Daily OT Security News: September 30, 2026
The latest IoT, OT, CPS, and ICS cybersecurity news, vulnerabilities, and key takeaways for September 30, 2026. The post Daily OT Security News: September 30, 2026 appeared first on Viakoo, Inc.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,311 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Unified Data Security, Privacy & Governance: What Should “Unified” Actually Mean?
“Unified” has become one of the most common promises in enterprise data technology. Unified security. Unified privacy. Unified governance. Unified AI controls. One platform. One view. The promise … The post Unified Data Security, Privacy & Governance: What Should “Unified” Actually Mean? appeared first on BigID.
Over 543,000 valid credentials exposed in public GitHub repositories
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data. [...]
From APL to STIG: What Government IT Leaders Need to Know About Backup Compliance and How to Stay Ahead of the Curve
If you've been managing IT infrastructure for a federal agency for any length of time, you know the U.S. Department of Defense Information Network Approved Products List (DoDIN APL). The post From APL to STIG: What Government IT Leaders Need to Know About Backup Compliance and How to Stay Ahead of the Curve appeared first on Veeam Software Official Blog.
Skyhawk Security mentioned in the 2026 Gartner® Agentic Security: Preemptive Exposure Management Demands AI-Driven Validation and Autonomous Interdiction Report
Skyhawk Security is named as a Sample Vendor in Gartner’s new research, Agentic Security: Preemptive Exposure Management Demands AI-Driven Validation and Autonomous Interdiction, published September 28, 2026. We’re proud of the recognition. In our opinion, it reflects something we have believed since the start: defenders cannot keep up with AI-powered attackers by counting vulnerabilities. They […] The post Skyhawk Security mentioned in the 2026 Gartner® Agentic Security: Preem
BreachRx Launches Out-of-Band Comms to Keep Cyber Response Moving When Corporate Systems Cannot Be Trusted
New Rex Platform capabilities keep communications, response actions, legal workstreams, executive visibility and the incident record connected during cyber disruption SAN FRANCISCO —October 1, 2026— BreachRx, the leader in Cybersecurity Incident Response Management (CIRM), today announced Out-of-Band Comms, a major expansion of the Rex Platform that gives organizations a trusted communications and collaboration environment for […] The post BreachRx Launches Out-of-Band Comms to Keep Cyber
How Commercial Space Companies Protect Export-Controlled Technical Data Across Their Supply Chain
Commercial space startups lack export-control DNA. Discover what ITAR Category XV requires for technical data in global supply chains.
One Policy, Every Channel: Why Fragmented Data Governance Is a Breach Waiting to Be Found
Introduction Most organisations do not have one data governance policy. They have several: one for email, another for file sharing, a different one again for APIs, and often no coherent policy at all for the newest channel, AI agents. Each was built by a different team, at a different time, against a different set of Read more...
Ransomware Group lamashtu Hits: Astidental di Sabbione
Summary In the latest cybersecurity news, Astidental di Sabbione — an organization based in IT — has fallen victim to a ransomware attack conducted… The post Ransomware Group lamashtu Hits: Astidental di Sabbione appeared first on HookPhish.
Ransomware Group lamashtu Hits: Dr Damiel Pugliese
Summary In the latest cybersecurity news, Dr Damiel Pugliese — an organization based in US — has fallen victim to a ransomware attack conducted… The post Ransomware Group lamashtu Hits: Dr Damiel Pugliese appeared first on HookPhish.
Ransomware Group safepay Hits: assist2enjoy.be
Summary In the latest cybersecurity news, assist2enjoy.be — an organization based in BE — has fallen victim to a ransomware attack conducted by the… The post Ransomware Group safepay Hits: assist2enjoy.be appeared first on HookPhish.
