No-frills tech news

How hotels can manage the risks of tech investment

A Transforming Hospitality Digital Landscape Technology now has a definitive role in how the hospitality industry operates and responds to guest expectations. Internet of Things solutions enable smart rooms that give guests control over their experience, and also offer operating efficiencies, like improved energy management systems. The mobile ordering systems that 80 percent of restaurants use or plan to use have expanded customer access. Effective risk management strategies require organizations to view technology threats in the context of existing safety concerns. Staff training is key, both in how to use critical technology systems and what to do in the event of a failure.

Top 10 Private BTech Colleges in Hyderabad 2026: NIRF Rankings, Cutoffs, Fees & Placements

Top Private BTech Colleges in Hyderabad: Hyderabad has the distinction of being a leading national centre in IT, software, and research with renowned deemed universities in addition to the best autonomous private engineering colleges. The choice of the right B.Tech program in this highly competitive environment needs to take into account three key metrics: percentiles in the entrance examination cutoffs of TG EAPCET, BITSAT, and JEE Main; four-year tuition models with options to specialize in various areas; and campus recruitment numbers that include median salary packages and key companies hiring students. Leading private engineering institutions such as BITS Pilani Hyderabad Campus, IIIT Hyderabad, Chaitanya Bharathi Institute of Technology (CBIT), VNR Vignana Jyothi Institute of Engineering and Technology (VNR VJIET), and Vasavi College of Engineering have shown strong industry integration through curriculum innovation in Artificial Intelligence, Machine Learning, Data Science, and Cloud Systems. This report includes three datasets with details of admissions criteria, courses offered, and placement numbers of the top ten private engineering colleges in Hyderabad. Moreover, the report includes necessary definitions of Category-A convener seats vs. Category-B management seats, analysis of the ROI of education, and counsel advice to choose the right engineering college.

Cloudflare Blocks 18.2 Million DDoS Attacks in Q3 2026 as Short-Burst Attacks Surge 208%

Cloudflare mitigated 18.2 million network-layer distributed denial-of-service attacks in Q3 2026, a 208% increase over the same period in 2025. Cloudflare Blocks 18.2 Million DDoS Attacks The company also blocked 14.4 trillion HTTP DDoS requests between July and September. Network-layer attacks averaged approximately 8,226 per hour, demonstrating the sustained operational pressure facing defenders. According to the supplied report, 96% of network-layer attacks ended within ten minutes, while 98% remained below one gigabit per second. Connectionless Lightweight Directory Access Protocol attacks declined 99.5% quarter over quarter, accounting for just 0.05% of network-layer attacks.

Smart TVs Lead Vulnerability Count As Average Home Hits 24 Connected Devices

The report draws on 5.4 billion security events and 6.2 billion vulnerability observations collected from January through September 2026 across routers protected by Bitdefender’s smart-home security technology. They generated 270.3 million vulnerability observations across the reporting period – the largest count of any device category. The television’s second job Beyond conventional vulnerabilities, the report highlights a growing concern around proxy software bundled into smart TV apps. The U.S. Department of Justice dismantled four IoT botnets during the reporting period, including operations that had compromised more than a million devices. Network-attached storage devices rounded out the top three at 22 per cent of observations, with 261.6 million records.

One-minute frequency disturbances from unintended synchronization in cyber–physical power systems

However, resonance phenomena in classical control systems differ fundamentally from cyber–physical synchronization effects. In this Article, we identify and explain a coherent 1-min oscillation in power systems worldwide caused by cyber–physical synchronization effects. Maintaining the nominal frequency of 50 Hz or 60 Hz therefore requires continuous balancing by load–frequency control systems20. The observed 1-min signal is already substantial in several power systems, although it has not reached a safety critical level. Here, we highlight a more subtle systemic challenge arising from the cyber–physical coupling of modern power systems.

Hackers are now using AI agents to Automate Cyberattacks – Report

Hackers are increasingly using autonomous AI tools to run multi-stage cybercriminal activities at a scale and speed that researchers admit bypass traditional human limitations, according to a new report by the Communications Authority of Kenya (CA), which warns that AI agents are now automating cyberattacks, operating around the clock, and targeting organizations faster than ever. “Artificial Intelligence (AI) continued to influence the cyber threat landscape during the quarter, with bad actors increasingly using AI to support phishing, social engineering, credential harvesting, and other cybercrime activities,” reads in part the multi-agency report, sampled between July and September 2026. It attributed the attacks largely to inadequate system patching, insufficient user awareness of phishing and other social engineering attacks, as well as the increasing exploitation of AI technologies by malicious actors to execute more sophisticated cyberattacks. “System attacks, on the other hand, were largely attributed to credential-stealing malware, weak access controls, information leakage, continued use of outdated and vulnerable operating systems, and user interaction with malicious links, among other attack techniques,” it adds. He has previously worked with the Standard Media Group, Mediamax Networks LTD, bird story agency, Business Journal Africa, and Financial Post among other outlets.

