India recorded a PHP2Shell impact rate of 14%, higher than the global average of 10%, as security researchers warn that artificial intelligence (AI) is accelerating the discovery and exploitation of software vulnerabilities.
According to Check Point Research, India ranked 11th among 18 countries with the highest reported impact rates following the disclosure of PHP2Shell vulnerabilities in October 2026.
Check Point said details of the PHP2Shell vulnerabilities leaked before the planned disclosure, reducing the time available for organisations to prepare.
Check Point Research reported that 14% of organisations in Europe had been affected since disclosure, compared with 6% each in Asia Pacific, North America and Latin America.
“Much of what is called AI security is still a familiar cloud security question: who holds a key, what can it reach, and when does it expire?”
Oct 25, 2026 · via ciol.com
A new study reports that changing how intrusion detection data is prepared before it reaches an AI model can lift detection accuracy by as much as 22.9 percentage points, without touching the model itself.
The researchers argue that intrusion detection systems have long suffered from a hidden flaw in their data pipelines.
First, it classifies each feature into one of six semantic groups: temporal, volumetric, behavioral, identity, protocol-specific, or statistical.
Behavioral, identity, protocol-specific, and statistical features, which are bounded or sparse, receive min-max scaling that preserves their original zero-to-one or ordinal structure.
Modality aware feature taxonomy for robust AI driven intrusion detection across heterogeneous cyber physical data.
Oct 25, 2026 · via bioengineer.org
Toby Sterling Reuters Updated On Oct 24, 2026 at 07:52 AM IST
Oct 24, 2026 · via telecom.economictimes.indiatimes.com
These small AI models have the potential to act like "AI worms" that infect household smart devices, like your smart thermostat or video doorbell, and copy themselves to other devices in the network.
Currently, AI models require connectivity to a device like a powerful laptop or data center in order to function.
If cybercriminals manage to get their hands on self-replicating AI worms in the future, a single vulnerability is all it would take for them to compromise every connected device you own.
The advent of self-replicating AI could have far-reaching implications beyond simple IoT devices.
Right now, the researchers at Anthropic believe that IoT smart home devices are at the highest risk of becoming hosts to swarms of self-replicating AI worms.
Oct 23, 2026 · via bgr.com
From that date, makers of digital products sold in the EU must report actively exploited vulnerabilities and serious security incidents affecting product safety.
Companies that fail to fix internal responsibilities and reporting channels before the first alarms arrive risk blowing deadlines and facing stiff penalties.
Three clocks, one platform Statutory reporting deadlines run from the moment of awareness.
Software makers, connected IoT device producers, industrial machinery manufacturers and networking equipment suppliers are among those covered.
The rest of the Cyber Resilience Act — including essential security requirements, CE marking and the declaration of conformity — only applies from 11 December 2027.
Oct 23, 2026 · via ad-hoc-news.de
By the Numbers King & Spalding LLP reported $180,000 for the third quarter of 2026, unchanged from the amended second-quarter 2026 filing.
King & Spalding LLP had no filing for NETGEAR in the third quarter of 2025, so no same-registrant year-over-year comparison is available.
Crossroads Strategies LLC filed a separate third-quarter 2026 report for NETGEAR at $60,000.
NETGEAR's combined spend across both registrants reached $240,000 in the third quarter of 2026.
David Stone, a partner at King & Spalding LLP, is the sole lobbyist listed on the filing; the records show no prior government service.
Oct 23, 2026 · via legis1.com
The proposal calls for significantly expanding support for small and medium enterprises, which are often the weak link in supply chains, and for creating an environment in which low-cost, easy-to-adopt security measures can be introduced.
It also includes building a system to visualize the security levels of internet-connected devices (IoT devices) so that companies can procure them with confidence.
In the meeting, Taira asked that the government "cover everything without omission and work to strengthen Japan's overall cyber capabilities."
The proposal will soon be submitted to the Prime Minister's Office, and the Japanese government is also set to consider similar measures.
For businesses providing cybersecurity-related services and equipment, expansion of demand from small and medium enterprises is now in sight.
Oct 23, 2026 · via finance.biggo.com
Anthropic's research highlights the capability of frontier AI models, particularly Claude, in automating attack surface analysis and reduction to enhance software security.
Researchers applied Claude to 25 large open-source projects, spanning over five million lines of code in languages including C, C++, Java, PHP, and Python.
The analysis focused on three methods: default configuration, configuration interaction, and early reachability.
