We’re Tracking the Future of Security

Category: News

Current, event-driven reporting, announcements and industry developments.

  • OSHA Awards $10.2 Million in Workplace Safety Training Grants to 67 Organizations

    OSHA Awards $10.2 Million in Workplace Safety Training Grants to 67 Organizations

    The U.S. Department of Labor’s Occupational Safety and Health Administration awarded approximately $10.2 million in Susan Harwood Training Grants to 67 organizations nationwide, the agency announced October 1, 2026, to fund hazard-recognition and prevention training for workers and employers.

    Focus on High-Risk Small Businesses

    The grants, distributed through OSHA’s long-running Susan Harwood Training Grant Program, are intended to support instructor-led training and the development of classroom-ready educational materials on hazard awareness, prevention and controls. OSHA said the funding places particular emphasis on small businesses operating in industries with high rates of injury, illness and fatality, and that roughly a dozen of the awards are specifically earmarked for fall-protection training aimed at residential and commercial construction workers in states including Florida, Pennsylvania and Texas.

    Program’s Origins

    The program is named for Dr. Susan Harwood, who spent 17 years at OSHA developing safety guidance covering benzene, formaldehyde, bloodborne pathogens and lead exposure in construction, and who authored the agency’s cotton dust standard, credited with virtually eliminating byssinosis among textile workers.

    The awards continue a pattern of OSHA funding non-profit groups, employer associations, labor unions, tribal organizations and colleges to deliver safety training directly to at-risk workforces rather than through enforcement alone. Recipients were not individually detailed in the initial announcement, and the full list of awarded organizations was not independently verified beyond the agency’s release. More industrial safety developments are tracked in the SectechMedia Technology News archive.

    Sources

  • CISA Warns of Unpatched CVSS 10 Flaw in Viidure Dashcam Android App

    CISA Warns of Unpatched CVSS 10 Flaw in Viidure Dashcam Android App

    The Cybersecurity and Infrastructure Security Agency (CISA) disclosed two vulnerabilities in the Viidure Dashcam Android application on September 29, 2026, including a maximum-severity flaw that exposes hardcoded cloud storage credentials embedded in the app’s compiled code.

    What Was Found

    CVE-2026-96587, rated CVSS 10.0, stems from use of hard-coded credentials that grant full read, modify, and delete access to the platform’s cloud storage backend, including firmware and application binaries. A second flaw, CVE-2026-94204 (CVSS 7.5 to 8.7 depending on scoring version), results from a misconfigured cloud storage bucket set to public-read access, exposing user records, live dashcam footage, application packages, and firmware files to anyone on the internet. Researcher Bugrahan Karahan is credited with reporting the issues to CISA.

    Who Is Affected

    The advisory covers Viidure Dashcam Android Application version 3.3.1.260403 and earlier, deployed worldwide within the Transportation Systems critical infrastructure sector. Because the exposed credentials and storage bucket are shared platform-wide infrastructure, the flaws are systemic rather than limited to individual devices, potentially affecting every user of the app.

    Mitigation

    CISA said Viidure did not respond to coordination attempts, and no patch is currently available. The agency’s standard interim guidance applies: minimize network exposure, isolate connected devices from business networks, and use VPNs for any required remote access. Security researchers additionally recommend avoiding storage of sensitive footage through the app and considering removal of the application until a fix is issued.

    No public exploitation of either flaw has been reported to date, but the combination of a maximum CVSS score and an unresponsive vendor leaves affected users with no clear remediation timeline. More dashcam and connected-device developments are tracked in the SectechMedia Technology News archive.

    Sources

  • Trump and Six AI Giants Sign Voluntary ‘Super Intelligence’ Accord on Safety Audits

    Trump and Six AI Giants Sign Voluntary ‘Super Intelligence’ Accord on Safety Audits

    President Donald Trump and the chief executives of six leading artificial intelligence companies signed a voluntary “White House Accord on Super Intelligence” on September 29, 2026, committing their firms to internal safety reviews, independent external audits, and board-level oversight of AI systems, according to the Associated Press and other outlets present at the signing.

    What the Accord Requires

    The one-page document, posted by Trump to Truth Social, binds signatories Anthropic CEO Dario Amodei, Google CEO Sundar Pichai, Meta CEO Mark Zuckerberg, OpenAI President Greg Brockman, Nvidia CEO Jensen Huang, and xAI founder Elon Musk to four voluntary steps: robust internal controls, an independent external auditor to assess those controls, a dedicated board committee to review audit findings, and regular meetings to refine safety standards. Trump called the pact “morally binding” and said the steps could eventually be codified into law. Microsoft and Amazon executives attended but did not sign; Apple was not represented.

