“As enterprises get better at protecting their digital infrastructure, cybercriminals are turning to connected home devices,” the report said, describing home IoT devices as “an ideal foothold,” because they are “always on, reliable, and rarely monitored.”
Dive Insight: The Bitdefender/Netgear report contains a wide range of data about exposed IoT devices, the vulnerabilities they carry, and the attacks they experience.
Virtually all of the IoT exposures that Netgear and Bitdefender found involved known vulnerabilities with available patches.
Three high-severity Linux flaws topped the list of firmware CVEs affecting IoT devices, according to the research.
As businesses survey the IoT cybersecurity landscape, the report’s predictions offer guidance for how to prioritize asset inventorying and continuous monitoring.
Oct 28, 2026 · via cybersecuritydive.com
The Terraform product can recreate the compromised declared configuration; Cohesity Data Cloud then restores the latest usable application data from backup.
Cloud rebuild is part of Cohesity Data Cloud Enterprise Edition.
Cohesity cloud rebuild takes a different approach.
Terraform uses the organization's reviewed and approved code to recreate the declared configuration, and Cohesity Data Cloud restores the latest usable backed-up application data.
Cohesity Data Cloud + Terraform Self-Managed: How it works Here’s what happens from protection through recovery: Map the application.
Oct 28, 2026 · via smestreet.in
A critical flaw in the GoAhead embedded web server lets revoked client certificates pass authentication checks, potentially restoring access to identities administrators have blocked.
GoAhead Web Server Flaw GoAhead provides web management interfaces for routers, printers, gateways, and industrial equipment.
GBHackers previously covered GoAhead server vulnerabilities affecting IoT devices, highlighting the wider importance of embedded web server security.
An attacker still needs a previously trusted, revoked client certificate and its matching private key.
Temporary options include disabling finite-field DHE suites for Mbed TLS builds and enabling issuer verification with a trusted CA bundle for affected LibreSSL builds.
Oct 28, 2026 · via gbhackers.com
The Federal Communications Commission seeks comment on certain U.S. Cyber Trust Mark recommendations for the design of the FCC Internet of Things Label, IoT product registry information, certification renewal processes, and procedures for post-market surveillance of authorized products.
The FCC also seeks comment on other related information and processes necessary to stand up the program, including procedures to address complaints, non-complying products, and for administrators that withdraw from the USCTM Program or whose authority is terminated.
Where commenters suggest that we should modify the recommendations when adopting final rules, the FCC requests that they provide specific alternatives and explain the basis for the recommendation, including supporting information, such as benefit and cost estimates.
Oct 27, 2026 · via benton.org
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups.
In FoxIO's test against GoAhead 6.1.0 with OpenSSL 3.6.2, a revoked certificate was accepted with issuer checking switched on.
The OpenSSL advisory describes revoked client certificates as silently accepted.
Builds that use the Mbed TLS backend are unaffected; that backend checks revocation via a separate code path.
TLS build What goes wrong Affected versions Fix or interim option OpenSSL (default) Revocation list loaded but never enforced; revoked client certificates accepted.
Oct 27, 2026 · via thehackernews.com
By: Van Soul Addey The President of Benin’s Personal Data Protection Authority (APDP), Luciano Hounkponou, has urged enhanced cooperation between regulatory authorities, regional harmonisation of standards and stronger protection of sensitive data to address cybersecurity risks in Africa’s expanding digital ecosystem.
Hounkponou made the call during the 15th edition of the One Africa Digital Forum, held in Cotonou, under the theme “Digital Africa in the Era of 5G: Dynamics and Transformational Impact”.
The discussions addressed challenges related to personal data protection, cybersecurity and digital innovation amid the growth of 5G and the Internet of Things (IoT).
On digital sovereignty, Hounkponou highlighted the need to control digital infrastructure and determine where sensitive data is stored.
He advocated for national data centres and reduced dependence on offshore hosting infrastructure to better prevent data leaks and industrial espionage.
Oct 27, 2026 · via techreviewafrica.com
Mitsubishi-Nozomi OT tech will strengthen industrial cybersecurity A conceptual depiction of Mitsubishi’s OT security technology for industrial equipment Mitsubishi Electric has developed a new OT (operational technology) security system for industrial equipment using OT technologies from Nozomi Networks, the US cybersecurity specialist that it bought last year.
In recent years, as digital transformation the adoption of IoT have accelerated in manufacturing and infrastructure, ensuring OT cybersecurity has become vital.
It says it is aiming to promote higher levels of cybersecurity and visibility across OT environments, contributing to safer and more secure industrial operations.
“This solution combines Nozomi’s advanced OT cybersecurity technologies with Mitsubishi Electric’s extensive expertise in OT and control technologies.
