Bullhorn sees red after cyberattack knocks recruitment platform offline
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
286 matching stories — announcement, in CPS Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Can a Robot Do Everything Right and Still Be Unsafe?
What a conversation between Boston Dynamics and VicOne reveals about how manipulated information can turn expected robot operation into an unsafe outcome
CrowdStrike Achieves NCSC CIR Enhanced Level Assurance
Daily OT Security News: October 19, 2026
This edition covers five source-verified OT, IoT and critical-infrastructure cybersecurity developments. Source publication dates are identified below; these items did not all break today. Confirmed incidents, potential vulnerabilities, unverified claims and framework guidance are distinguished throughout. 1. MITRE ATT&CK v20 sharpens ICS threat mapping Source dates: MITRE release: October 13, 2026; Industrial Cyber coverage: October […] The post Daily OT Security News: October 19, 202
Claroty Team82 shows AI can rebuild Danfoss controller exploits in 28 minutes, putting Internet-facing OT at risk
Claroty’s Team82 research team reproduced three previously disclosed vulnerabilities in Danfoss AK-SM 800A refrigeration controllers using an artificial... The post Claroty Team82 shows AI can rebuild Danfoss controller exploits in 28 minutes, putting Internet-facing OT at risk appeared first on Industrial Cyber.
Daily OT Security News: October 18, 2026
This edition covers five source-verified OT, IoT, and critical-infrastructure cybersecurity developments. Publication and update dates are identified for each story; these items did not necessarily all break today. Potential vulnerabilities are distinguished from confirmed incidents. 1. CISA warns of active exploitation of BeyondTrust Remote Support authentication bypass Source date(s): October 16, 2026 (CISA alert). News […] The post Daily OT Security News: October 18, 2026 appeared first
How to Harness AI for IoT Security
By Eden Faingold, Product Manager
Daily OT Security News: October 17, 2026
This edition draws on sources published or updated October 7–16, 2026. The items were reported or updated on different dates; they are collected here for operational-security teams and should not be read as five developments that all broke today. 1. French supermarket refrigeration cyberattack disrupts physical operations News briefing A cyberattack disrupted refrigeration controls at […] The post Daily OT Security News: October 17, 2026 appeared first on Viakoo, Inc.
Unified Inventory and Visibility FAQ: Discovering, Classifying, and Tracking Every Connected Device
Security leaders often ask similar questions when asset records do not match network reality. The CMDB lists one set of devices, NAC sees another, scanners […] Source
OT Security FAQ: Visibility, Vulnerability Management, and Operational Protection Without Downtime
Operational technology (OT) security leaders face a common set of challenges: discovering network assets, prioritizing vulnerabilities on unpatchable systems, detecting evolving threats, and reducing risk […] Source
Zero Trust FAQ: Extending Zero Trust to IoT and OT Devices
Zero Trust programs typically start with users and managed endpoints, where identities are validated frequently and permissions are kept minimal and short-lived. Organizations then face […] Source
VicOne Situational Awareness Report: 400 Cyber Incidents, with In-Vehicle Systems Most Affected in Q3 2026
VicOne's Q3 2026 Situational Awareness Report tracks where automotive cyber risk shifted: in-vehicle systems overtook enterprise IT as the most affected domain, Asia recorded a 36.8% rise in observed incidents, and ransomware activity spanned the full automotive value chain across 97 incidents.
AUTOCRYPT Celebrated As “Automotive Cybersecurity Company of the Year” In 2026 AutoTech Breakthrough Awards Program
AUTOCRYPT, a leading Physical AI security solutions provider, today announced it has been awarded “Automotive Cybersecurity Company of the Year” in the 7th annual AutoTech Breakthrough Awards program conducted by AutoTech Breakthrough, a leading market intelligence organization that recognizes the top companies, technologies and products in the global automotive and transportation technology markets today. AUTOCRYPT […]
CrowdStrike Outage: What Happened and How to Limit Future Risk | UpGuard
Learn how you should respond to the CrowdStrike incident and the likely long-term impact it will have on third-party risk management.