In the News | AI Companies Argue There’s a Hidden Cost of Banning AI and Screens in Schools
This article was originally published in Unite.AI on 9/17/26 by Ana Sofia Herazo The children of New York City’s public schools returned this fall with far less artificial intelligence (AI) within reach.  On September 2, Mayor Zohran Mamdani and New York City Public Schools Chancellor Kamar Samuels announced a one-year moratorium that blocks student-facing generative ... The post In the News | AI Companies Argue There’s a Hidden Cost of Banning AI and Screens in Schools appeared first on Ma
Cisco Catalyst SD-WAN Manager flaw exploited
At a glance: Cisco disclosed CVE-2026-76504 on September 30, 2026, and confirmed the vulnerability has been exploited in the wild. A remote threat actor can bypass authentication and gain administrator-level access to a vulnerable API endpoint without valid credentials or user interaction. Organizations exposing Cisco Catalyst SD-WAN Manager to the internet are the most exposed because the platform serves as the central management plane for SD-WAN environments.
Cybersecurity Awareness Month: The 3Rs for a Stronger Security Posture
Executive Summary: Cybersecurity Awareness Month is a useful reminder that resilience is not built by adding more tools—it is built by reducing exposure, replacing weak links, and recovering quickly when controls fail. CISA’s 2026 3Rs framework offers a practical lens for doing exactly that. For modern enterprises, that means building a unified security posture across […] The post Cybersecurity Awareness Month: The 3Rs for a Stronger Security Posture appeared first on CheckRed.
We’ve made technology easier. So why does IT feel more complicated than ever?
Technology has never been easier to use.You can set up a cloud application in minutes. Employees can access systems from almost anywhere. AI can write code, analyse data, answer questions, and automate tasks. Infrastructure can scale without someone walking into a server room.And yet, IT teams seem to have more to deal with than ever.There is an... The post We’ve made technology easier. So why does IT feel more complicated than ever? appeared first on ManageEngine Blog.
Defender Exclusion Abuse: How Attackers Hide Malware from MDAV
See how attackers like GootKit and WhisperGate abuse Windows Defender exclusions to hide malware from AV scans — and how Huntress detects it.
AI Governance on AWS: The Runtime Control Loop: AI Governance on AWS: Four Functions, One Loop, and a Deadline That Already Passed
Answer this without checking: how many AI agents are running in your environment right now? Most security leaders give an estimate and a shrug. That is a fair response, because agents get spun up by an engineer solving a problem on a Tuesday afternoon, through a path that puts them on nobody's radar. In August [...] The post AI Governance on AWS: The Runtime Control Loop: AI Governance on AWS: Four Functions, One Loop, and a Deadline That Already Passed appeared first on Wallarm.
Building the Trust Layer with NVIDIA’s Open Agent Safety Platform
Forescout supports the NVIDIA Open Agent Safety Platform, bringing out-of-band, in-silicon monitoring to AI agents in critical environments. The post Building the Trust Layer with NVIDIA’s Open Agent Safety Platform appeared first on Forescout.
How Ghost Students Steal Aid and Erode Your Brand
FinCEN issued a nationwide alert in July about fraud rings stealing federal student aid through fake enrollments. The Department of Education says it prevented $1 billion in fraud last year. The 2027-28 FAFSA just opened. Last week, a Houston college graduate named Melanie Marti logged into her StudentAid.gov account and found a notification she did […] The post How Ghost Students Steal Aid and Erode Your Brand appeared first on Allure Security.
When Productivity Extensions Become Attack Platforms
Our research uncovered a campaign of 32 malicious browser extensions that uses remote configs to spy on 9,800+ users and hijack browsing activity.
SOAR Playbook Optimization: Fix the Data Tier First
Security Orchestration, Automation and Response was built around a sound premise: security workflows involve too many manual steps, too many context switches, and too much repetitive work for the alert volumes that modern environments generate.
Introducing ai_decide: make fast decisions on your governed data
Today, we’re launching a new Databricks AI Function ai_decide that makes fast decisions...
A practical guide to cost optimization with Lakebase Postgres
Lakebase is a fully managed Postgres database, built for the operational realities...