When delivered as software running on Microsoft Windows, it can be deployed across a range of OT devices, improving cyber-resilience in OT environments.
Oct 27, 2026 · via drivesncontrols.com
So it goes with data — which, unlike oil, is an ever-growing resource with increasingly complex and creative refinement requirements within the enterprise.
The fundamentals of good data management have never been more important: It is the raw material upon which the rest of the enterprise rests.
The ongoing democratization of data delivery has levied an entire new set of data management demands onto data-driven professionals.
This is where the TechTarget Data team comes in.
If data is this century's oil, think of us as the scouts in the fields who are surveying the technology.
Oct 27, 2026 · via techtarget.com
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua.
However, the findings share similarities with two clusters of activity that Hunt.io disclosed as targeting IP cameras in Ukraine and Russia.
One of the campaigns, attributed to a Russian-speaking operator, singled out internet-exposed cameras in Ukraine using known Dahua and Hikvision vulnerabilities, ultimately compromising 58 devices.
Earlier this year, Dutch intelligence agencies warned that Russian actors are compromising IP cameras across the E.U., NATO states, and Ukraine to conduct systematic digital espionage operations and acquire military intelligence.
The information from IP cameras in Ukraine is used in attempts to neutralize Ukrainian military personnel and to destroy their military material."
Oct 27, 2026 · via thehackernews.com
ServiceNow Japan, NTT Security Holdings and Crosspoint Solutions (CP-SOL) have formed a partnership to develop integrated cybersecurity services covering IT, operational technology (OT) and internet of things (IoT) devices, with plans to expand into managed security operations centre (SOC) services.
The collaboration will initially focus on vulnerability management, combining asset visibility, risk assessment and remediation to help organisations prioritise threats according to asset importance and potentia
Oct 27, 2026 · via telecompaper.com
That dependence is also making data centers more attractive targets.
AI Convergence Impacts Data Center Threat Ecosystem AI endangers data center security in two significant, converging ways: by empowering attackers and creating new, highly privileged AI-specific attack surfaces within the data center itself.
AI systems in data centers, including model gateways, orchestration layers, RAG pipelines, and workflow engines, introduce new high-value targets.
Data centers must now protect not only networks, workloads, and identities, but also AI pipelines, model access, training data integrity, and firmware trust anchors.
Without adaptive identity controls, continuous attestation, and AI-aware security architectures, data centers become more vulnerable to both automated attacks and AI infrastructure compromises.
Oct 27, 2026 · via securityinfowatch.com
The first cluster centers on cybersecurity and threat-detection applications, with keywords such as cybersecurity, threat detection, blockchain, data privacy, and cyber-physical systems.
The second cluster represents artificial intelligence and machine-learning detection methods, including phishing, malware, random forest, decision trees, feature selection, and natural language processing.
Together, the clusters show a field organized around cybersecurity applications, intelligent detection techniques, and data-driven network defense.
Human centered artificial intelligence driven cybersecurity for business resilience using bibliometric and qualitative analysis.
Discover Artificial Intelligence, 6(1), Article 1637. https://doi.org/10.1007/s44163-026-02638-6 Image Credits: AI Generated DOI: 10.1007/s44163-026-02638-6
Oct 26, 2026 · via bioengineer.org
The researchers used Shodan, a search engine for Internet of Things (IoT) devices, to identify exposed services across 10 product groups.
The figures represent service observations rather than individual refrigeration systems, as one IP address can expose multiple interfaces or represent several downstream systems.
The report warns that exposed management interfaces and software vulnerabilities can let cybercriminals manipulate refrigeration systems.
Thousands of Refrigeration Services Exposed Online Forescout identified the following internet-exposed services, grouped by product family.
“Nearly 13,000 refrigeration systems reachable from the public internet across 99 countries is the picture underneath incidents the industry has already seen this year,” Sehgal said.
Oct 26, 2026 · via hackread.com
Kaspersky recorded 37,38,051 attacks on Remote Desktop Protocol (RDP) against Indian SMBs in H1 2026, or around 20,650 attempts a day.
Suppliers are now part of the client’s security perimeter For Indian SMBs that supply larger businesses, security is becoming a condition of doing business.
“A backdoor is how an attacker stays inside a business long after the first break-in, and a 52% rise tells us Indian SMBs are increasingly being treated as long-term footholds rather than one-off targets.
KSOS is currently available with discounts of up to 15% on the Kaspersky website: https://www.kaspersky.co.in/small-business-security.
Kaspersky recommends that SMBs: Disable RDP where it is not needed, and never expose it directly to the internet; use a VPN and multi-factor authentication instead.
