No-frills tech news

Why we need continuous cyber training as AI gathers strength

[SC Media Perspectives columns are written by a trusted community of SC Media cybersecurity subject matter experts.Read more Perspectives here.] AI reshapes cybersecurity skills requirements The workforce study highlights how rapidly cybersecurity skills needs are changing as AI adoption becomes table stakes. AI makes continuous learning essential The same principle applies to experienced professionals, particularly as AI reshapes skills requirements. Hiring managers should define role-specific AI skills, make time to practice them, and update training as tools and the threat landscape transforms. Casey Marks, chief operating officer, ISC2 SC Media Perspectives columns are written by a trusted community of SC Media cybersecurity subject matter experts.

Security controls will fail eventually. How do MSPs recover quickly?

MSPs have spent years building security practices around monitoring, detection and response. Absolute Security’s 2026 Resilience Risk Index found endpoint security software failed to protect devices nearly 21% of the time, potentially leaving enterprise PCs exposed for the equivalent of 76 days annually. That underscores the importance of cyber resilience: combining protection and detection with observability, recovery and business continuity. Instead of simply asking whether an attack can be detected, MSPs need to know whether critical security controls are functioning, how quickly endpoints can recover and whether customers can continue operating when something fails. Join Brendan Maas, senior sales executive at BCS365, and Gene Kim, vice president of managed service providers at Absolute Security, for an on-demand webinar about what that shift means for MSPs.

OTCC urges CISA to implement mandatory OT cybersecurity requirements for federal agencies

The Operational Technology Cybersecurity Coalition (OTCC) is calling on the US Cybersecurity and Infrastructure Security Agency (CISA) to establish mandatory security requirements for operational technology (OT) across all federal civilian agencies. In a report released on October 6, the coalition emphasized the need for a binding operational directive (BOD) due to the current lack of minimum security practices and CISA's limited visibility into OT-related risks, according to a recent report by Infosecurity Magazine. The OTCC's proposal stems from a Government Accountability Office (GAO) report indicating that many federal agencies are failing to meet existing requirements for inventorying networked OT and IoT devices. The coalition advocates for a directive that would mandate senior official responsibility for OT security, integrate OT risk into enterprise risk management, and establish baselines for asset inventory, network segmentation, remote access, configuration management, incident preparedness, and verified recovery. The directive aims to complement existing resilience initiatives by setting pre-incident baselines to prevent cyberattacks from causing physical consequences, influencing best practices beyond federal agencies.

Sensorise launches next-generation GSM Module for India’s trusted IoT ecosystem

Sensorise, a leading provider of M2M eSIM and IoT connectivity solutions, on Thursday announced its next-generation GSM Module Wega M1 –(IN Sanskrit : The Seamless [Internet] flow); that they want to enable for India IOT/M2M Ecosystem, designed and manufactured in India for secure, reliable and scalable IoT connectivity. With recent security incidents in the country related to modules with regards to Data Sovereignty and Cyber Security, Sensorise product is imperative for the India market. The future of IOT/M2M will be plug and play Make in India components for the growing IOT/M2M 1bn devices vision of the government ” said Karn Nagpal, President, Sensorise. The Minister said he was pleased to note that we have a made in India module which is the bridge (SETU) between the device and the telecom networks. Sensorise Smart Solutions, a register M2M Service Provider with DOT enables secure, scalable and intelligent M2M eSIM and IoT connectivity across utilities, mobility, retail, logistics and industrial IoT.

