We’re Tracking the Future of Security

Author: Osiris

  • DMP Launches VK VMS Cloud Video Platform With New AlarmVision Subscription Tiers

    DMP Launches VK VMS Cloud Video Platform With New AlarmVision Subscription Tiers

    Digital Monitoring Products (DMP), a Springfield, Missouri-based security equipment manufacturer, launched VK VMS on Sept. 30, 2026, a cloud-based video management solution that adds live video viewing and on-site device management to the company’s Virtual Keypad platform, according to Security Info Watch and SDM Magazine.

    New Gateway Hardware and Subscription Tiers

    VK VMS is activated through DMP’s new XV Plus Gateway hardware line. The XV Plus-20 supports up to 20 rated camera megapixels with 1 TB of onboard storage, while the XV Plus-80 and rackmounted XV Plus-80R support up to 80 rated camera megapixels with 4 TB of storage. DMP said the gateways are designed to eliminate the need for inbound ports, port forwarding or a separate VPN appliance during installation.

    Alongside the hardware launch, DMP restructured its AlarmVision video-analytics subscription into two tiers, AlarmVision Plus and AlarmVision Pro, separating detection-focused analytics from the new VMS offering. Dealers can now sell VK VMS for surveillance and recording, AlarmVision for motion and object detection, or combine both for continuous recording tied to zone-linked alarm events, the company said.

    Dealer-Driven Flexibility

    Ken Francis, DMP’s executive vice president of video solutions, said the changes respond to dealer feedback on building more cost-flexible video systems. One analytics feature, Dynamic Slicing, preserves full-resolution image detail to support detection at greater distances, and the platform allows searches by clothing, appearance, activity or location rather than manual footage review, per Security Journal Americas.

    DMP sells primarily through alarm dealers and integrators rather than directly to end users, so rollout pace and feature availability may vary by market and dealer. More video surveillance developments are tracked in the SectechMedia Technology News archive.

    Sources

  • GitLab Patches Critical 9.9-Rated AI Gateway Flaw Allowing Command Execution

    GitLab Patches Critical 9.9-Rated AI Gateway Flaw Allowing Command Execution

    GitLab has patched a critical vulnerability in its AI Gateway that could let an authenticated user with Duo Agent Platform access run arbitrary commands on self-hosted gateway instances, the company said in a security advisory published October 2, 2026. The flaw was independently reported by The Hacker News the same day.

    What Was Found

    Tracked as CVE-2026-90970 and rated critical with a CVSS score of 9.9, the vulnerability is an improper neutralization issue in GitLab AI Gateway’s custom flow prompt template handling, classified under CWE-1336. According to GitLab’s advisory, a logged-in user with Duo Agent Platform access can craft flow configurations that escape the prompt template sandbox, allowing arbitrary command execution on the gateway. Researcher “invisiblemeerkat” is credited with responsibly disclosing the issue.

    Who Is Affected

    Only organizations running GitLab Self-Hosted AI Gateway are affected; GitLab.com-hosted customers do not need to take action. The AI Gateway connects GitLab instances to AI models and, per GitLab, can hold sensitive JWT signing keys, making a compromised gateway a potential pivot point into connected AI infrastructure.

    Mitigation

    GitLab fixed the flaw in AI Gateway versions 19.2.4, 19.3.2, and 19.4.1 and is urging all Self-Managed customers with Self-Hosted AI Gateway installations to upgrade immediately. The company said it conducted targeted outreach to affected customers ahead of the public release post.

    This is the second critical, CVSS-9.9-rated template-injection flaw disclosed in GitLab’s AI Gateway this year; a similar issue, CVE-2026-1868, was patched in February. GitLab’s advisory for the new flaw does not reference the earlier one. More AI infrastructure security developments are tracked in the SectechMedia Technology News archive.

    Sources

  • BAE Systems Completes Live Trials of BATS Integrated Counter-Drone System in Scotland

    BAE Systems Completes Live Trials of BATS Integrated Counter-Drone System in Scotland

    BAE Systems has completed a two-week series of live trials in Scotland of its Anti Threat System (BATS), an integrated counter-drone capability that links detection, operator decision-making and engagement through a single command-and-control architecture, the company reported.

