Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nine...
Manufacturing
20 articles
Podcast: Compliance Won’t Save You: The Future of Cyber Risk with Edna Conway
(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of experienc...
Verification closes the loop
Most organizations assume remediation reduces risk. It’s a reasonable assumption.
Adversarial Clothing Designed to Fool Facial Recognition Systems
There are many companies manufacturing adversarial clothing designed to confuse facial recognition systems. It’s a cool idea, but I worry that it’s mostly se...
Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells
Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router models from Zbtlink. According to a ...
Suppliers, logins, and AI tools are all becoming attack paths
Cybercriminals and state-backed hacking groups are abusing trusted identities, cloud services, AI tools, and software supply chains to gain access while avoi...
Black Hat 2026: OpenAI reveals agents planned ‘collective attacks’ via secret ‘message board’
OpenAI also said its agents exploited a different JFrog Artifactory zero-day weeks before the Hugging Face attack.
AI agents caught using social engineering in UK security tests
UK researchers found AI agents using deceptive tactics to manipulate humans in security tests.
QuickFox VPN targeted in long-standing supply chain attack delivering FDMTP backdoor
In a report by The Hacker News, researchers disclosed a long-standing supply chain attack targeting QuickFox, a VPN and network acceleration tool used by ove...
From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide
A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicio...
Dutch retailer De Bijenkorf warns customer data may be exposed after cyber incident
Luxury-goods chain De Bijenkorf is the latest retailer to announce a cyber incident involving a third-party logistics provider.
Black Hat 2026: Why AI software bills of materials are essential to AI trust
Here’s how AI SBOMs can help team make supply chain risk more manageable.
Four Million Malware Reports Reveal a Widespread No-DNS C2 Blind Spot
A long‑running supply chain compromise of the QuickFox VPN accelerator that quietly delivered an FDMTP backdoor to carefully profiled Windows systems, exposi...
Catching rogue AI behavior with identity-aware analytics
Identity-aware AI Gateway is now in open beta. User Insights turns that traffic into a behavioral baseline for every person and agent, and flags insider risk...
Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack
The malware was designed to steal and exfiltrate secrets, and to propagate itself via stolen NPM and GitHub credentials. The post Over 400 NPM Packages Infec...
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer
Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain attack" on QuickFox, a virtual private network (VPN) and ne...
Most small businesses survive data breaches. Here's how to make sure yours does too
Despite scary made-up statistics, most small and medium businesses do beat data breaches and ransomware incidents.
Botnet Scans Router Diagnostic Tools for OS Command Injection Vulnerabilities
Botnet operators are systematically probing router diagnostic interfaces for OS command injection flaws, chaining default credentials, legacy CGI endpoints, ...
What stops attackers wrecking industrial plants is knowing how
Engineers at an Israeli food producer spent most of a week rebuilding a refrigeration system after an intruder switched the gas cooler and receiver valves to...
Keyv, cacheable npm supply chain attack hits 400-plus packages
The attack is believed to be related to Mini Shai-Hulud.