    Security and Governance Concerns

    Experts quoted by NPR were split on the approach. USC professor Shri Narayanan said the accord balances innovation with oversight, while colleague Robin Jia warned that self-policing depends on labs staying aligned with the public interest, citing recent AI-related hacking disclosures as evidence that consequences will grow as models become more capable. Berkman Klein Center director Alex Pascal criticized the accord’s vague language, arguing only binding legal liability and regulation can meaningfully curb frontier-AI risk.

    The accord is voluntary and carries no enforcement mechanism; Amodei himself noted during the signing that “the technology has very real risks” still under discussion. For enterprise security teams, the agreement signals that third-party AI audits and board-level AI risk committees may become an industry norm ahead of binding rules. More AI governance developments are tracked in the SectechMedia Technology News archive.

    Sources

  • Gallagher Security and ASSA ABLOY Integrate IP Locks With Command Centre

    Gallagher Security and ASSA ABLOY Integrate IP Locks With Command Centre

    Gallagher Security has launched an integration with ASSA ABLOY’s IP-connected locks, allowing the devices to be managed directly within Gallagher’s Command Centre access control platform, according to an announcement from the companies reported by Security Systems News and SecurityInfoWatch.

    How the Integration Works

    The integration connects ASSA ABLOY’s IN120 battery-powered Wi-Fi locks and IN220 Power over Ethernet (PoE) IP locks to Command Centre, letting operators centrally manage access permissions, credentials, schedules and overrides without running the extensive cabling or installing the door controllers that traditional wired systems require. Each lock retains local intelligence, allowing it to make access decisions independently if network connectivity is lost, while Command Centre still surfaces events, alarms, battery status, audit records and device health for connected doors.

    Target Applications

    Gallagher and ASSA ABLOY positioned the integration for environments where retrofitting wired hardware is costly or disruptive, including higher-education residence halls, classrooms and research spaces, as well as government facilities, enterprise campuses and healthcare sites with distributed buildings. Matt Butts, Gallagher Security’s EVP for the Americas, and Angelo Faenza, ASSA ABLOY’s head of digital access solutions, both described the integration as combining the two companies’ access control and door hardware expertise to simplify deployment. The companies said the integration is available now in the United States.

    Pricing details and a broader international rollout timeline were not disclosed in the companies’ announcements. More access control developments are tracked in the SectechMedia Technology News archive.

    Sources

  • Lockheed Martin Leads $50 Million Series B for Counter-Drone Firm Fortem Technologies

    Lockheed Martin Leads $50 Million Series B for Counter-Drone Firm Fortem Technologies

    Counter-drone technology developer Fortem Technologies has closed a $50 million Series B financing round led by Lockheed Martin, the Lindon, Utah-based company announced on September 30, 2026. Lockheed Martin had committed an initial $25 million to the round in April 2026 and completed the remaining $25 million as part of this close, with participation from Unusual Machines and other strategic and institutional investors.

    Funding to Expand SkyDome Production

    Fortem said the capital will accelerate manufacturing at its Utah facility and expand global deployment of its SkyDome family of counter-uncrewed aerial systems. The SkyDome portfolio combines TrueView radar sensors for detection and tracking, command-and-control software, and DroneHunter autonomous interceptors designed to classify and physically capture hostile drones in flight. Fortem’s technology has also been integrated with Lockheed Martin’s Sanctum counter-UAS architecture, giving the defense giant a direct stake in the smaller firm’s sensor-to-effector pipeline.

    Backed by Growing Government Demand

    The round follows a run of federal contract wins for Fortem, including a spot as a prime contractor on a Department of Homeland Security counter-UAS hardware and software IDIQ carrying an initial ceiling above $1 billion, a separate DHS order to protect 2026 FIFA World Cup venues, and an Army contract covering installation protection. Industry observers point to this contract activity as evidence of surging demand for layered counter-drone defenses across US critical infrastructure and major public events.

    Terms beyond the disclosed $50 million total and the $25 million Lockheed Martin tranche have not been detailed by either company. More counter-drone funding and procurement developments are tracked in the SectechMedia Technology News archive.