OpenSSH case study Claude achieved a notable reduction in the attack surface of OpenSSH, a heavily audited C codebase.
This skill performs three passes on a codebase to identify issues related to default configuration, pre-authentication code, and conflicting security configurations.
Oct 23, 2026 · via techgig.com
Mitsubishi Electric Corporation (TOKYO: 6503) announced today that it has developed a new operational technology (OT) security solution for industrial equipment, leveraging the world-class OT cybersecurity technologies of Nozomi Networks, Inc., a U.S.-based company that became a wholly owned subsidiary of Mitsubishi Electric in January 2026.
The solution will enable industrial equipment manufacturers to implement stronger cybersecurity measures and end users to operate facilities and equipment more safely, securely and reliably.
As a result, addressing cyber threats originating from industrial equipment has become a significant challenge.
Mitsubishi Electric plans to deploy this solution across a wide range of its OT products and make it broadly available to industrial equipment and machinery manufacturers.
This solution combines Nozomi’s advanced OT cybersecurity technologies with Mitsubishi Electric’s extensive expertise in OT and control technologies.
Oct 23, 2026 · via webwire.com
Indore (Madhya Pradesh): IIT Indore has selected five startups working in healthcare, precision agriculture, assistive care, immersive training and defence technology for the inaugural cohort of its LAUNCHPAD Incubation & Innovation Centre at Sinhasa IT Park.
Following multiple rounds of screening, interactions, pitching and Investment Committee recommendations, five startups were selected for incubation.
The selected startups will receive structured incubation support, mentorship, industry connections and business development assistance to strengthen their technologies and prepare them for commercial deployment.
PragyanikAI Pvt Ltd: Developing AI, robotics and IoT-based precision agriculture solutions to automate spraying, seeding, weeding and irrigation.
Rages India Revolution Pvt Ltd: Developing AI-powered autonomous surveillance drones with swarm intelligence for defence, security and industrial monitoring.
Oct 23, 2026 · via freepressjournal.in
AMSTERDAM, Oct. 22, 2026 /PRNewswire/ -- Indurex, a company pioneering artificial intelligence (AI) for Cyber-Physical Systems (CPS) security, today announced it has raised €7 million to protect the safety and engineering layer of critical infrastructure, smart manufacturing and connected industrial operations.
Engineering Intelligence: The Missing Layer Traditional OT security tools were built to provide visibility into network-connected assets and activity.
Indurex closes this gap with an AI-native, interoperable platform that unifies engineering context and cybersecurity intelligence — an approach the company defines as Engineering Intelligence.
The platform correlates OT, safety, and engineering signals into one coherent view, allowing us to understand what really matters operationally," said Head of OT Operations, Global Manufacturing Organisation.
www.axeleo.com About Indurex Indurex is an AI-native, engineering-first company focused on keeping complex cyber-physical systems resilient, safe and secure.
Oct 22, 2026 · via finance.yahoo.com
ODVA’s CIP Security specification has been certified to meet IEC 62443-4-2 requirements at Security Level Capability 3, a development intended to help manufacturers strengthen industrial cybersecurity and simplify product certification.
The certification, awarded by TÜV Rheinland on 22nd October, covers CIP Security, an application-layer security extension for EtherNet/IP industrial networks.
IEC 62443-4-2 sets out technical cybersecurity requirements for components used in industrial automation and control systems.
ODVA, the organisation responsible for developing EtherNet/IP and the Common Industrial Protocol (CIP), said the certification would reduce the work required for manufacturers incorporating CIP Security into their products to pursue their own IEC 62443-4-2 certification.
CIP Security provides security functions including authentication, authorisation, data integrity and confidentiality, using technologies including Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS).
Oct 22, 2026 · via iotinsider.com
Outcomex has appointed Michael van Zoggel as Chief Executive Officer, with founder Marco Delgado moving to Founder and Chairman.
Van Zoggel succeeds Delgado after serving as Managing Director since 2020.
Alongside the Chief Executive Officer change, Sales Director Ben Blaschka has been appointed Chief Revenue Officer, while Holly Garbutt has moved from Account Executive to National Sales Manager.
Van Zoggel said the changes are designed to provide continuity while expanding the company's capacity for further growth.
The important thing now is making sure we turn that opportunity into something meaningful for our customers," said van Zoggel.