Sensorise launches next-generation GSM Module for India’s trusted IoT ecosystem

New Delhi [India], October 8 (ANI): Sensorise, a leading provider of M2M eSIM and IoT connectivity solutions, on Thursday announced its next-generation GSM Module Wega M1 –(IN Sanskrit : The Seamless [Internet] flow); that they want to enable for India IOT/M2M Ecosystem, designed and manufactured in India for secure, reliable and scalable IoT connectivity. With recent security incidents in the country related to modules with regards to Data Sovereignty and Cyber Security, Sensorise product is imperative for the India market. The future of IOT/M2M will be plug and play Make in India components for the growing IOT/M2M 1bn devices vision of the government ” said Karn Nagpal, President, Sensorise. The Minister said he was pleased to note that we have a made in India module which is the bridge (SETU) between the device and the telecom networks. Sensorise Smart Solutions, a register M2M Service Provider with DOT enables secure, scalable and intelligent M2M eSIM and IoT connectivity across utilities, mobility, retail, logistics and industrial IoT.

Top 10 Computer Science Fields in Pakistan

Artificial Intelligence (AI) and Machine Learning (ML) Artificial Intelligence (AI) and Machine Learning are undoubtedly among the best computer science fields in Pakistan. Data Science and Big Data Analytics Data is the new oil, and data science is among the best computer science fields in Pakistan. This makes it one of the best computer science fields in Pakistan for those interested in hardware-software integration. Other than Top 10 Computer Science Fields in Pakistan, you can also explore Best Jobs After Computer Science Degree Thus, the tech industry in Pakistan is booming, and the career opportunities are expanding rapidly. The highest-paying computer science fields in Pakistan include Artificial Intelligence (AI), Cybersecurity, Data Science, and Cloud Computing.

Google Opens SynthID Detector Globally to Identify AI-Generated Media

Google has opened SynthID Detector to the public worldwide in English, expanding a verification tool previously introduced for media professionals. Checking AI-generated media The standalone service checks images, video and audio for SynthID watermarks. Google says it supports media produced by its AI tools and participating partners, including OpenAI, NVIDIA and Kakao, with Apple support planned. Google says its watermarking technology has covered more than 180 billion images and videos and 240,000 years of audio. The public detector complements verification features already available in Search, Gemini and Chrome.

AI Cybersecurity Market worth $95.25 billion by 2031 - Report by MarketsandMarkets™

DELRAY BEACH, Fla., Oct. 7, 2026 /PRNewswire/ -- According to MarketsandMarkets™, the AI Cybersecurity Market is projected to grow from USD 31.25 billion in 2026 to USD 95.25 billion by 2031 at a CAGR of 25.0% during the forecast period. Browse 500 market data Tables and 50 Figures spread through 400 Pages and in-depth TOC on "AI Cybersecurity Market – Global Forecast to 2031" AI Cybersecurity Market Size & Forecast: Market Size Available for Years: 2022–2031 2025 Market Size: USD 22.07 billion 2026 Market Size: USD 31.25 billion 2031 Projected Market Size: USD 95.25 billion CAGR (2026–2031): 25.0% AI Cybersecurity Market Trends & Insights: Agentic security operations are driving demand for AI cybersecurity as organizations adopt autonomous systems capable of performing alert analysis, threat investigation, and response. North America accounted for the highest share, at 41.7%, of the AI Cybersecurity Market in 2026. AI Cybersecurity Market - Investment & funding +Merger & Acquisition Investment Funding Context The AI Cybersecurity Market is attracting substantial investment as vendors expand AI-powered threat detection, security operations, autonomous investigation, and automated response capabilities. Revenue Shift Context The AI Cybersecurity Market is shifting from standalone AI-assisted tools toward integrated platforms embedding AI across threat detection, security analytics, investigation, threat intelligence, and automated response.

Legacy building systems leave organizations open to cyber attacks — and their costs: Honeywell

These systems include field devices and controllers, safety systems, HVAC and chillers, switchgears, elevators and fire panels, physical security systems, building management systems and connected IoT devices. “OT security maturity is ultimately measured by whether organizations understand their attack surface, limit incident impact and restore operations quickly.” Many building systems are vulnerable due to equipment operating under legacy BACnet standards. Patches for vulnerabilities are slow to be implemented at many organizations because of the systems’ crucial role in building operations. “A complete, continuously updated inventory is the starting point,” the Honeywell report says.

