Malware Targets a Growing List of IoT Vulnerabilities Fortinet’s FortiGuard Labs researchers identified the malware, which they have dubbed "ClingSTUN," after tracking attacks targeting at least 24 known vulnerabilities in IoT devices.
Leveraging Legitimate STUN Servers ClingSTUN periodically sent that information back to the STUN servers.
In comments to Dark Reading, Li says ClingSTUN demonstrates how vulnerable Internet-facing Linux and IoT devices can become infrastructure for malicious proxy operations.
Therefore, indiscriminately blocking public STUN servers to address the ClingSTUN threat could disrupt legitimate services.
John Gallagher, vice president at Viakoo, says ClingSTUN is a textbook example of how operational technology (OT) and IoT devices remain the enterprise's vulnerable soft underbelly.
Oct 5, 2026 · via darkreading.com
GAO said the guidance should set a clear priority and timeline for completing device inventories, which help agencies protect connected systems from cyberattacks.
GAO published the report Wednesday as the last of three evaluations mandated by the IoT Cybersecurity Improvement Act of 2020.
Together, those memos required initial device inventories by September 2024 and set eight data categories for each connected asset, including software and firmware versions and security controls.
What Challenges Are Agencies Facing in Completing IoT and OT Inventories?
The Department of Housing and Urban Development said a new hardware asset management system identified more than 160 IoT devices its legacy system had not reported.
Oct 5, 2026 · via executivegov.com
A Linux proxy backdoor has been observed exploiting known, unpatched flaws in internet-facing IoT devices and abusing legitimate public STUN servers to keep compromised systems reachable as remotely controlled proxy nodes.
FortiGuard Labs, which dubbed the malware ClingSTUN, said in research published on October 5 that it tracked the campaign across three periods, each with a different download server.
The operators then spread the malware through command injection flaws in Linear, Realtek, TP-Link, AVTECH and D-Link devices.
STUN Traffic Blends With VoIP and WebRTC ClingSTUN works as a back-connect proxy.
Read more on IoT malware: New Mirai-Based Linux Botnet 'Evooo1Bot' Turns Victims Into Proxies Defenders Weigh Containment Against Patching Louis Eichenbaum, federal CTO at ColorTokens warned.
Oct 5, 2026 · via infosecurity-magazine.com
Insider Brief WISeSat.Space, a sister company of SEALSQ, completed its business combination with Columbus Acquisition Corp. and began trading on Nasdaq under the ticker SAIQ on October 2, 2026.
The transaction establishes WISeSat.Space as a separately listed company focused on post-quantum-secure satellite communications and IoT connectivity.
WISeSat.Space plans to combine satellite communications with digital identity, secure semiconductors and post-quantum technologies for connected devices and other applications.
Effective today, October 2, 2026, WISeSat.Space ordinary shares have commenced trading on the Nasdaq Capital Market under the ticker symbol “SAIQ.”
“The Nasdaq listing represents an extraordinary milestone for WISeSat.Space and for everyone who has contributed to this journey,” said Carlos Moreira, Chief Executive Officer of SEALSQ, WISeQey and WISeSat.Space.
Oct 5, 2026 · via thequantuminsider.com
Against existing federated intrusion detection baselines, the system outperformed by up to 5.7 percentage points in heterogeneous environments, the very settings where competing approaches tend to falter.
Federated learning systems can choke on communication costs when they require frequent exchange of large model updates among thousands of devices.
Federated AI Learns to Spot IoT Cyberattacks Without Sharing Private Data.
“Federated AI Learns to Spot IoT Cyberattacks Without Sharing Private Data.”
“Federated AI Learns to Spot IoT Cyberattacks Without Sharing Private Data.”
Oct 4, 2026 · via bioengineer.org
The Government of Keralam has officially renamed its Electronics and Information Technology Department as the Department of Information Technology, Artificial Intelligence and Future Technologies.
According to an official statement, the move reflects a significant expansion of the department's mandate beyond conventional electronics and information technology.
These major IT parks helped drive employment opportunities, technology investments, and the steady growth of the state's Information Technology and IT-enabled Services (ITES) industry.
Under a state Gazette order, the AI portfolio was placed under the Industries and Commerce department alongside Information Technology.
Senior Indian Union Muslim League (IUML) leader PK Kunhalikutty was given charge of Industries and Commerce, Information Technology, and the new Artificial Intelligence portfolio, alongside startups, mining and geology, handlooms, and textiles.
Oct 3, 2026 · via english.mathrubhumi.com
Besa Gjonbalaj is the Managing Director of Rrota, where she has progressed through leadership roles including Project Manager and Chief Operating Officer.
