Zero trust extends to physical security cameras and badge readers
They say continuous verification of badge readers, cameras and controllers reduces attack surfaces and meets regulations like NIS2.
Critical Infrastructure
critical infrastructure ICS OT utility water energy hospital healthcare
-
-
Attackers hijack Danfoss fridge controllers, raise temps in French supermarkets
Sources reported that the defrost manipulation heated refrigeration units to 50°C, spoiling frozen and fresh food.
-
Study finds 2.5 million healthcare devices vulnerable to quantum attacks
As of 2026, quantum computers could break widely used encryption algorithms like RSA and ECC within a few years, according to experts cited in the study.
-
Ukrainian drone strikes hit Yandex data centers across Moscow region
Yandex provides Russia's leading search engine, a wide range of digital services and major AI development, according to Ars Technica.
-
Open Journal of Social Sciences Publishes DHS-CISA Strategy Paper Countering AI-Enabled Social Engineering Threats to Critical Infrastructure
The paper states that human cognition is now a strategic attack surface needing dedicated protection in national security and critical infrastructure frameworks.
-
DP World Australia intrusion shows how terminal software disruption halts cargo flow despite intact physical systems
A 2023 cyber incident at DP World Australia landside operations stopped for three days while control systems stayed online, illustrating the real‑world impact of weaknesses in port Terminal Operating Systems.
-
CISA warns of critical 9.8‑severity flaws in openPDC and openHistorian grid‑monitoring software
The agency urges utilities to patch, segment networks and review authentication before attackers can exploit the vulnerabilities.
-
Epic Pauses Most Product Development for About Six Weeks to Fix Security Flaws, CEO Says
Epic founder Judy Faulkner told Modern Healthcare the pause would likely last about six weeks, after an Anthropic AI model found weaknesses in the company's software, TechCrunch reports.
-
CISA Republishes Hitachi Energy Advisory on Denial-of-Service Flaws in REB500 Versions 8.3.3.1 and Earlier
The advisory ties two open-source vulnerabilities to the REB500 product, and the text provided names no fixed version.
-
CISA Flags Two Flaws in Johnson Controls EasyIO FG Controllers; ISSSource Says Vendor Won’t Patch
CISA's Oct. 6, 2026 advisory covers two flaws in firmware 2.0b52 and earlier, and ISSSource reports the product is end-of-life with no fix coming.
-
Joint advisory names China-based Integrity Tech as an enabler of attacks on critical infrastructure
CISA, the FBI, NSA and allied agencies say Integrity Technology Group supplies tools, hosting and network access, and the FBI seized domains behind two of its tools the same day.
-
Unit 42 Attributes Blinder Tunnel Campaign on Iraqi Infrastructure to an Iranian Nexus
Unit 42 says an actor it tracks as CL-STA-1178 used a fake Dubai Airports recruitment process and GitHub-hosted command-and-control against a likely software engineer in Iraq's critical infrastructure sector.