material. The campaign hits Windows users at any organization, the researchers said, and runs entirely through trusted system tools to stay hidden. Read more on fileless AsyncRAT attacks: Fileless Malware Deploys Advanced RAT via Legitimate Tools Fake Guides Open a Staged Chain The lure plays on the demand for AI know-how. "Attackers are now packaging malware as trusted learning content," said Diana Kelley, CISO at Noma Security, who urged teams to treat downloaded documents and training assets as part of the software supply chain. Inside the archive sits a shortcut (LNK) file and two hidden documents. Opening it triggers a chain of scripts that each pull the next stage from hidden offsets inside one PDF-named data file, decrypting and executing as they go. It plants scheduled tasks disguised as Realtek audio services and opens a clean decoy document, so the victim sees a harmless file while the PowerShell stages run silently. The two files posing as Realtek components are really copies of AutoHotkey, a legitimate automation tool repurposed as an execution engine, so the malicious logic sits in scripts that are harder to fingerprint than compiled binaries. One branch rebuilds a hidden program from numbers in a fake manifest and uses process hollowing to run it inside a real .NET process. The manifest yields two .NET payloads: a modular remote access trojan (RAT) Fortinet tracks as clay_Client, and AsyncRAT, which beacons to its own command-and-control (C2) server. John Gallagher, VP
Jun 11, 2026 · via infosecurity-magazine.com
June 10, 2026 — ABB and Samsung Electronics announced a new integration between ABB Ability Building Pro and Samsung SmartThings Pro, building on their existing partnership. The integration enables building owners and operators to access building data, insights and controls through a more connected environment. Building owners and operators are managing increasingly complex property portfolios while facing growing pressure to improve efficiency and meet sustainability goals. ABB and Samsung are directly addressing that challenge by connecting their respective building intelligence and enterprise IoT platforms, providing greater visibility into building performance through a familiar digital environment. ABB Ability BuildingPro connects devices and data across building systems, enabling analytics and operational insights through ABB Ability BuildingPro Suites. Samsung SmartThings Pro brings these capabilities into the Samsung ecosystem via a secure cloud-to-cloud integration, allowing data to be shared between both platforms. "Building owners require a data foundation they can trust and tools that make it easier to manage increasingly complex building portfolios," said Mike Mustapha, division president, ABB Electrification’s Smart Buildings Division. "By integrating ABB Ability BuildingPro with Samsung SmartThings Pro, we are helping owners and operators access the insights they need to make more informed decisions across their buildings.” “Samsung SmartThings Pro gives enterprise customers a familiar platform to manage and maximize their buildings and assets,” said Chan-Woo Park, executive vice president, Samsung Electronics Device eXperience Division. “Combined with ABB Ability BuildingPro, customers can access building information and controls through a connected experience that helps simplify day-to-day building management.” Together, ABB Ability BuildingPro and Samsung SmartThings Pro provide building operators with a unified view of lighting, climate, shading and access-control systems, alongside energy monitoring and presence detection data. With ABB Ability BuildingPro Suites, operators can access analytics and operational insights to better manage building performance across offices, retail locations and larger commercial
Jun 10, 2026 · via automation.com
Cybersecurity researchers have warned of a "resurgence and expansion" of JDY, a covert network associated with China-nexus state-sponsored threat actors. "The JDY botnet comprises over 1,500 SOHO [small office and home office] and IoT devices and operates as a centrally controlled, high-performance scanner used to discover, fingerprint, and continuously map exposed services at scale," Lumen's Black Lotus Labs said in a report shared with The Hacker News. JDY was first flagged as a cluster within another botnet codenamed KV-botnet in mid-December 2023. Primarily used for broader scanning against internet targets, the stealthy network comprising compromised SOHO routers, firewalls, and IoT devices has been put to use by Chinese hacking groups like Volt Typhoon. Following KV-botnet's takedown by the U.S. government in early 2024, the botnet operators began making behavioral changes to the network, with the second KV cluster largely going offline. It's suspected that the botnet is offered by the operators to various hacking outfits, while carrying out