Oct 26, 2026 · via itvoice.in
Exito Media Concepts, a global leader in B2B technology events and innovation-driven business platforms, proudly announces the 50th Edition of the Digital Transformation Summit Thailand 2026.
The Digital Transformation Summit Thailand is designed as a high-impact platform for technology leaders to exchange practical insights, examine real-world use cases, and develop strategies for responsible and scalable digital transformation.
This forum brings together the country’s most influential technology decision-makers advancing Thailand 4.0, digital government, AI adoption, and Industry 4.0 initiatives.
A Platform Built for Real Impact The Digital Transformation Summit Thailand 2026 is part of a globally recognized series held across multiple countries, connecting enterprise technology leaders, government representatives, innovators, and solution providers on a shared platform.
Key Focus Areas at the Summit: The summit will spotlight the most critical technology priorities shaping the future of enterprise transformation, offering deep insights into innovation, resilience, and continuous growth.
Oct 26, 2026 · via itvoice.in
It covers substantive cybersecurity, critical-infrastructure and OT/ICS policy developments, excluding cyber incidents, threat activity, vulnerability announcements and generic defensive advisories.
It identifies priorities including mapping regulatory requirements to existing OT security controls, assessing supplier dependencies, documenting risk and governance decisions, and preparing for audits, incident response and operational recovery.
Japan’s Unified Standards for Cybersecurity Measures for Critical Infrastructure entered into force on Oct.1 this year, the National Cybersecurity Office (NCO) confirmed.
A revised Critical Infrastructure Cybersecurity Action Plan runs alongside, promoting incident preparedness, continuous improvement and public-private, cross-sector information sharing.
The Cyber Security Agency (CSA) issued CII Cybersecurity Code of Practice (CCoP) 2026 under the Cybersecurity Act on July 29.
Oct 26, 2026 · via industrialcyber.co
ETERS (CEO Lee Ho-joon), an IT solution company, announced that it will sign an exclusive distribution contract in Korea with Peanut AI (CEO Hwang Ji-young), an AI-based device security company.
Peanut AI is a company that integrates and protects devices, networks, and threats by installing security software directly inside devices.
The main platform 'ModOn' provides device internal security, network abnormality detection, vulnerability analysis, and external threat information analysis.
The goal is to become a standard IoT security solution in the supply chain of large manufacturers, focusing on smart factory/OT security and Secure Device OEM business in the future.
"As AI and robots are introduced deep into the industrial field, cyberattacks targeting devices are also becoming more sophisticated," said Lee Seung-joon, CTO of Peanut AI.
Oct 26, 2026 · via mk.co.kr
Viettel Manufacturing, the device manufacturing arm linked with Vietnam’s top telco Viettel, has had its full charter capital of VND1,762 billion ($67 million) reclassified from state-budget funding to “other” capital.
In a filing with the National Business Registration Portal dated October 21, Viettel Manufacturing showed that the state-budget share falling to zero, with the full amount now recorded under “other” capital.
The past information of the filing also showed that Viettel was the owner of Viettel Manufacturing.
Viettel Manufacturing was established in October 2022 by merging two companies of Viettel, M1 and M3.
It is also a supplier of materials and components for the aerospace industry, such as Meggitt Group, Boeing, and Airbus.
Oct 26, 2026 · via technode.global
Management Is Betting It Becomes The Platform.
5 5 Mitch Lawler Market Insights AI has flipped the story on cybersecurity stocks, twice Twice now, AI has rewritten what cybersecurity stocks are worth, without the businesses changing much at all.
The real skill is spotting when the narrative is about to turn again.
4 3 Oct 23, 2026 About LSE:VOD Vodafone Group Provides telecommunication services in Germany, the United Kingdom, rest of Europe, Turkey, and South Africa.
Undervalued with reasonable growth potential.
Oct 25, 2026 · via simplywall.st
The European Union’s Cyber Resilience Act (CRA), Regulation (EU) 2024/2847, introduces mandatory cybersecurity requirements for products with digital elements, including connected heating, ventilation, air conditioning and refrigeration (HVAC/R) equipment.
Mandatory vulnerability and incident reporting requirements took effect on 11 September 2026, while the main cybersecurity obligations will apply from 11 December 2027.
Since 11 September 2026, manufacturers have been required to report actively exploited vulnerabilities and severe security incidents affecting products with digital elements.
HVAC/R manufacturers supplying the EU market have until 11 December 2027 to prepare for the main requirements.
Compliance preparations include reviewing connected product portfolios, assessing cybersecurity risks and establishing procedures for vulnerability management and software updates.
Oct 25, 2026 · via refindustry.com