    Sources

  • TSA Audit Finds Access-Control Gaps Across Sensitive IT Systems

    TSA Audit Finds Access-Control Gaps Across Sensitive IT Systems

    The Transportation Security Administration needs stronger controls over who can access sensitive information technology systems, according to a Department of Homeland Security Office of Inspector General report dated September 29. The audit examined account governance, privileged access and the removal of access when personnel leave the agency.

    The inspector general reported weaknesses in approval documentation for privileged accounts, annual access reviews and timely deprovisioning for separated personnel. These are administrative controls, but they directly affect whether technical safeguards can reliably enforce the agency’s intended access policy.

    Five Recommendations Issued

    The report made five recommendations intended to strengthen account authorization, recurring reviews, evidence retention and offboarding. TSA concurred with all five, according to the audit. The agency also described corrective work, including a ServiceNow-based process introduced in July 2026 to improve account management and review workflows.

    Because parts of the report are redacted, the public document does not expose detailed system configurations. It nevertheless provides a clear governance lesson: access-control effectiveness depends on current identity records, documented approvals and prompt revocation, not only on authentication technology.

    Why the Findings Matter Beyond TSA

    Transportation organizations increasingly connect operational, administrative and physical-security systems. A stale or over-privileged account can therefore become a pathway to sensitive data or systems that support real-world operations. Mature programs link human-resources events, identity governance and technical enforcement so that role changes and departures trigger predictable access updates.

    Security teams can apply the same principles by inventorying privileged accounts, assigning accountable owners, retaining approval evidence and testing offboarding with measurable service targets. Independent review should verify that the documented procedure produces the expected result in live systems. Exceptions should have named owners, expiry dates and documented compensating controls.

    The findings also reinforce the connection between cyber and physical risk discussed in SectechMedia’s cyber-physical security convergence guide.

    Sources

  • Genea Launches MCP Server to Connect AI Assistants with Cloud Access Control

    Genea Launches MCP Server to Connect AI Assistants with Cloud Access Control

    Genea has launched a Model Context Protocol server for its cloud-native access-control platform, giving approved artificial intelligence assistants a structured way to interact with building-security workflows. The company announced the release on September 29, describing it as an optional integration layer rather than an autonomous replacement for security operators.

    The server is designed to let administrators use natural-language requests for routine tasks such as reviewing access activity, checking configuration data or preparing changes. Genea says the service is disabled by default and must be activated by an authorized administrator.

    Permission Boundaries Remain Central

    The implementation inherits the permissions of the authenticated Genea user. That means an assistant should not receive broader access simply because it communicates through MCP. High-impact actions require confirmation, according to the product announcement, while organizations retain control over which roles can activate and use the integration.

    Those controls matter because physical-access systems contain sensitive identity, credential and door-event data. Connecting an AI assistant to that environment creates a new administrative interface, so deployment teams need to treat the assistant, its authentication path and its audit trail as part of the security boundary.

    What Security Teams Should Validate

    Before enabling an AI integration, operators should confirm least-privilege role assignments, approval requirements for changes, log retention, account revocation and incident-response procedures. They should also test ambiguous prompts and failed actions to understand what the assistant records and how it communicates uncertainty.

    The launch reflects a broader movement toward machine-readable interfaces in security operations. MCP can make access-control data easier to query from approved tools, but it does not remove the need for established change control, human review or a documented rollback path. Organizations evaluating the feature should begin with read-only use cases and a limited user group before allowing operational changes.

    For a wider view of credentials, controllers and identity workflows, see SectechMedia’s access control and identity technologies guide.

    Sources

  • Hegseth Orders Pentagon to Treat Counter-Drone Approval Delays as “Operational Risk”

    Hegseth Orders Pentagon to Treat Counter-Drone Approval Delays as “Operational Risk”

    Defense Secretary Pete Hegseth has signed a memorandum ordering the Pentagon to treat bureaucratic delays in fielding counter-drone technology as an operational risk, aiming to clear procedural bottlenecks that have slowed deployment of systems meant to protect U.S. military bases, critical infrastructure and other domestic assets from unmanned aircraft threats, DefenseScoop reported on October 2.

    The five-page directive, dated September 28 and titled “Project Agincourt: Pathway to the Autonomous Warfare Command,” was publicly released the following Friday. “The Department will take down barriers so our warfighters can take down drones,” Hegseth wrote in the memo.