Jio cuts net debt 79% to ₹8,822 crore: What it means for its next growth phase

Jio Platforms has significantly strengthened its balance sheet, reducing its net debt by nearly 79% year-on-year to ₹8,822 crore in the second quarter of FY27. EBITDA less cash capex stood at ₹15,449 crore in Q2 FY27, increasing 52.5% from ₹10,129 crore in Q2 FY26. Advertisement The reduction in net debt and successful IPO mark an improvement in Jio's financial capacity. Jio Platforms has significantly strengthened its balance sheet, reducing its net debt by nearly 79% year-on-year to ₹8,822 crore in the second quarter of FY27. Advertisement The reduction in net debt and successful IPO mark an improvement in Jio's financial capacity.

Cloudflare reports surge in smaller, shorter DDoS attacks

Cloudflare has published its DDoS Threat Report for the third quarter of 2026, showing a rise in smaller, shorter attacks. Cloudflare linked this pattern to DDoS-for-hire services that rely on volume and repetition rather than very large single attacks. DNS amplification rose 215% to 3.43% of all network-layer attacks, while other UDP floods increased from 14.06% to 31.31%. Cloudflare said the shorter, mid-range attacks were aimed mainly at the Computer Software, Gambling & Casinos, and Information Technology sectors. "As this quarter's distributions make clear, most attacks end long before a human analyst could see the alert, and the largest attacks still regularly exceed 1 Tbps at a cadence measured in hundreds per quarter," Cloudflare said.

New Feature Selection Method Trims Intrusion Detection Models for Industrial Edge Devices

Feature selection methods such as Recursive Feature Elimination, or RFE, are a standard answer to the dimensionality problem. D-FOCUS-X addresses this with what the authors call Feature-Interaction-Aware Recursive Feature Elimination. The authors state that this mechanism has no direct equivalent in existing SHAP-based, RFE-based or filter-based feature selection methods applied to intrusion detection. Subject of Research: Feature-interaction-aware recursive feature elimination for intrusion detection in industrial IoT systems Article Title: Cluster preserving recursive feature elimination framework for intrusion detection in smart industry systems Article References: Rather, I. H., Dohare, U., Kumar, S., Khasawneh, A. M., & Kaiwartya, O. Cluster preserving recursive feature elimination framework for intrusion detection in smart industry systems.

Direct-to-device connectivity and satellite IoT to drive India's space growth: Gautam Sharma

The initiative gives students an opportunity to be curious, innovative and explore the possibilities offered by space technology. My personal belief is that this initiative will contribute to the development of India's space ecosystem. For example, installing satellite connectivity equipment in existing aircraft through retrofitting takes time. What is the current status of this engagement, and how could it contribute to India's indigenous semiconductor and satellite communications capabilities? Some participants may eventually become entrepreneurs, while others may pursue careers in the satellite communications industry.

Smart TVs lead cybersecurity vulnerability risks in Bitdefender and NETGEAR IoT report

Bitdefender, a global cybersecurity leader, has released joint research with NETGEAR titled the 2026 IoT Security Landscape Report, an in-depth look at how threats to connected homes are evolving. The 2026 IoT Security Landscape Report draws on telemetry from roughly 10.4 million smart homes globally, collected from January through September 2026. Smart TVs, where all four roles converge, led all categories with 270.3 million vulnerability observations, demonstrating how an ordinary product can create risks beyond itself. The average household now has 24 connected devices, up from 22 last year, while reconnaissance accounted for 90.1% of detected attack activity. Smart TVs (22.7%), smart plugs (22.4%) and network-attached storage (22%) account for 67.1% of vulnerability observations.

Spying TVs are just the tip of the iceberg, new research claims

Recently, concerns over data collection practices came to a head following a Gamers Nexus report on LG’s TVs. Smart plugs (22.40 per cent) and NAS servers (22 per cent) were also major sources of cybersecurity concerns. A combination of not regularly downloading security updates and using technology beyond its supported lifespan leaves the door open for cyberattacks. According to the report, people typically replace TVs, smart plugs, and NAS devices on a five- to ten-year cycle, but software support usually ends after four years. Most smart TVs also support voice commands via a built-in microphone, whether located in the remote or the panel.