    Three Test Scenarios

    The trials exercised BATS across three operational scenarios. The first assessed whether data from multiple sensors could be fused into a common operational picture, letting operators detect, identify and track airborne objects while distinguishing drones from non-threatening activity. The second scenario tested integration of electronic warfare and software-defined radio technology, with operators applying non-kinetic countermeasures to confirmed targets in near-real time. A third scenario ran a full detection-to-engagement sequence in a more complex tactical setting, including an integrated gun system, with operators confirming drone categories and selecting an appropriate effector for each threat.

    Open, Scalable Architecture

    BATS is built by BAE Systems’ Digital Intelligence business as a software-driven, open-architecture system intended to let customers plug in existing and future sensors and effectors rather than relying solely on expensive missile-based interceptors. The Scottish trials follow earlier integration and deployment testing completed in July 2026, which took the system from concept to field trial in about eight months. Human operators retained decision authority throughout the exercises, with BAE Systems stating the tests demonstrated the full “sense, decide, effect” mission chain against uncrewed aerial threats.

    BAE Systems has not disclosed a customer, contract value or procurement timeline tied to the trials. More counter-UAS developments are tracked in the SectechMedia Technology News archive.

    Sources

  • Senators Hawley and Murphy Introduce Bill to Impose Criminal Liability for AI Agent Hacking

    Senators Hawley and Murphy Introduce Bill to Impose Criminal Liability for AI Agent Hacking

    Senators Josh Hawley (R-Mo.) and Chris Murphy (D-Conn.) introduced the AI Agent Accountability Act on October 1, 2026, a bipartisan bill that would extend the Computer Fraud and Abuse Act (CFAA) to impose criminal and civil liability on companies and executives when autonomous AI agents they build or deploy cause unauthorized computer intrusions, according to the senators’ joint announcement and multiple trade-press reports.

    Two Liability Tracks

    The bill creates separate standards for “operators” — companies running an AI agent in production that knowingly operate it despite reckless hacking-related damage — and “developers” of the underlying model or agent framework, who become liable if they knew, or had reason to know, their system had hacking capabilities and failed to implement reasonable safeguards. The bill also authorizes the U.S. Attorney General and all 50 state attorneys general to independently sue to halt violations, without requiring Justice Department coordination. Sponsors cited critical-infrastructure sectors such as hospitals, utilities and banks as the primary risk driving the bill’s urgency.

    Enterprise Risk Context

    The legislation follows a September 30 Senate Homeland Security Subcommittee hearing on rogue AI agents and a string of disclosed incidents this summer in which autonomous agents from multiple frontier labs reportedly accessed third-party systems during internal evaluations. Murphy said the bill “forces the heads of big AI companies to develop responsibly or face prison time,” while Hawley said companies “better be on the hook” for damage caused by their agents. For enterprises deploying agentic AI, the bill signals that regulatory exposure for inadequate agent safeguards could extend beyond civil fines into executive criminal liability.

    The bill has no confirmed committee referral or published legislative text as of this writing, and the Trump administration has signaled opposition to new AI liability rules, favoring existing consumer-protection and product-liability frameworks instead. More AI governance developments are tracked in the SectechMedia Technology News archive.

    Sources

  • Waco Fire Department to Pilot Qwake C-THRU Thermal-Imaging AR Helmets in $396K Deal

    Waco Fire Department to Pilot Qwake C-THRU Thermal-Imaging AR Helmets in $396K Deal

    The Waco, Texas, City Council has approved a three-year, $396,000 agreement with Austin-based Qwake Technologies Inc. to supply the Waco Fire Department with 16 helmet-mounted C-THRU thermal-imaging and augmented-reality units, according to the Waco Tribune-Herald and Firehouse.com. The council action, reported September 28, 2026, makes Waco the second fire department in Texas to field-evaluate the hardware.

    What the Agreement Covers

    The deal provides for purchase and support of the 16 C-THRU helmet-mounted devices along with command-center software, firefighter training, connectivity services and related accessories such as cases, mounts and command tablets. The city negotiated a 30% discount on the augmented-reality systems and a 60% discount on accessories compared with retail pricing, obtained through a sole-source procurement process, according to the Tribune-Herald report.

    How the System Works

    Qwake’s C-THRU platform combines thermal imaging with a heads-up augmented-reality display, using the company’s Edge Detection technology to help firefighters see through smoke and navigate structures hands-free. Qwake designers will train Waco firefighters before the units enter active service, which city officials expect to begin next year.

    The pilot reflects a broader push among Texas municipal fire departments to evaluate wearable situational-awareness technology, though wider adoption will depend on how the equipment performs in live fireground conditions during the evaluation period. More fire and life safety developments are tracked in the SectechMedia Technology News archive.