reconnaissance and targeting on their own. The latest findings from Black Lotus Labs show that the malware has expanded in scope to infect a broader range of devices and act as a conduit to feed "structured reconnaissance data" into a larger scanning ecosystem for follow-on target identification and exploitation. Specifically, the JDY cluster is being used to conduct targeted scanning and service fingerprinting with an aim to flag vulnerable infrastructure following public disclosures. This points to an industrialized reconnaissance effort, the results of which are leveraged by Chinese nation-state groups. This has been complemented by a growth in the botnet's size, which has surged from 650 bots at the start of January 2024 to more than 1,500 compromised devices. Most of the hacked nodes are located in the U.S. and Brazil, followed by Europe and Asia. Black Lotus Labs told The Hacker
Jun 10, 2026 · via thehackernews.com
Cybersecurity's Blind Spot: Securing the Office Printer in a Zero Trust World - 67% of organizations experienced data loss related to print environments in 2024 - Average cost of print-related breaches exceeds $1.3 million - Over 25 billion connected IoT devices projected globally by 2026 Experts agree that office printers and IoT devices represent a critical, often overlooked cybersecurity vulnerability requiring a shift to continuous, managed security models to align with Zero Trust principles. Cybersecurity's Blind Spot: Securing the Office Printer in a Zero Trust World DALLAS, TX – June 09, 2026 – In the modern enterprise, it stands as a paradox: a sophisticated, network-connected computer with its own operating system and hard drive, capable of accessing and storing sensitive corporate data, yet almost entirely ignored by cybersecurity teams. This is the reality of the humble office printer. For years, security leaders have focused on fortifying servers, laptops, and cloud infrastructure, while the devices humming away in the corner have become a critical blind spot. This isn't a theoretical risk. Research firm Quocirca's 2024 report revealed that a staggering 67% of organizations experienced a data loss related to their print environment in the past year. The financial fallout is just as severe, with the average cost of such breaches now exceeding $1.3 million. The core of the issue lies in a pervasive and dangerous mindset of "I don't care about printers," coupled with a systemic problem of fragmented ownership. Responsibility is scattered across IT operations, information security, governance, and procurement, but accountability for actually executing security measures belongs to no one. The High Cost of a 'Don't Care' Mindset The consequences of this neglect are profound. Printers and other connected Internet of Things (IoT) devices—from smart sensors to conference room displays—represent an ever-expanding attack surface. With projections showing over 25
Jun 9, 2026 · via briefglance.com
About
Press
Copyright
Contact us
Creators
Advertise
Developers
Terms
Privacy
Policy & Safety
How YouTube works
Test new features
NFL Sunday Ticket
© 2026 Google LLC
Jun 9, 2026 · via youtube.com
Symphion, Inc. Announces The Symphion Managed Endpoint Cybersecurity Operations Program for Printers & Connected IoT™ DALLAS, June 9, 2026 /PRNewswire/ -- Symphion, Inc., the world leader in print fleet cybersecurity, today announced The Symphion Managed Endpoint Cybersecurity Operations Program for Printers & Connected IoT™ (The Symphion Program™), formally combining the company's proven technology-enabled managed cybersecurity operations into one complete program for printers and connected IoT. The announcement comes as organizations recognize that their printers and connected IoT require continuous cybersecurity operations—but no clear owner is responsible for executing them. Responsibility spans IT, infosec, GRC, procurement, managed print and OEMs, yet nobody owns cybersecurity execution and governance. With The Symphion Program, Symphion operationalizes cybersecurity within customer IT ecosystems by onboarding printers and connected IoT into a continuous operational model. The program provides hourly evergreen inventory, twice-daily drift detection, same-day remediation, certificate continuity and restoration, password and configuration posture management, firmware lifecycle, baseline enforcement, break glass recovery, PMO support and reporting. This continuous approach is critical because technician resets, lifecycle events, device replacement, and firmware updates routinely disrupt endpoint identity and security posture. Printers are among the most operationally complex connected endpoints and a natural starting point for broader connected IoT cybersecurity operations. They are managed for uptime and cost—but not cybersecurity. OEMs provide features. Managed print providers optimize uptime. Security focuses elsewhere, while the "I don't care about printers" mindset delays action. As Zero Trust and audit expectations increase, printers and connected IoT endpoints increasingly must authenticate, maintain trusted identity, and prove control and continuous enforcement. IT operations teams are increasingly tasked with remediation after failed penetration tests despite lacking an operating model, while CISOs and GRC leaders are expected to reduce risk without a practical way to operationalize it. Enterprises face three bad options: fragmented accountability, unsustainable manual efforts or
