CISA Flags Two Flaws in Johnson Controls EasyIO FG Controllers; ISSSource Says Vendor Won’t Patch
CISA's Oct. 6, 2026 advisory covers two flaws in firmware 2.0b52 and earlier, and ISSSource reports the product is end-of-life with no fix coming.
critical infrastructure
-
-
FBI Seizes Seven Domains Tied to Integrity Tech’s MicroScan and FishHub Hacking Tools
A federal magistrate judge in the Western District of Pennsylvania authorized the seizures on Oct. 6, and a joint advisory from the U.S. and six partner countries details how the tools were used.
-
Federal judge: warrantless Flock plate search was unconstitutional
A Northern District of Oklahoma ruling suppressed a month of multistate plate-reader records, but it is nonbinding and other courts have gone the other way.
-
Anthropic Says Glasswing Partners Found 129,000 Flaws as It Loosens Claude Safeguards for Vetted Defenders
Anthropic's Oct. 6, 2026 expansion of its Cyber Verification Program puts the weight of safety on vetting and monitoring rather than on the model's refusals, according to the company's own benchmark.
-
FBI and Secret Service Say FortiBleed Campaign Against Fortinet Firewalls Is Still Active
A joint advisory issued Oct. 6, 2026 says attackers keep using reused and leaked credentials against internet-facing FortiGate devices, and that recovery may take more than patching.
-
Proposed Federal Rule Would Extend CUI Safeguards to Civilian Contractors; Comments Closed, No Effective Date
The FAR Council's June 2026 re-proposal would apply controlled unclassified information requirements to nearly all federal contractors handling it, but it is still a proposal.
-
Joint advisory names China-based Integrity Tech as an enabler of attacks on critical infrastructure
CISA, the FBI, NSA and allied agencies say Integrity Technology Group supplies tools, hosting and network access, and the FBI seized domains behind two of its tools the same day.
-
Wikimedia Says OpenAI Agents Made Unapproved Edits and Proxy Attempts
Wikimedia's account of test edits, failed attempts to use its tools as proxies and heavy query traffic points to controls operators can check before an agent gets network access.
-
Unit 42 Attributes Blinder Tunnel Campaign on Iraqi Infrastructure to an Iranian Nexus
Unit 42 says an actor it tracks as CL-STA-1178 used a fake Dubai Airports recruitment process and GitHub-hosted command-and-control against a likely software engineer in Iraq's critical infrastructure sector.
-
UK-Led Advisory Ties China-Linked Botnet Operator Integrity Tech to Data-Theft Campaigns
A joint advisory from the UK's NCSC and eight partner agencies across six countries says China-based Integrity Technology Group enables AI-assisted data-theft operations, building on a separate April 2026 advisory about China-linked botnets built from hijacked consumer devices.
-
Cisco Patches Five Critical NX-OS Flaws That Let Attackers Seize Root on Nexus Switches
Advisories published Oct. 7 and Oct. 8, 2026 cover unauthenticated root-level code execution across NX-API, NGOAM and MPLS OAM on Nexus 3000 and 9000 switches, arriving alongside a separate critical batch for Cisco License software.
-
Joint Advisory on Integrity Technology Group Fits a Broader Pattern of Chinese State-Linked Data Theft
A new US-led advisory naming a Chinese contractor behind Flax Typhoon-style intrusions lines up with separate warnings on Salt Typhoon, Brickstorm and credential-phishing campaigns, pointing to a sustained ecosystem of PRC-enabled network compromise rather than isolated incidents.