Cameras, IoT & Industrial
Cameras, smart TVs, routers in the field and industrial controllers: devices that rarely get updated.
Healthcare Cold Storage Attack: Hackers Changed Freezer Settings at the French Blood Service, What Is Confirmed and What to Check
A cyberattack on a refrigeration contractor altered cold room settings at three French blood service sites. No blood products were lost, but internet-connected refrigeration controllers are under active attack. Here is what to check.
Poly EagleEye Cube Vulnerability CVE-2026-39430: Critical Login Bypass in the USB Meeting Room Camera, No Fix Listed, and What to Do Now
CVE-2026-39430 means the HP Poly EagleEye Cube USB camera on firmware 1.3.1-001267 does not enforce its admin login, and its exported settings contain credentials. No fix is listed yet. Here is what is confirmed and what to do this week.
Smart TV Tracking Opt-Out: Study Finds Samsung and Vizio TVs Keep Sending ACR Traffic After Users Opt Out, and How to Lock Them Down
Northeastern University researchers tested 12 smart TVs. On Samsung and Vizio models, turning off ACR tracking did not stop traffic to ACR servers. Here is what is confirmed, what is not, and how to lock down TVs on a business network.
Blood Bank Cyberattack in France: Hackers Changed Cold Storage Settings at Three Sites Through a Refrigeration Vendor, and What to Check
France's national blood service says an attack on a refrigeration vendor pushed cold room temperature and defrost settings to extreme levels at three sites. No blood was lost. Here is what is confirmed and what cold storage businesses should check.
EPICS Base Vulnerability CVE-2026-114595: Four Flaws in Accelerator and Fusion Lab Control Software, and Why 7.0.11 Is the Fix
CISA has published four flaws in EPICS Base, the control software used at accelerators, light sources, telescopes and fusion experiments. One is rated 9.8, all are fixed in EPICS Base 7.0.11, and no exploitation has been reported.
XCPE Botnet: Google Says TV Box Maker Videostrong Built a Backdoor Into 1.3 Million Android TV Boxes, and How to Check the Ones on Your Network
Google says device maker Videostrong put a backdoor in its own Android TV boxes on purpose and sold access to criminals. Here is what is confirmed, what is not known, and how to check the streaming boxes on your network.
AI Cyberattacks on Critical Infrastructure: UK NCSC Says AI-Powered Ransomware Is 'Highly Likely' by 2028, and What to Fix This Week
The UK's National Cyber Security Centre says AI-powered malware will highly likely be used in a ransomware attack on UK critical infrastructure by 2028. Here is what is confirmed, what is only forecast, and the checklist to act on now.
PowerSYSTEM Center Vulnerability: Critical Flaws CVE-2026-63017 and CVE-2026-63774 in Utility Device Management, and the Updates to Install
CISA has published two critical flaws in Subnet Solutions PowerSYSTEM Center: an authorization flaw that gives basic users admin-level access and a SQL injection in the report designer. Here are the affected versions, what is confirmed, and what to do this week.
Supermarket Fridge Cyberattack: Hackers Changed Refrigeration Settings at 115+ European Stores, and How to Check Your Controllers
Attackers remotely changed fridge and freezer settings at more than 115 stores across six European countries. Here is what is confirmed, what is only claimed, and the controller checks to run this week.