Jun 9, 2026 · via prnewswire.com
ZAWYA: Al-Futtaim Technologies expands cybersecurity capabilities through partnership with AIShield Dubai, UAE - Al-Futtaim Technologies, part of Al-Futtaim Contracting, has announced a strategic partnership with AIShield, further expanding its cybersecurity portfolio to address the growing need for securing enterprise AI ecosystems amidst a rapidly evolving cybersecurity landscape. The collaboration reflects the growing importance of protecting AI systems as organisations increasingly integrate AI/ML and Generative AI technologies into critical business operations. Moving beyond traditional cybersecurity models and product resale agreements, Al-Futtaim Technologies is redefining the industry’s shift from “AI for Security” to “Security for AI” through a strategic cybersecurity capability extension focused on securing the entire AI lifecycle, from development and testing to deployment and runtime monitoring, enabling businesses to adopt AI more safely, responsibly, and resiliently. Through the integration of AIShield’s capabilities into Al-Futtaim Technologies’ cybersecurity portfolio, organisations will be able to strengthen protection against emerging AI-specific threats including model extraction, adversarial attacks, prompt injection, and other vulnerabilities impacting AI and GenAI systems. With advanced runtime protection capabilities, Al-Futtaim Technologies and AIShield are helping enterprises continuously monitor and secure AI models during operation while integrating seamlessly with wider enterprise security ecosystems such as SIEM, WAF, DLP, SOC, and XDR environments. As regional businesses increasingly navigate complex AI governance and compliance requirements, this initiative also supports alignment with leading global frameworks and standards including OWASP AI security standards, MITRE ATLAS, and emerging AI regulatory readiness initiatives such as the EU AI Act. Commenting on the partnership, Razi Hamada, General Manager at Al-Futtaim Technologies, said: “With AI rapidly becoming embedded across enterprise operations, organisations are facing an entirely new category of cybersecurity risks. Through our work with AIShield, we are helping businesses strengthen trust, resilience, and governance across their AI environments by securing the full AI lifecycle, from development to deployment and
Jun 9, 2026 · via tradingview.com
Shifts in the cybersecurity threat landscape have turned consumer devices into a collective national security risk, as the network of exploitable devices surges past 200 million, Nokia’s research has shown. Statistics released by Nokia's Deepfield Emergency Response Team (ERT) revealed that internal army of weaponized subscriber devices, including smartphones, routers, and IoT gear is outpacing traditional cybersecurity defenses, a trend being further fueled by AI scraping. According to the report, 77% of all distributed denial of service (DDoS) attacks now end within five minutes, with 37% concluding in under two minutes. This rapid-fire timeline makes legacy detect-and-divert security playbooks obsolete. The Nokia report highlighted how modern DDoS attacks have evolved from prolonged external floods into complex, internal bursts, with 58% of incidents being multivector attacks, combining multiple methods (such as SYN floods and HTTP layer-seven attacks) to bypass single-signature defenses. The data also showed that 52% of attacks use "carpet bombing" tactics, spreading traffic across multiple destination prefixes to slip under conventional detection thresholds. Telecom providers have historically operated on a predictable playbook, defending against external traffic originating from overseas hosting environments. However, Nokia warns that infrastructure approaches have broken down over the past year. The vendor points to the multihundred-million-dollar residential proxy market as the hidden engine behind this shift. Often, middlemen pay app developers to embed proxy software development kits (SDKs) into ordinary applications, while some device manufacturers have shipped malware directly within factory firmware. However, the primary financial engine backing this infrastructure is legitimate, Nokia says. Massive AI companies require large amounts of data for large language model (LLM) training and inference. For instance, one leading proxy vendor publicly stated that 14 of the top 20 LLM companies are its customers. The report pointed to premium rates for residential IP addresses to scrape the web, with a