When the Fridge Is the Attack Surface: Lessons from France's Supermarket Cyberattack
Most conversations about connected device risk start with cameras, door controllers, and badge readers. This week, the conversation started with refrigerators.
The Weaponized Cold Chain: Why the French Supermarket Attack and the "Nine Meals" Warning Should Concern Every OT Defender
Overnight from October 11 to 12, 2026, attackers remotely manipulated the refrigeration systems of hundreds of French supermarkets. By forcing refrigeration controllers made by Danfoss into a continuous defrost cycle, they drove temperatures inside refrigerators and freezers up to 50°C (122°F) for roughly six hours. Stores operated by Intermarché, Coopérative U, E.Leclerc and Carrefour were among those affected, and fresh and frozen stock had to be thrown away. Early loss estimates reached...
Looking Inside AUTOCRYPT’s DEF CON 34 Victory
At DEF CON 34’s Capture the Flag (CTF) Car Hacking Village (CHV) Automotive Hacking competition, AUTOCRYPT’s 12-member Red Team became the first among 83 participating teams to complete all required challenges, securing the championship just 25 hours into the 50-hour competition (Link). Since first participating in 2022, the team has continued to advance on the […]
Sony Patches Seven XAV-9500ES Flaws That Could Have Enabled Device Compromise
Sony patched seven XAV-9500ES vulnerabilities affecting Wi-Fi, Bluetooth, and USB. VicOne examines the attack paths, potential impact, and next steps.
From PLC Exposure to Engineering Risk
Internet-exposed PLCs are not a new problem. They have been repeatedly identified through internet-wide scanning for years, and the guidance from CERTs and CISA has been consistent: control systems should not be directly exposed to the public internet.  In August, CISA, the NSA, the FBI, the Department of Energy, and the EPA published a joint […] The post From PLC Exposure to Engineering Risk appeared first on Indurex.
Claroty finds 58% of CPS operators faced operational cyberattacks as third-party access and AI risks grow
New research from cyber-physical systems (CPS) protection vendor Claroty found that 58% of CPS operators said they experienced... The post Claroty finds 58% of CPS operators faced operational cyberattacks as third-party access and AI risks grow appeared first on Industrial Cyber.
CYVIATION Partners with Boeing on New SkyGuard Service
CYVIATION Partners with Boeing on New SkyGuard Service Boeing’s Aviation Business Solutions to offer CYVIATION’s SkyRay™ platform as part of its newly launched SkyGuard service, helping operators meet rising cyber and regulatory demands June 25, 2026 08:58 ET | Source: CYVIATION NEW YORK, June 25, 2026 (GLOBE NEWSWIRE) — CYVIATION, the cybersecurity company purpose-built for […] The post CYVIATION Partners with Boeing on New SkyGuard Service appeared first on CYVIATION.
Cling botnet uses STUN traffic to conceal command-and-control activity and attacks against vulnerable IoT devices
Nozomi Networks Labs has identified a botnet dubbed Cling that exploits internet-exposed IoT and networking devices and disguises... The post Cling botnet uses STUN traffic to conceal command-and-control activity and attacks against vulnerable IoT devices appeared first on Industrial Cyber.
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling. "Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinary STUN behavior into a practical command-and-control channel," Nozomi Networks said in a report
AUTOCRYPT Establishes Public PKI System to Scale Plug&Charge Services in the Physical AI Era
AUTOCRYPT, a a leading Physical AI security solutions provider, announced that it has successfully established a Public Key Infrastructure (PKI) system for Plug&Charge (PnC) services in South Korea, enabling diverse OEMs and charging point operators (CPOs) to connect through a common authentication framework. The infrastructure was validated across electric vehicles from six global automotive brands, […]
Indurex named a Cool Vendor in the Gartner® Coolest Vendor Innovations in Cyber-Physical Systems Security
Indurex is named a Cool Vendor in the Gartner® Coolest Vendor Innovations in Cyber-Physical Systems Security, 2026 report. Read the announcement. The post Indurex named a Cool Vendor in the Gartner® Coolest Vendor Innovations in Cyber-Physical Systems Security appeared first on Indurex.
