We’re Tracking the Future of Security

Category: News

Current, event-driven reporting, announcements and industry developments.

  • GSMA Roadmap Links Africa’s Digital ID Growth to Closing the Mobile Usage Gap

    GSMA Roadmap Links Africa’s Digital ID Growth to Closing the Mobile Usage Gap

    A new connectivity roadmap from the GSMA and the Partnership for Digital Access in Africa argues that network coverage alone will not deliver inclusive digital identity and public services. The analysis says hundreds of millions of people live within mobile-broadband coverage but do not use mobile internet.

    The usage gap is larger than the coverage gap

    The roadmap reports that roughly 906 million people, about 60 percent of Africa’s population, were within mobile-broadband coverage but remained offline in 2025. It draws on 11 countries and shows that the main barriers differ by market. In some places infrastructure is still the constraint; elsewhere device cost, electricity, skills, trust or the usefulness of available services matters more.

    That distinction is important for digital identity programs. A credential or government portal may be technically available, yet remain inaccessible to a person who cannot afford a smartphone, maintain connectivity or use the service confidently. Expanding online identity without addressing those conditions can reproduce offline exclusion.

    Digital participation requires coordinated investment

    The roadmap calls for affordable devices, migration from legacy networks, reliable energy, shared rural infrastructure and services that provide practical value. Governments planning digital-ID access should also retain assisted and offline channels, test accessibility and avoid making essential services dependent on one device or network. SectechMedia follows identity infrastructure in its access control and identity coverage.

    Sources

  • Michigan Plastics Plant Fire Disrupts Power Near South Haven

    Michigan Plastics Plant Fire Disrupts Power Near South Haven

    A major fire at East Jordan Plastics near South Haven, Michigan, spread from plastic pallets stored outside the facility into the factory and disrupted electrical service in parts of the community. Local reporting said smoke was visible for miles as multiple fire agencies responded.

    Propane explosions complicated the response

    South Haven Area Emergency Services said early propane explosions threw tanks into the air while crews worked the third-alarm incident. At least six agencies participated in the response. Employees evacuated safely, and no injuries had been reported in the initial public information.

    The fire’s proximity to critical electrical infrastructure added a second operational problem. The City of South Haven said an electric transmission feed was cut because the incident threatened a municipal utility substation. Power restoration depended on progress toward containment, and the public was asked to stay away from the area.

    Industrial incidents can cross system boundaries

    The event illustrates why industrial emergency planning must account for stored materials, pressurized containers, utility dependencies and access for mutual-aid crews. Detection and suppression systems are important, but pre-incident surveys, isolation plans and coordination with energy providers can determine how far consequences spread beyond a facility. SectechMedia follows related engineering risks in its fire and safety coverage.

    Sources

  • Kiteworks Issues Precautionary Shutdown Advisory After Threat Intelligence Warning

    Kiteworks Issues Precautionary Shutdown Advisory After Threat Intelligence Warning

    Kiteworks has issued a precautionary shutdown advisory after receiving what it described as credible threat intelligence from federal authorities. The company recommended a nine-hour shutdown window for customer-managed systems during the weekend while it worked with authorities on the potential threat.

    The advisory was preventive, not a breach notice

    Kiteworks said it had no indication that its systems or customer environments had been compromised when the advisory was published. Self-managed deployments, including on-premises and customer-controlled cloud systems, were asked to follow instructions sent directly to customers. The company said it would handle the same measure for systems that it hosts.

    Independent reporting said the warning concerned the possibility of a zero-day attack and applied across time zones. The unusual step reflects the sensitivity of managed file-transfer and secure-communications platforms, which often handle confidential information for government, financial, legal and industrial organizations.

    Recovery should include verification

    A shutdown window is only one part of incident preparation. Operators should preserve logs, document system state, validate updates or mitigations, and confirm integrity before restoring external access. They should also monitor vendor communications because threat information and required actions can change as an investigation develops. SectechMedia follows secure infrastructure operations in its cyber-physical security coverage.

    Sources

  • CISA Flags Exploited SharePoint and MikroTik RouterOS Vulnerabilities

    CISA Flags Exploited SharePoint and MikroTik RouterOS Vulnerabilities

    The U.S. Cybersecurity and Infrastructure Security Agency has added vulnerabilities affecting Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog. The catalog records confirmed exploitation and directs U.S. federal civilian agencies to apply vendor mitigations by September 28, 2026.