Omidia conducts research on IoT deployments

New research by Omdia highlights how, a majority of businesses are prioritising edge computing in IoT deployments. Principal analyst for IoT John Canali said enterprises’ focus on edge computing is being fuelled by growing interest in using AI and machine learning in their IoT deployments. The research highlighted significant progress, with 78% stating edge IoT deployments had moved beyond pilots. Omdia noted overwhelming satisfaction with edge IoT deployments, with 87% reporting it met or exceeded their expectations. Lack of budget was chosen by 21%, leading Omdia to conclude technical challenges are a greater obstacle to edge IoT deployments than monetary matters.

Top 10 IoT Development Companies in the United States (2026)

That is why the choice of an IoT development partner matters more today than it did five years ago. North America keeps the largest chunk of that revenue, with the United States alone holding around 23 percent of global IoT software and services spend, per ABI Research. The Top 10 IoT Development Companies in the United States I built the list below from public company data, review platforms like Clutch and GoodFirms, and my own conversations with founders who have shipped connected products. The team focuses on IoT firmware and hardware, IoT mobile apps, smart home and smart building platforms, and full-cycle product engineering. Two documents you should know are NIST Special Publication 800-213 (IoT Product Cybersecurity Guidelines for the Federal Government) and NIST Internal Report 8259 (Foundational Cybersecurity Activities for IoT Product Manufacturers), both revised in 2026.

Automated cloud-edge cyber-physical IoT infrastructure for optimizing the agricultural water-energy nexus and yield

Similar biological dependencies between environmental conditions and early crop development have been reported in IoT-based agricultural monitoring frameworks15. The cloud-based telemetry framework enabled continuous multi-variable monitoring and supported the evaluation of the observed environmental conditions relative to the stage-specific reference requirements. The integrated GI increased to 95.04%, indicating closer overall agreement between the observed environmental conditions and the stage-specific reference conditions during the reproductive phase. {\text{572336B}} - 0.00{158}0{\text{M}}^{{2}} - 0.0{3}0{5}0{\text{B}}^{{2}} + 0.00{\text{2526MB}} $$ $$ {\text{NIR}} = {2158}. The present study also did not include a parallel economic evaluation of manual, timer-based, or alternative IoT systems under the same experimental conditions.

Critical Healthcare Systems Aren't Quantum-Ready

The situation is particularly acute for Internet-exposed healthcare systems, many of which lack support for TLS 1.3, the foundation for deploying standardized post-quantum cryptography. Examples of OT/IoT assets in healthcare delivery organizations include VoIP phones, printers, point-of-sale systems, kiosks and physical-security equipment. Forescout also identified more than 5,500 healthcare systems containing electronic medical records and medical imaging data that were reachable from the public Internet. "The main takeaway is that healthcare organizations should start preparing now, before large-scale quantum attacks become practical," warns Daniel Trivellato, Forescout's vice president of OT, healthcare, and cyber-risk solutions. The fact that 50% IT systems in Forescout's survey were PQC-ready yet only 31% of Internet-exposed healthcare systems supported TLS 1.3 is also noteworthy.

Cybersecurity Starts in the Specification

In my role at Cochrane Supply & Engineering, my focus includes helping the design community understand building IoT, integration, and OT cybersecurity. One of the most useful tools that an engineer can provide in clarifying the overall architecture is a systems integration drawing. The drawing should show the connected systems, integration platform, OT network, enterprise connections, cloud applications, and remote access paths. NEEVE is an example of a platform that supports Zero Trust remote access, role-based permissions, and auditing. Develop the systems integration drawing, put clear requirements in the specifications, and establish how the completed system will be verified.