With experience spanning public institutions, business development, and international organizations, she has led strategic initiatives, supported organizational growth, mentored teams, and contributed to innovative digital products and national-level projects.
She holds a Master’s degree in Business Management from Masaryk University, completed in 2021.
Studying at RIT Kosovo: Studying at RIT Kosovo gave me a strong foundation in critical thinking, adaptability, and real-world problem-solving.
The values of resilience, innovation, and leadership that I developed at RIT Kosovo continue to shape my professional journey and the way I lead today.
Oct 3, 2026 · via rit.edu
Visibility — the Biggest Gap Despite growing awareness, experts consistently identified one critical weakness across Middle East organisations: visibility.
Top Security Priority As Middle East organisations accelerate digital transformation, security leaders are recalibrating their priorities.
Industry experts at GISEC Global 2026 agree that cybersecurity can no longer be viewed as a standalone IT function.
Without that visibility, security teams struggle to identify vulnerabilities, detect malicious activity, and determine where the most significant business risks reside.
Shift From Controls to Exposure Management ElOuazzani believes operational visibility will define security success over the coming year.
Oct 3, 2026 · via khaleejtimes.com
Subject of Research: Machine learning detection of black hole attacks in RPL-based Internet of Things networks Article Title: An optimized machine learning approach to mitigate black hole attacks in IoT networks Article References: Das, A., Adhikari, N., & Mohapatra, S. K. (2026).
An optimized machine learning approach to mitigate black hole attacks in IoT networks.
Tuned Decision Trees Catch Black Hole Attacks in IoT Networks With 98.71% Accuracy.
“Tuned Decision Trees Catch Black Hole Attacks in IoT Networks With 98.71% Accuracy.”
“Tuned Decision Trees Catch Black Hole Attacks in IoT Networks With 98.71% Accuracy.”
Oct 3, 2026 · via bioengineer.org
Bernstein Downgrades 3 Cybersecurity Stocks: How Concerned Should Investors Be?
Palo Alto Networks, CrowdStrike, Fortinet, SentinelOne, BlackBerry, Globant, and NetScout Systems are the seven Cybersecurity stocks to watch today, according to MarketBeat's stock screener tool.
These companies had the highest dollar trading volume of any Cybersecurity stocks within the last several days.
Palo Alto Networks (PANW) Palo Alto Networks, Inc. provides cybersecurity solutions worldwide.
2 Cybersecurity Stocks Breaking Out as AI Continues to Be a Tailwind Read Our Latest Research Report on PANW CrowdStrike (CRWD) CrowdStrike Holdings, Inc. provides cybersecurity solutions in the United States and internationally.
Oct 3, 2026 · via marketbeat.com
Loader Please wait while your request is being verified...
Oct 2, 2026 · via tahawultech.com
Of the 22 civilian Chief Financial Officers (CFO) Act agencies GAO reviewed, 15 had established inventories of networked IoT and OT devices as of September 2026.
Only seven agencies had fully met all three requirements, GAO found.
“Until OMB issues this guidance, agencies will lack appropriate direction on how and when to complete their device inventories,” GAO said.
GAO recommended that OMB issue updated cybersecurity guidance for networked IoT and OT devices and oversee agencies’ compliance with the requirements.
The report is the third and final GAO review required under the IoT Cybersecurity Improvement Act of 2020.
Oct 2, 2026 · via meritalk.com
Florence Loeve Reuters Updated On Oct 2, 2026 at 07:37 AM IST
Oct 2, 2026 · via telecom.economictimes.indiatimes.com
Symphion provides operationalized cybersecurity for printers and connected IoT endpoints through vendor-agnostic technology, managed services, and continuous cyber hygiene processes.
The Symphion Program, short for The Symphion Managed Endpoint Cybersecurity Operations Program for Printers & Connected IoT, is our answer to the risk faced by businesses across industries.
The Symphion Program When asked what The Symphion Program is, LaRoe explained: The Symphion Program is our Done-For-You program that delivers and continuously maintains cyber hygiene for these forgotten and unaddressed printer and connected IoT endpoint classes.
Why The 2026 Threat Environment Is Different When asked why 2026 represents a different cybersecurity environment for these endpoints, LaRoe said: The endpoint problem isn’t new.
Maintaining Cyber Hygiene Without Disrupting Operations When asked how Symphion continuously maintains cyber hygiene without disrupting customer operations, LaRoe explained: Avoiding disruption is built into The Symphion Program.
Oct 2, 2026 · via pulse2.com
The IoT Cybersecurity Improvement Act of 2020 includes provisions for OMB and civilian CFO Act agencies to identify and protect networked devices.