Securing the Unseen Engines: OT Cybersecurity for the AI Data Center Era
Redundant but Not Resilient Israel's data center expansion has stopped being only a real estate story. In 2026, the Knesset advanced a proposal to treat qualifying AI server farms as national infrastructure - a signal that domestic compute capacity is now part of the country's strategic base. Driven by AI and high-performance computing, they have become prime economic and strategic assets. That shift changes the security question. Protecting customer data and cloud workloads remains...
GSX 2026 Recap: AI Everywhere, and What It Takes to Put It to Work
Walking the floor at GSX 2026 in Atlanta two weeks ago, the biggest takeaway was a lot of familiar topics that have developed considerably this year. AI and the convergence of physical security and IT have been part of the conversation for several years. What changed was how each in its own way has moved from a sense of skepticism into stages of real progress and thoughtful application.
Cesile Johnson: The Only Woman in the Room
Terry sits down with Cesile Johnson, CTO of Core Bank, for a conversation about what it actually takes to modernize a bank from the inside — the legacy systems nobody wants to touch, the guardrails that have to exist before AI gets anywhere near customer data, and the reality of building a career in a […] The post Cesile Johnson: The Only Woman in the Room appeared first on Fleet Defender.
Nozomi identifies 19 vulnerabilities in Pepperl+Fuchs IO-Link Master enabling root access and OT attacks
Researchers from Nozomi Networks Labs identified 19 vulnerabilities in the Pepperl+Fuchs IO-Link Master ICE2-8IOL-K45P-RJ45 running EtherNet/IP firmware version... The post Nozomi identifies 19 vulnerabilities in Pepperl+Fuchs IO-Link Master enabling root access and OT attacks appeared first on Industrial Cyber.
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tools called RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH. The activity has been codenamed Operation
Neeve Speaking at PropTech Connect Europe 2026 in London
The Neeve team is at PropTech Connect Europe 2026, taking place at the InterContinental London – The O2. As Europe’s largest real estate technology event, PropTech Connect brings together industry leaders, asset managers, and technology innovators to explore the future of smart buildings, operational AI, and enterprise cyber protection.
The third-party manager’s cyber dilemma: How Anglo-Eastern approaches it
The post The third-party manager’s cyber dilemma: How Anglo-Eastern approaches it appeared first on Cyber Owl.
Nightwing CEO has a Labor Day message for staff – and apparently The Register
Nothing says ‘For internal use only’ quite like emailing it to the press
OT Cyber Lessons from the Production Floor: What Client Installations Taught Us About Water, Data Centers, and Smart Buildings
Most of what is written about OT cybersecurity is written from a desk; Threat reports, regulatory analyses, reference architectures. We publish that kind of material ourselves, and it matters. But there is a second body of knowledge that is rarely showcased: what actually happens when an engineer arrives on site with a laptop, a bag of patch cables, Rubyk-OT appliances and a two hour maintenance window. We have installed hardware-enforced segmentation in drinking water and wastewater...
CYVIATION CEO Eliran Almog Featured in Aerospace Global News on the Wider Cybersecurity Risks of Fake Inflight WiFi
CYVIATION CEO Eliran Almog has been featured in Aerospace Global News in an exclusive article examining the wider cybersecurity implications of the fake WiFi network recently discovered aboard Delta Flight DL591.   The unauthorized network, named “Delta Wifi Fast,” appeared while the Boeing 757 was travelling from Las Vegas to Atlanta. Delta confirmed that the […] The post CYVIATION CEO Eliran Almog Featured in Aerospace Global News on the Wider Cybersecurity Risks of Fake Inflight Wi