State of Global Critical Infrastructure Cybersecurity 2026: 95% of Leaders Concerned About Frontier AI-Powered Attacks

To find out, Palo Alto Networks surveyed more than 1,600 critical infrastructure security leaders across 11 countries and five critical sectors for the new 2026 State of Critical Infrastructure Cybersecurity Report. Today's defenses are already under pressure Incomplete visibility: OT visibility remains a fundamental challenge. And leaders are bracing for AI-powered attacks 95% of leaders cited concerns about Frontier AI-powered attacks on critical infrastructure. What Critical Infrastructure Leaders Should Prioritize Now Closing that gap doesn’t start with replacing every legacy system or piece of equipment. 91% expect AI-driven cybersecurity to play a role in defending against exploits accelerated by Frontier AI models.

Cling botnet uses STUN traffic to conceal command-and-control activity and attacks against vulnerable IoT devices

Nozomi Networks Labs has identified a botnet dubbed Cling that exploits internet-exposed IoT and networking devices and disguises its command-and-control traffic as legitimate STUN activity. Cling’s command-and-control design uses STUN-like exchanges to register infected devices and deliver operator commands, allowing the traffic to resemble normal NAT-traversal activity commonly generated by collaboration tools, browsers and real-time communications applications. This visibility helps us track exploitation trends and identify cases where routine-looking activity leads to more interesting malware behavior,” Nozomi researchers detailed in a post last week. During that time, the operator repeatedly tasked infected devices with spreading across the internet by scanning for and attacking vulnerable systems. In conclusion, the Nozomi researchers identified that Cling shows how commodity IoT botnets are evolving beyond familiar Mirai-like patterns.

ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure

Fortinet details ClingSTUN, a Linux backdoor exploiting unpatched IoT devices and abusing public STUN servers to route traffic past NAT. FortiGuard Labs researchers spotted a Linux malware family they call ClingSTUN, and the name gives away its trick immediately. It abuses public STUN (Session Traversal Utilities for NAT) infrastructure to discover externally mapped IP addresses and ports, maintain NAT bindings, and improve connectivity between compromised hosts and remote operators.” “Because many of the STUN servers it contacts are legitimate public services, the resulting traffic easily blends with normal VoIP and WebRTC communications.” The malware sends standard requests to public STUN servers to find out its external IP address and port.

New Linux malware turns vulnerable IoT devices into proxy nodes

A new Linux backdoor is turning vulnerable internet-facing devices into remotely controlled proxy nodes, while using the public Session Traversal Utilities for NAT (STUN) infrastructure to blend into normal VoIP and WebRTC traffic. Fortinet’s FortiGuard Labs said it has been tracking the malware, dubbed ClingSTUN, across multiple attacks exploiting known vulnerabilities in routers, IoT devices, DVRs and other network-connected hardware. Fortinet described it as a “back-connect proxy backdoor” capable of maintaining persistence, executing remote commands and propagating itself to other vulnerable devices. The malware uses legitimate STUN traffic STUN is normally used to help applications discover their public-facing IP address and port and establish connectivity through Network Address Translation (NAT). The network security company said the malware contains exploits for seven vulnerabilities that can be used to spread to additional devices.

SEALSQ Leads $10 Million PIPE Investment in WISeSat.Space

Insider Brief SEALSQ led a $10 million PIPE investment in WISeSat.Space that closed on October 1, 2026, alongside WISeSat.Space’s business combination. The investment provides WISeSat.Space with equity capital for planned satellite infrastructure expansion and integration of post-quantum security technologies across its space, ground and user segments. PRESS RELEASE — SEALSQ Corp (NASDAQ: LAES) (“SEALSQ” or “Company”), a company that focuses on developing and selling Semiconductors, PKI, and Post-Quantum technology hardware and software products, today announced that it led a $10 million private investment in public equity (PIPE) in WISeSat.Space Holdings Corp. (Nasdaq: SAIQ) (“WISeSat.Space”), a space technology company. WISeSat.Space is engaged in the development of a new generation of WISeSat.Space satellites, intended to support trusted communications, digital identity, and data exchange through space-based infrastructure. For WISeSat.Space, it provides capital to advance our next generation of satellites and to build post-quantum security into our space, ground and user segments.