OMB established its networked device requirements in December 2023 and updated them in January 2025, setting a September 2024 deadline for agencies to complete their initial inventories.
Broader Context The audit's scope covers the 22 civilian CFO Act agencies.
GAO compared those agencies' inventory implementation efforts with OMB requirements and interviewed relevant agency officials to obtain their views and verify the information provided.
With only seven of the 22 agencies reviewed fully addressing all three OMB requirements, GAO concluded that updated guidance and oversight are needed to ensure agencies implement networked-device cybersecurity requirements.
Oct 1, 2026 · via legis1.com
That makes IoT sustainability a lifecycle issue: materials, manufacturing, connectivity, energy use, maintenance, data handling, repairability, and end-of-life recovery all matter.
Why this matters now In 2026, IoT lifecycle decisions are being shaped by both standards and regulation.
Sustainable IoT Includes the Cloud, the Data Path, and the Edge A common mistake in IoT sustainability is focusing only on device power draw.
Remote diagnostics, remote activation, remote configuration, remote profile changes, and over-the-air updates reduce technician travel, repeat visits, failed first installs, and reactive maintenance.
Where Secure Connectivity Makes Sustainable IoT Practical Secure connectivity and lifecycle tooling do not make a device sustainable on their own.
Oct 1, 2026 · via iotforall.com
SUNNYVALE, Calif., Sept. 30, 2026 (GLOBE NEWSWIRE) -- Actelis Networks, Inc. (OTCQB: ASNS) (“Actelis” or the “Company”), a market leader in cyber-hardened, rapid-deployment networking solutions for IoT and broadband applications, today announced that it will participate and present at The ThinkEquity Conference 2026, taking place on Thursday, October 15, 2026, at the Mandarin Oriental Hotel in New York, NY.
Interested investors may contact their ThinkEquity representative, submit a meeting request through the conference registration portal, or contact Actelis Investor Relations directly at [email protected] .
About Actelis Networks, Inc. Actelis Networks, Inc. (OTCQB: ASNS) is a market leader in hybrid fiber, cyber-hardened networking solutions for rapid deployment in wide-area IoT applications, including government, ITS, military, utility, rail, telecom, and campus networks.
Forward-looking Statements This press release contains certain forward-looking statements within the meaning of the safe harbor provisions of the Private Securities Litigation Reform Act of 1995.
Actual results may differ materially from those in the forward-looking statements and the trading price for our common stock may fluctuate significantly.
Oct 1, 2026 · via quiverquant.com
These devices have now become such an integral aspect of healthcare that they have their own moniker: The Internet of Medical Things (IoMT).
While the medical possibilities of this tech are great, so are the potential risks of cybersecurity threats or possibly even cyberattacks.
Recent market data indicates that the Latin American cybersecurity market was valued at $1.16b in 2024 and is projected to grow to $5.47b by 2033.
Current estimates and projections place the overall IoMT market value at over US$7.5 billion in 2024, with a projection of over US$25 billion by 2033.
[5] What’s more, concerns over cybersecurity risks in the region are active and spreading, as the survey data and market projections for healthcare cybersecurity seem to indicate.
Oct 1, 2026 · via mexicobusiness.news
Through ALSO’s pan-European network, Huntress will expand access to the Huntress Agentic Security Platform across 31 countries and strengthen the company’s growing EMEA channel ecosystem.
The partnership marks another step in Huntress’ international growth, creating more paths for European value-added resellers (VARs) and managed service providers (MSPs) to seamlessly adopt and scale the Huntress Agentic Security Platform.
Contact: Juliana Santos [email protected] About Huntress Huntress is a global cybersecurity company on a mission to make enterprise-grade products accessible to all businesses.
Purpose-built from the ground up, the Huntress Agentic Security Platform unleashes end-to-end protection in the age of AI.
Learn more atwww.huntress.com, and follow Huntress on X, Instagram, Facebook, and LinkedIn.
Oct 1, 2026 · via manilatimes.net
Bernstein Downgrades 3 Cybersecurity Stocks: How Concerned Should Investors Be?
Cybersecurity stocks are shares of publicly traded companies that develop products or services designed to protect computers, networks, data, and digital systems from cyber threats.
These companies had the highest dollar trading volume of any Cybersecurity stocks within the last several days.
Palo Alto Networks (PANW) Palo Alto Networks, Inc. provides cybersecurity solutions worldwide.
2 Cybersecurity Stocks Breaking Out as AI Continues to Be a Tailwind Read Our Latest Research Report on PANW CrowdStrike (CRWD) CrowdStrike Holdings, Inc. provides cybersecurity solutions in the United States and internationally.
Oct 1, 2026 · via marketbeat.com