    The entries affect different layers of infrastructure

    CVE-2026-65660 is a SharePoint code-injection vulnerability that Microsoft describes as allowing an authorized attacker to execute code over a network. CVE-2026-67279 affects RouterOS workflow enforcement and can allow an unauthenticated client to open a session channel and send an execution request. CISA notes that the RouterOS weakness can be chained with CVE-2026-86060 for unauthenticated exploitation.

    The two entries should not be treated as a single technical flaw. One concerns collaboration-server code execution, while the other is part of a router attack chain. Their shared significance is operational: both are now associated with observed exploitation rather than theoretical risk alone.

    Inventory and exposure determine priority

    Defenders should identify affected SharePoint and RouterOS assets, confirm internet exposure, apply vendor guidance and preserve evidence where compromise is suspected. Unsupported or unmitigated systems may require isolation or retirement. Monitoring should continue after patching because remediation does not remove persistence established before the update. SectechMedia follows related operational risks in its cyber-physical security channel.

    Sources

  • Elementor CSRF Flaw Could Turn an Administrator Click Into Site Takeover

    Elementor CSRF Flaw Could Turn an Administrator Click Into Site Takeover

    Security researchers have disclosed a high-severity cross-site request forgery flaw in Elementor Website Builder versions 4.3.0 and 4.3.1. The weakness could allow a crafted link opened by a logged-in WordPress administrator to perform REST API actions with that administrator’s permissions, including creating another privileged account on a default installation.

    The flaw extended beyond one Elementor route

    Patchstack traced the issue to the Editor Events module, which exempted requests from WordPress nonce checks when a particular Elementor route string appeared anywhere in the request URI. Because an attacker could place that string in a query parameter, the exemption could affect other WordPress core or plugin REST routes. The attack did not require a malicious page or JavaScript; the trigger could be an ordinary link delivered through email, chat or a comment.

    The affected module is present only in the two identified releases. Patchstack says the issue was addressed in Elementor 4.3.2 following responsible disclosure. Administrators should verify the installed version and update through their normal change-control process.

    Session context remains a critical control

    The attack depends on a privileged user being authenticated when the link is opened. Organizations can reduce exposure through rapid patching, limited administrator accounts, separate browsing practices and review of newly created users. Security teams should also inspect audit logs for unexpected REST activity. SectechMedia tracks related risks in its cyber-physical security coverage.

    Sources

  • FBI Clears 1.8 Million-Sample DNA Backlog and Expands Rapid DNA

    FBI Clears 1.8 Million-Sample DNA Backlog and Expands Rapid DNA

    The FBI says its Federal DNA Database Unit has reduced an accumulated backlog of roughly 1.8 million samples below the level it considers normal monthly inventory. The milestone follows expanded staffing, longer operating hours, information-technology upgrades and partial automation of intake for samples submitted by the Department of Homeland Security.

    Backlog does not mean zero pending samples

    The bureau defines a backlog as pending inventory beyond what the unit can ordinarily process within a month. Reporting says the unit declared the backlog eliminated after the count fell below its operating threshold. The samples support numerical DNA profiles that can be entered into the Combined DNA Index System and compared with forensic records.

    A Department of Justice budget document says federal submissions rose sharply after DNA collection expanded, while later reductions in incoming volume gave the laboratory room to process accumulated inventory. The FBI is seeking additional personnel and funding to sustain the workload rather than treating the clearance as a permanent capacity guarantee.

    Rapid DNA is the next operational focus

    The bureau also plans wider use of Rapid DNA systems that automate qualifying profile development from a cheek swab. Deployment at booking locations could shorten selected identity checks, but accreditation, sample handling, eligibility rules and human review remain essential. Rapid processing does not replace governance of collection or database searches. SectechMedia follows related systems in its identity technology coverage.

    Sources

  • INTERPOL Operation Shams II Uses Face Biometrics to Identify 126 Suspects

    INTERPOL Operation Shams II Uses Face Biometrics to Identify 126 Suspects

    INTERPOL-coordinated Operation Shams II brought specialized officers from 11 countries to Tunis to extract and analyze facial images from online material produced by jihadist groups. According to reporting based on the organization’s announcement, the operation used face biometrics to identify 126 terrorism suspects.

    Online imagery became a searchable dataset

    Twenty-eight officers worked over five days and extracted more than 108,000 facial images. Automated collection, biometric deduplication and image-quality checks reduced that material to a smaller set of unique, usable images for comparison. Participating authorities also contributed intelligence data and used cryptocurrency-analysis tools to examine illicit funding.