    What the Directive Changes

    The memo targets specific administrative chokepoints that have historically slowed counter-drone hardware and software adoption, including radio spectrum and frequency authorization delays and lengthy safety review processes. Review and approval authorities are now required to treat any delay in processing counter-drone requests as an operational risk rather than routine paperwork.

    Hegseth directed the Pentagon’s chief information officer to review, within 30 days, how DoD components submit counter-UAS spectrum requests to interdepartmental spectrum authorities and to recommend ways to speed approval — work that will feed into the Defense Innovation Unit’s “Project Spectrum Strike” effort. Separately, the department’s chief digital and AI officer was told to coordinate with the CIO, the Office of General Counsel, the Defense Information Systems Agency, U.S. Cyber Command, and the military services to build a single, department-wide approval process that cuts authority-to-operate timelines for tested, validated counter-drone systems from months down to days or weeks.

    JIATF-401 as the Enforcement Backbone

    The directive functions as an enforcement mechanism for Joint Interagency Task Force 401, the Pentagon’s lead counter-drone coordination body, which Hegseth designated as the department’s “synchronization point” for counter-UAS employment across the military services, combatant commands and interagency partners. Under the memo, JIATF-401 becomes the repository for technical data, common hazard assessments, approved mitigation measures and threat intelligence used in all counter-UAS weapon safety reviews.

    Army Lt. Col. Adam Scher, a JIATF-401 spokesperson, told DefenseScoop that the task force “is taking aggressive action to streamline bureaucratic approvals and remove barriers that delay lawful, safe, and effective counter-drone operations,” adding that “JIATF-401 will not accept a slow-moving bureaucracy when faced with a fast-moving threat.”

    Why It Matters

    The directive arrives amid mounting drone incursions over U.S. installations and escalating cartel-linked drone activity along the southern border, pressures that have already driven JIATF-401’s Falcon Peak test series — including its most recent iteration at Yuma Proving Ground — and a pending move toward urban-environment counter-drone demonstrations. By explicitly reframing spectrum and authorization delays as risk rather than process, the memo signals that acquisition speed, not just new hardware, is now a formal Pentagon priority for close-in drone defense.

    • Memo: “Project Agincourt,” signed September 28, 2026, released October 2
    • Key fixes: Spectrum/frequency authorization review (30-day CIO review); single department-wide ATO process targeting days-to-weeks timelines
    • Lead body: Joint Interagency Task Force 401 (JIATF-401), designated as the department’s synchronization point

    Source: DefenseScoop, “Hegseth issues new directive to hasten U.S. military’s counter-drone pursuits,” October 2, 2026. Confidence: DIRECT.

    Sources and Further Reading

  • U.S. Army Awards Up to $7 Billion in Counter-Drone Contracts to 10 Companies Under Domestic Shield

    U.S. Army Awards Up to $7 Billion in Counter-Drone Contracts to 10 Companies Under Domestic Shield

    The U.S. Army has awarded 10 companies a combined contract ceiling of up to $7 billion for counter-drone technologies, Joint Interagency Task Force 401 (JIATF-401) announced September 29, expanding a multi-vendor acquisition strategy intended to field layered defenses against small unmanned aircraft systems (sUAS) across military installations and other priority facilities in the United States.

    The awards were made as multiple-award indefinite-delivery/indefinite-quantity (IDIQ) contracts supporting Domestic Shield, a Department of War initiative to improve counter-UAS (C-UAS) protection for risk-prioritized facilities and assets, according to the Army’s public affairs office. The contracts also feed JIATF-401’s broader C-UAS Marketplace, an online catalog that lets military and other government customers compare vendor performance data before procurement.

    Ten Vendors, a Range of Capabilities

    According to the Army, confirmed by Breaking Defense, the base contract ceilings awarded are: Allen Control Systems Inc. ($500M), Digital Force Technologies LLC ($500M), DroneShield LLC ($500M), Echodyne Corp. ($250M), Napatree Technology LLC ($500M), PVP Advanced EO Systems Inc. ($250M), RADA Technologies LLC ($500M), SmartShooter Inc. ($150M), SRC Inc. ($500M), and L3Harris WESCAM ($500M).

    The Army said the contracts cover the full detect-track-identify-defeat kill chain, spanning compact radar systems, long-range tracking cameras, electronic countermeasures, automated robotic weapon stations, and smart optical scopes that let individual soldiers engage drones with standard rifles. The service did not specify which technologies each vendor will supply under the vehicle, leaving that to be determined through individual task orders as requirements emerge.