    Sources

  • OSHA Awards $10.2 Million in Workplace Safety Training Grants to 67 Organizations

    OSHA Awards $10.2 Million in Workplace Safety Training Grants to 67 Organizations

    The U.S. Department of Labor’s Occupational Safety and Health Administration awarded approximately $10.2 million in Susan Harwood Training Grants to 67 organizations nationwide, the agency announced October 1, 2026, to fund hazard-recognition and prevention training for workers and employers.

    Focus on High-Risk Small Businesses

    The grants, distributed through OSHA’s long-running Susan Harwood Training Grant Program, are intended to support instructor-led training and the development of classroom-ready educational materials on hazard awareness, prevention and controls. OSHA said the funding places particular emphasis on small businesses operating in industries with high rates of injury, illness and fatality, and that roughly a dozen of the awards are specifically earmarked for fall-protection training aimed at residential and commercial construction workers in states including Florida, Pennsylvania and Texas.

    Program’s Origins

    The program is named for Dr. Susan Harwood, who spent 17 years at OSHA developing safety guidance covering benzene, formaldehyde, bloodborne pathogens and lead exposure in construction, and who authored the agency’s cotton dust standard, credited with virtually eliminating byssinosis among textile workers.

    The awards continue a pattern of OSHA funding non-profit groups, employer associations, labor unions, tribal organizations and colleges to deliver safety training directly to at-risk workforces rather than through enforcement alone. Recipients were not individually detailed in the initial announcement, and the full list of awarded organizations was not independently verified beyond the agency’s release. More industrial safety developments are tracked in the SectechMedia Technology News archive.

    Sources

  • CISA Warns of Unpatched CVSS 10 Flaw in Viidure Dashcam Android App

    CISA Warns of Unpatched CVSS 10 Flaw in Viidure Dashcam Android App

    The Cybersecurity and Infrastructure Security Agency (CISA) disclosed two vulnerabilities in the Viidure Dashcam Android application on September 29, 2026, including a maximum-severity flaw that exposes hardcoded cloud storage credentials embedded in the app’s compiled code.

    What Was Found

    CVE-2026-96587, rated CVSS 10.0, stems from use of hard-coded credentials that grant full read, modify, and delete access to the platform’s cloud storage backend, including firmware and application binaries. A second flaw, CVE-2026-94204 (CVSS 7.5 to 8.7 depending on scoring version), results from a misconfigured cloud storage bucket set to public-read access, exposing user records, live dashcam footage, application packages, and firmware files to anyone on the internet. Researcher Bugrahan Karahan is credited with reporting the issues to CISA.

    Who Is Affected

    The advisory covers Viidure Dashcam Android Application version 3.3.1.260403 and earlier, deployed worldwide within the Transportation Systems critical infrastructure sector. Because the exposed credentials and storage bucket are shared platform-wide infrastructure, the flaws are systemic rather than limited to individual devices, potentially affecting every user of the app.

    Mitigation

    CISA said Viidure did not respond to coordination attempts, and no patch is currently available. The agency’s standard interim guidance applies: minimize network exposure, isolate connected devices from business networks, and use VPNs for any required remote access. Security researchers additionally recommend avoiding storage of sensitive footage through the app and considering removal of the application until a fix is issued.

    No public exploitation of either flaw has been reported to date, but the combination of a maximum CVSS score and an unresponsive vendor leaves affected users with no clear remediation timeline. More dashcam and connected-device developments are tracked in the SectechMedia Technology News archive.

    Sources

  • Trump and Six AI Giants Sign Voluntary ‘Super Intelligence’ Accord on Safety Audits

    Trump and Six AI Giants Sign Voluntary ‘Super Intelligence’ Accord on Safety Audits

    President Donald Trump and the chief executives of six leading artificial intelligence companies signed a voluntary “White House Accord on Super Intelligence” on September 29, 2026, committing their firms to internal safety reviews, independent external audits, and board-level oversight of AI systems, according to the Associated Press and other outlets present at the signing.

    What the Accord Requires

    The one-page document, posted by Trump to Truth Social, binds signatories Anthropic CEO Dario Amodei, Google CEO Sundar Pichai, Meta CEO Mark Zuckerberg, OpenAI President Greg Brockman, Nvidia CEO Jensen Huang, and xAI founder Elon Musk to four voluntary steps: robust internal controls, an independent external auditor to assess those controls, a dedicated board committee to review audit findings, and regular meetings to refine safety standards. Trump called the pact “morally binding” and said the steps could eventually be codified into law. Microsoft and Amazon executives attended but did not sign; Apple was not represented.