    The comparisons relied on INTERPOL’s facial-recognition capability and Biometric Hub, which lets member countries search fingerprint and face records through a common interface. A biometric candidate is an investigative lead, not proof by itself; national authorities remain responsible for confirmation and lawful action.

    Scale increases the need for controls

    Turning open-source imagery into an international intelligence resource can accelerate identification, but it also raises questions about provenance, false matches and retention. Agencies need documented human review, audit trails and rules governing how images enter or leave the dataset. Independent oversight is especially important when automated matching supports consequential counterterrorism decisions. SectechMedia follows cross-border systems in its border security coverage.

    Sources

  • Moldova Proposes National Facial Image Registry for Police Searches

    Moldova Proposes National Facial Image Registry for Police Searches

    Moldova’s Ministry of Internal Affairs has proposed a national Facial Image Registry, known as RIF, for law-enforcement identity searches. The planned system would receive, store and compare facial images to support criminal investigations, missing-person cases and identification of human remains.

    Candidate matches would require review

    The proposal describes both one-to-one comparisons and one-to-many searches. Investigators could submit a legally obtained image of an unidentified person and receive a list of possible candidates. That output would be a preliminary technical result rather than a confirmed identity; qualified personnel would have to review a potential match before it could have an operational effect.

    The draft does not call for automatically importing photographs of the entire population. Images would need a legal basis and authorized source. Access would be limited by role, activity would be logged, and general searches without a lawful purpose would be prohibited under the proposed framework.

    European interoperability raises governance stakes

    Moldova is also aligning police-data exchange rules with the European Prüm II mechanism, which covers facial images alongside fingerprints, DNA and other records. Cross-border exchange would depend on separate legislation and confirmation procedures. Strong audit, retention, disclosure and redress controls will be essential if the project advances. SectechMedia follows related technologies in its identity security channel.

    Sources

  • ICAO Pushes Digital Travel Credentials and Contactless Border Processing

    ICAO Pushes Digital Travel Credentials and Contactless Border Processing

    The International Civil Aviation Organization is urging governments and industry to accelerate digital identity and contactless border processing while preserving interoperability and security. The direction follows discussions around the ICAO Traveller Identification Programme and live airport deployments that use biometrics, automated gates and digital credentials.

    Standards connect different national systems

    Countries are moving at different speeds and operate under different legal frameworks. ICAO’s role is to provide standards, recommended practices and technical guidance that allow credentials and travel documents to be recognized across borders. The organization is developing the ICAO Digital Travel Credential and already maintains the Public Key Directory used to support verification of electronic travel documents.

    Automation can move routine checks to self-service lanes and let border officers concentrate on exceptions and higher-risk cases. It does not remove the need for trained staff. Identity proofing, relying-party acceptance, cybersecurity and data governance must work across the full chain from document issuance to border inspection.

    Deployment still requires measured rollout

    Airport and government teams should treat interoperability, privacy and operational resilience as commissioning requirements rather than later additions. Pilots need representative passenger flows, failure handling and a clear route back to manual inspection. Incremental deployment also gives authorities evidence about accessibility and error rates before scaling. SectechMedia tracks these systems in its border security coverage.

    Sources

  • NIST Age Estimation Results Shift With Operational Use Case

    NIST Age Estimation Results Shift With Operational Use Case

    NIST’s latest Face Analysis Technology Evaluation results underline why age-estimation systems cannot be ranked by a single universal score. The current round adds four algorithm submissions and reports performance across age distributions, demographic groups, image resolution and age-assurance decision thresholds.

    Rankings depend on the decision being made

    Average error can change when every age receives equal weight or when results are weighted by the number of images in the test set. Resolution testing also asks a different question: whether performance remains stable as fewer pixels are available across a face. NIST’s demographic analysis preserves the direction of error, revealing whether particular groups are estimated older or younger rather than hiding those effects inside one overall average.

    Threshold tests are especially relevant to age-restricted services because the operational concern is not simply the distance between estimated and actual age. It is whether an error moves a person across a policy boundary. The latest results therefore do not establish one best algorithm for every deployment.

    Procurement should follow the use case

    Operators should test candidate systems against their own age distribution, capture devices, lighting, image resolution and legal threshold. A model that performs well on a broad average may not be the safest choice near a particular age boundary. Human review, appeals and privacy controls remain important where an automated estimate affects access to a service. SectechMedia follows related identity developments in its access control and identity coverage.

    Sources