Oct 22, 2026 · via itbrief.com.au
PTI Updated On Oct 22, 2026 at 07:17 AM IST
Oct 22, 2026 · via telecom.economictimes.indiatimes.com
Safaricom is promoting a 40 Mbps business fibre package at KSh 3,499 per month, targeting small businesses that need reliable internet for digital payments, cloud applications and daily operations.
The package, advertised as an upgrade from 15 Mbps, includes built-in cybersecurity and dedicated business support available around the clock.
Safaricom raises advertised speeds for small businesses The 40 Mbps package represents an increase from the previously advertised 15 Mbps, giving customers a higher connection speed for the same business activities.
Reliable connectivity supports cloud software and digital payments The business case for fibre extends beyond browsing and sending emails.
Safaricom’s business fibre offer adds another option for companies weighing connection speed, recurring costs, security features and customer support.
Oct 22, 2026 · via techtrendske.co.ke
The Commonwealth Cyber Initiative (CCI) funded 11 statewide experiential learning projects for nearly $1.1 million dollars, placing students in mentored work or paid internships.
The projects reach students at four-year universities and community colleges, from future cybersecurity professionals and engineers to future nurses.
Preparing the Incoming Cybersecurity Workforce Through the Professional Readiness Experiential Program (PREP) George Mason University's Professional Readiness Experiential Program will place 20 Virginia students on industry-led cybersecurity projects with partners including U.S. Cyber Command, the Institute for Defense Analyses, and Maximus.
Securing AI-Driven Healthcare: Experiential Cyber Learning for Next-Gen Nursing Workforce Virginia Commonwealth University is training nursing students to spot cybersecurity and privacy risks in AI-enabled clinical tools, through a hands-on lab, a fellows program, and externships at VCU Health.
Securing the Skies: A Drone-Centric Cybersecurity and AI Experiential Learning Program
Oct 21, 2026 · via news.vt.edu
SBI is India’s largest public-sector bank, and one of the country’s biggest financial institutions.
Leaking PII 375,000 records were apparently made available on the dark web, among which were 3,897 bank customer records containing Personally Identifiable Information (PII).
So far, the bank does not know if the leak is authentic, who leaked it, or how they obtained the data.
In the meantime, an X account called CyberPulse56 flagged a dark web forum post, made on October 16 2026 by a threat actor called Siriusim.
They allegedly contained personal customer information, loan applications and supporting documents, account-opening applications, and address and other application-related details.
Oct 21, 2026 · via techradar.com
Much of Europe's critical national infrastructure (CNI) was designed before today's AI-enabled, remotely operated threat landscape emerged.
Operators of CNI face a threat landscape their existing monitoring tools weren't designed for, argues Thomas Plank, CEO of London-headquartered cybersecurity firm Tributech.
In CERT-EU's Threat Landscape Report for 2025, the organisation reported at least 174 threat actors engaged in malicious activity against the European Union ecosystem, with firewalls, VPNs, and network management solutions as primary targets.
Many CNI operators map their risks to the four levels of the IEC 62443 industrial cybersecurity standard, with level four representing a state-sponsored attacker, he said.
"If we assume a level four is a state-sponsored attacker, high budgets, a lot of resources, high expertise, this can now be done by a smaller group of people or even individuals with AI tools, and the state-sponsored attackers also now have AI tools.
Oct 21, 2026 · via datacentrenews.uk
This is why IoT proliferates around the globe, and Transforma Insights forecasts more than 38 billion IoT devices in 2033.
Businesses can get more from data with AIoT Enter AIoT.
IoT data is vast, and AI exceeds human capabilities for processing large volumes of it in short timeframes.
AI-driven analytics AIoT can handle the immense volume of IoT data, reducing the need for expensive, time-consuming and restrictive manual handling.
AIoT, through predictive maintenance, enhanced security analytics and other applications not yet thought of, stands to usher in change in the workplace.
Oct 21, 2026 · via business-reporter.co.uk
Dispel announced an integration with exposure management company Tenable Holdings that combines Tenable One OT Exposure with the Dispel Zero Trust Engine, the OT secure remote access platform.
This integration extends Tenable’s real-time OT/IoT asset intelligence directly into every Dispel remote access decision.
Most OT security programs answer to three teams with competing goals: security wants tight controls, operations wants production moving, and GRC needs to prove it all works.
“Security teams need visibility into asset risk and vulnerability exposure.
Operations teams need speed and uptime on the plant floor.
Oct 21, 2026 · via industrialcyber.co