AI CEOs Asked to Report Autonomous Hacking Incidents to Lawmakers Within 48 Hours (Oct 28, 2026)

By Tom Leithauser The top Democrats on three House committees have asked leading AI (artificial intelligence) developers to tell lawmakers within 48 hours about incidents involving autonomous hacking and other misbehavior by AI models. “The intense global competition between AI companies has led to innovation in AI systems far outpacing the maturity of standards and controls to mitigate AI risks,” they noted. They set a Nov. 11 deadline for the CEOs to provide information about incidents of AI “misalignment,” a term that refers to AI models engaging in self-directed hacking or other unauthorized activity. But they asked that incidents be reported on a “rolling basis” past Nov. 11, and encouraged the CEOs to tell them about significant events within 48 hours. If those events involve autonomous AI hacking of critical infrastructure, they said they wanted to know “as soon as possible and no later than within 24 hours of discovery.”

Volt Typhoon targeted enterprise control planes via ever-changing "Silent Train" relay network

How Silent Train works Volt Typhoon began building the Silent Train network before the December 2023 takedown of the KV botnet, and ramped up its use in its aftermath. While Volt Typhoon uses other infrastructure for reconnaissance, Silent Train was reserved for “exploitation, credential access, data exfiltration and ongoing engagement with victim environments,” researchers found. “In some cases, as many as six hops separated the operator from the victim,” Black Lotus Labs noted. Example of a Silent Train session (Source: Black Lotus Labs) “As Silent Train matured, reverse-tunnel variants were introduced alongside the traditional SSH-chaining model. Victimology Over the past three years, Black Lotus Labs’ monitoring of Silent Train has led to hundreds of victim notifications.

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. Silent Train session chains through multiple non-U.S. and U.S. hops The latest findings from Black Lotus Labs show that the security flaw was one among four confirmed zero-day campaigns the threat actor has conducted through Silent Train. "This model has enabled Volt Typhoon to conduct exploitation and post-exploitation operations with exceptional operational security while minimizing opportunities for detection, attribution, and disruption." Silent Train sessions lasted about four hours on average, with some lasting only minutes." Another notable aspect is the designation of certain device types to specific positions within Silent Train.

A security flaw in these widely used barcode scanners could open up warehouses and stores to cyberattack

Kaspersky researchers set out to see if there are any hidden attack vectors on warehouse infrastructure and are now claiming they found one through a barcode scanner model “from a major manufacturer”. So, in theory, a malicious actor could obtain the Bluetooth address of the base station through passive eavesdropping on Bluetooth traffic. Through this method, a theoretical attacker could gain an initial foothold on a computer within the warehouse network. The researchers are saying the risk is quite large, since these devices are “widely used” in warehousing, retail, and multiple other sectors. Barcode scanners and related handheld terminals are also widely used in retail stores, manufacturing facilities, hospitals, pharmaceutical operations, and transportation networks.

FCC Commissioner Trusty to Lead Cyber Trust Mark Launch

Federal Communications Commission Chairman Brendan Carr has chosen Commissioner Olivia Trusty to lead the FCC’s rollout and implementation of the U.S. Cyber Trust Mark program. Working with the Public Safety and Homeland Security Bureau, Trusty will coordinate efforts as the voluntary cybersecurity labeling initiative moves toward commercial deployment, according to an FCC release. “This effort will advance our nation’s security and provide consumers with greater confidence when they bring connected products and devices into their homes,” Carr said. The U.S. Cyber Trust Mark labeling program excludes several equipment categories: Medical devices regulated by the Food and Drug Administration. In the coming months, the commission expects to release a public notice on the program’s technical requirements and testing procedures.

Researchers uncover Volt Typhoon’s covert, ephemeral network

“Individual chains are assembled and dismantled every day, with infrastructure continually refreshed,” Michael Horka, principal information security engineer at Black Lotus Labs, told CyberScoop. “The ephemeral nature of the framework means our observations should not be interpreted as a complete census of Volt Typhoon activity,” said Horka, who also was the lead researcher on the report. The nation-state group’s investment in operational security and preserving access is remarkable, according to Black Lotus Labs. Volt Typhoon relied more heavily on Silent Train after the FBI and Justice Department disrupted the KV Botnet in early 2024, researchers said. Black Lotus Labs also observed confirmed zero-day campaigns targeting Versa Director, N-Able N-Central, Cisco Catalyst SD-WAN and VeloCloud Orchestrator.

The Rise of the AI Worm: Anthropic Warns of Autonomous Malware Threatening the Internet of Things

In a stark new warning, AI research giant Anthropic has revealed that small, highly optimized AI models could be only months away from behaving like autonomous computer worms. The Mechanics of an Autonomous Threat Historically, computer worms have relied on pre-programmed scripts to exploit vulnerabilities and spread across networks. They estimate that an early-generation AI worm would likely be slow to propagate, taking days to successfully copy and adapt itself to a new host. The Regulatory Crucible and the "Capture" Debate The specter of autonomous AI threats has reignited a fierce global debate over how to regulate the technology. While the "AI worm" may currently resemble a slow-moving swarm of digital fruit flies, the trajectory of technological advancement suggests it will only grow faster and more resilient.