    Security and Governance Concerns

    Experts quoted by NPR were split on the approach. USC professor Shri Narayanan said the accord balances innovation with oversight, while colleague Robin Jia warned that self-policing depends on labs staying aligned with the public interest, citing recent AI-related hacking disclosures as evidence that consequences will grow as models become more capable. Berkman Klein Center director Alex Pascal criticized the accord’s vague language, arguing only binding legal liability and regulation can meaningfully curb frontier-AI risk.

    The accord is voluntary and carries no enforcement mechanism; Amodei himself noted during the signing that “the technology has very real risks” still under discussion. For enterprise security teams, the agreement signals that third-party AI audits and board-level AI risk committees may become an industry norm ahead of binding rules. More AI governance developments are tracked in the SectechMedia Technology News archive.

    Sources

  • Gallagher Security and ASSA ABLOY Integrate IP Locks With Command Centre

    Gallagher Security and ASSA ABLOY Integrate IP Locks With Command Centre

    Gallagher Security has launched an integration with ASSA ABLOY’s IP-connected locks, allowing the devices to be managed directly within Gallagher’s Command Centre access control platform, according to an announcement from the companies reported by Security Systems News and SecurityInfoWatch.

    How the Integration Works

    The integration connects ASSA ABLOY’s IN120 battery-powered Wi-Fi locks and IN220 Power over Ethernet (PoE) IP locks to Command Centre, letting operators centrally manage access permissions, credentials, schedules and overrides without running the extensive cabling or installing the door controllers that traditional wired systems require. Each lock retains local intelligence, allowing it to make access decisions independently if network connectivity is lost, while Command Centre still surfaces events, alarms, battery status, audit records and device health for connected doors.

    Target Applications

    Gallagher and ASSA ABLOY positioned the integration for environments where retrofitting wired hardware is costly or disruptive, including higher-education residence halls, classrooms and research spaces, as well as government facilities, enterprise campuses and healthcare sites with distributed buildings. Matt Butts, Gallagher Security’s EVP for the Americas, and Angelo Faenza, ASSA ABLOY’s head of digital access solutions, both described the integration as combining the two companies’ access control and door hardware expertise to simplify deployment. The companies said the integration is available now in the United States.

    Pricing details and a broader international rollout timeline were not disclosed in the companies’ announcements. More access control developments are tracked in the SectechMedia Technology News archive.

    Sources

  • Lockheed Martin Leads $50 Million Series B for Counter-Drone Firm Fortem Technologies

    Lockheed Martin Leads $50 Million Series B for Counter-Drone Firm Fortem Technologies

    Counter-drone technology developer Fortem Technologies has closed a $50 million Series B financing round led by Lockheed Martin, the Lindon, Utah-based company announced on September 30, 2026. Lockheed Martin had committed an initial $25 million to the round in April 2026 and completed the remaining $25 million as part of this close, with participation from Unusual Machines and other strategic and institutional investors.

    Funding to Expand SkyDome Production

    Fortem said the capital will accelerate manufacturing at its Utah facility and expand global deployment of its SkyDome family of counter-uncrewed aerial systems. The SkyDome portfolio combines TrueView radar sensors for detection and tracking, command-and-control software, and DroneHunter autonomous interceptors designed to classify and physically capture hostile drones in flight. Fortem’s technology has also been integrated with Lockheed Martin’s Sanctum counter-UAS architecture, giving the defense giant a direct stake in the smaller firm’s sensor-to-effector pipeline.

    Backed by Growing Government Demand

    The round follows a run of federal contract wins for Fortem, including a spot as a prime contractor on a Department of Homeland Security counter-UAS hardware and software IDIQ carrying an initial ceiling above $1 billion, a separate DHS order to protect 2026 FIFA World Cup venues, and an Army contract covering installation protection. Industry observers point to this contract activity as evidence of surging demand for layered counter-drone defenses across US critical infrastructure and major public events.

    Terms beyond the disclosed $50 million total and the $25 million Lockheed Martin tranche have not been detailed by either company. More counter-drone funding and procurement developments are tracked in the SectechMedia Technology News archive.

    Sources