Jun 9, 2026 · via sdxcentral.com
The engineering landscape is evolving rapidly, making continuous upskilling essential for professionals. Traditional degrees alone no longer guarantee career success, as industries increasingly rely on AI, automation, and data-driven solutions. Engineers must now develop a combination of technical expertise, digital literacy, and strong communication skills to solve real-world problems, collaborate effectively, and adapt to new technologies. Mastery of AI, Generative AI, Data Analytics, Programming, Automation, and emerging technologies such as IoT and Cybersecurity is critical. By embracing practical skills alongside theoretical knowledge, engineers can innovate, remain competitive, and secure high-paying placements in an ever-changing professional environment. Engineers, traditionally known for their versatility, must embrace new skills due to significant transformations: AI is Transforming Every Industry: Artificial intelligence is revolutionizing operations, requiring engineers to leverage AI for increased efficiency. Automation is Replacing Repetitive Tasks: AI is automating jobs involving repetitive, fixed patterns. This necessitates engineers to focus on tasks requiring human creativity and subjective input, which AI cannot replicate. Companies Now Hire for Skills, Not Just Degrees: The industry prioritizes practical skills and problem-solving abilities over mere academic qualifications to address real company challenges. Engineers need a comprehensive blend of technical, digital, and communication skills to meet current job requirements. The future demands professionals who can learn, adapt, and innovate, moving beyond comfort with existing methods. AI and Generative AI (GenAI) are crucial skills for every engineer's resume, demonstrating capability in modern technological advancements. Applications: It is used extensively across various sectors including design, coding, manufacturing, healthcare, and research. Benefit: This skill significantly increases productivity in diverse fields. Key Learning Areas: ChatGPT usage AI tools Prompt engineering Machine learning basics (including classification, regression, and loss functions) Data Analytics is essential because all engineering fields generate vast amounts of data, which serves as a critical resource. Context: Data is the new oil,
Jun 8, 2026 · via pw.live
Generative AI Meets IoT Security The convergence of Generative AI and the Internet of Things is creating new opportunities across the connected technology landscape. While most discussions around Generative AI focus on productivity, software development, or customer-facing applications, a less visible but potentially transformative use case is emerging: cybersecurity for connected systems. As IoT deployments continue to scale—from industrial automation and smart utilities to connected healthcare and logistics—security teams face an increasingly difficult challenge: millions of devices generate vast quantities of telemetry data, attack surfaces continue to expand, and cyber threats evolve faster than traditional security operations can adapt. Generative AI is now being positioned as a potential force multiplier for IoT security teams. It can help analysts detect anomalies, investigate incidents, automate threat hunting, generate security policies, and improve operational visibility across complex device ecosystems. However, the technology also introduces new risks. Generative AI models can be manipulated, produce inaccurate outputs, expose sensitive information, or become targets themselves. As organizations explore deployment options, they must balance the operational benefits against security, privacy, and governance concerns. The key question is no longer whether Generative AI will influence IoT security, but how it can be deployed responsibly and effectively. Why IoT Security Needs New Approaches Traditional cybersecurity tools were largely designed for IT environments where endpoints are relatively standardized and centrally managed. IoT environments are fundamentally different. Organizations often operate thousands or even millions of connected devices from multiple vendors, running different firmware versions and communicating across diverse networks. Many devices have limited computing resources, making conventional endpoint security solutions impractical. At the same time, threat actors increasingly target connected infrastructure because it offers multiple entry points into enterprise environments. Security teams must therefore process: - Device telemetry - Network traffic logs - Authentication events - Firmware updates - Vulnerability reports
Jun 8, 2026 · via iotbusinessnews.com