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system command injection flaw that can lead to remote code execution when Simple Network Management Protocol
How to scale agentic applications without creating AI sprawl
Building an agent is getting easier. More capable models and coding agents are making...
What Is ARISE? The New Category Defining Agentic Runtime Identity Security
An agent holds a valid token, it calls an approved tool. Every individual step in the chain passes authorization, because every individual step was designed to pass. The chain as a whole does something nobody sanctioned, and by the time the alert lands in a queue, the agent finished nineteen minutes ago. That gap is why Software Analyst Cyber Research named a new category this month. ARISE, Agentic Runtime Identity Security Enforcement, exists to answer one question: should this agent be...
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. "Once executed, the legitimate MSP360 installer, distributed under a deceptive file name established remote management access on affected
The Complete Guide to XDR Alert Triage in 2026
Security operations centers are facing a volume problem. Every firewall, endpoint agent, cloud service, identity provider, and email gateway generates alerts. Many of them are low value, duplicated, or false positives. Analysts spend hours sorting through noise while real attacks move quietly across the environment. At the same time, attackers are moving faster. They use The post The Complete Guide to XDR Alert Triage in 2026 appeared first on Seceon Inc.
Why Modern Social Engineering Defense Demands an Agentic Interface
Doppel’s platform update is the foundation for agentic SOC workflows, faster decisions, and unified defense.
Proofpoint on Why AI Security Must Focus on Intent
The Pit Wall Principle: How Human Judgment and AI Speed Run the Modern SOC
Securing the New Normal: Why Universal Zero Trust is Essential in the Age of AI
The security landscape is shifting rapidly, and the rules of engagement have changed. We have entered an era where AI-powered... The post Securing the New Normal: Why Universal Zero Trust is Essential in the Age of AI appeared first on Skyhigh Security.
The Pit Wall Principle: How Human Judgment and AI Speed Run the Modern SOC
Something big is coming on October 8 — and I want you to be there
Key Takeaways Precisely Now is October 8, featuring major product announcements, an exclusive IDC research conversation, and customer stories from data leaders doing this work at scale. IDC Research VP Stewart Bond will discuss why data intelligence has become a first-order AI infrastructure decision Two enterprise data leaders from Lake Michigan Credit Union and Charter […] The post Something big is coming on October 8 — and I want you to be there appeared first on Precisely.
Something big is coming on October 8 — and I want you to be there
Key Takeaways Precisely Now is October 8, featuring major product announcements, an exclusive IDC research conversation, and customer stories from data leaders doing this work at scale. IDC Research VP Stewart Bond will discuss why data intelligence has become a first-order AI infrastructure decision Two enterprise data leaders from Lake Michigan Credit Union and Charter […] The post Something big is coming on October 8 — and I want you to be there appeared first on Precisely.
Flash Notice: Brand Impersonation & App-Store Fraud: GTA 6: Unreleased Title Hype-Jacking
Discover PreCrime Labs' threat intelligence report on 16 unauthorized GTA 6 mobile apps on Google Play executing brand impersonation and financial scam risks.
wolfCOSE Adds COSE HPKE Encryption
wolfSSL is adding Hybrid Public Key Encryption (HPKE) support to wolfCOSE. HPKE, standardized in RFC 9180, combines a KEM, a KDF, and an AEAD into a modern, misuse-resistant public-key encryption scheme, and bringing it to COSE lets constrained and IoT devices encrypt CBOR-based messages to one or many recipients without hand-rolled key wrapping. The feature […]
ToolBench Rescan: 90,000 MCP Servers Scored
Six months on, ToolBench rescored 90,000+ MCP servers and 630,000+ tools. Only 0.28% earn an A, and the riskiest tools get the least documentation.
Jev-directed Model Routing
Choosing which model handles a task has a cost of its own. We tested Jev as a faster, cheaper way to make that decision when compared to LLMs.
How Much Memory Do You Need for Video Editing?
Not sure how much RAM you need for video editing? Discover memory recommendations for different workflows, software, and project types.