    Avoiding Vendor Lock-In

    Brent G. Ingraham, assistant secretary of the Army for acquisition, logistics and technology, framed the multi-vendor structure as a deliberate rejection of single-source dependency. “This multi-vendor marketplace enforces strict open architecture standards, breaking proprietary vendor lock and ensuring new technologies can immediately integrate into our existing defense networks,” Ingraham said. “By driving continuous competition among both prime vendors and non-traditional commercial innovators, we are securing the best value for the American taxpayer and ensuring our warfighters remain ahead of our adversaries.”

    Brig. Gen. Matt Ross, director of JIATF-401, said the approach is designed for speed as much as choice. “JIATF-401 is continuously working with the military services to provide the counter-UAS capabilities needed to protect warfighters and installations,” Ross said. “Our approach allows us to identify the right capabilities for specific operational requirements and rapidly deliver those capabilities to the warfighter.”

    Part of a Bigger Build-Out

    The awards are the latest in a steady cadence of Domestic Shield contracting actions this year, following prior task orders to vendors including AeroVironment, which separately received a three-year, $500 million IDIQ to supply C-UAS capabilities under the same program. JIATF-401, established roughly 18 months ago, has said it has compiled a “global priorities list” of installations requiring upgraded drone defenses, running into the hundreds. The flow of IDIQ awards signals the Pentagon is moving counter-UAS procurement from pilot-scale testing toward enterprise-scale, multi-vendor fielding — a shift that domestic security integrators, airports, and critical-infrastructure operators watching the counter-drone market closely will likely see mirrored in adjacent civilian procurement in the coming budget cycle.

    Source: U.S. Army press release, September 29, 2026, corroborated by Breaking Defense. Confidence: DIRECT.

    Sources and Further Reading

  • Pye-Barker Fire & Safety Acquires Union AlarmTronic, Expanding Security Alarm Footprint in New Jersey

    Pye-Barker Fire & Safety Acquires Union AlarmTronic, Expanding Security Alarm Footprint in New Jersey

    Pye-Barker Fire & Safety, which bills itself as the largest fully integrated fire protection, life safety and security services provider in the United States, announced on September 29, 2026, that it has acquired Union AlarmTronic, LLC, a security alarm company based in Springfield, New Jersey. The deal deepens Pye-Barker’s operational footprint in the state, adding local service capacity and technical expertise to its existing Northeast operations.

    According to the company’s press release, Union AlarmTronic was founded in 1989 and has completed more than 20,000 security installations across New Jersey, providing access control, video surveillance, intercom, integrated security and traditional alarm monitoring services. The company is led by owner Fred Rosenfeld, who entered the security business through his father Len Rosenfeld’s family operation.

    “We have proudly protected people and property and provided high-caliber service to customers in New Jersey for decades,” Rosenfeld said in the announcement. “With Pye-Barker, we will continue our commitment to install and maintain security systems that protect customers while being able to offer expanded full-service fire protection.”

    Pye-Barker Fire & Safety CEO Bart Proctor framed the deal as both a talent and capability acquisition. “When we met with team members at Union AlarmTronic, their passion for customers and their community stood out,” Proctor said. “Incorporating their expertise, service and team approach into the Pye-Barker family enables us to protect even more people in the state.”

    Per the release, Union AlarmTronic’s trained technicians will remain in place to continue serving existing New Jersey customers under the Pye-Barker umbrella, a common integration approach the company has used across its string of regional acquisitions. Nelson Mullins Riley & Scarborough, LLP represented Pye-Barker in the transaction, while Mesirow Investment Banking served as exclusive financial advisor to Union AlarmTronic. Financial terms were not disclosed.

    Part of a broader consolidation push

    The Union AlarmTronic deal is the latest in a long run of regional roll-ups for Pye-Barker, which has been aggressively acquiring independent fire-protection, suppression and security-alarm companies across the country throughout 2025 and 2026 — including recent deals for Suppression Systems, Inc. in the Pacific Northwest and FSD Protection in Texas. The strategy mirrors a wider wave of consolidation across the physical security and fire-safety services sector, where private-equity-backed platforms and large integrated providers are absorbing independent regional operators to broaden geographic coverage and cross-sell fire, life-safety and security-alarm services to the same commercial customer base.

    For end users in New Jersey, the acquisition means Union AlarmTronic’s existing access control, video surveillance and alarm monitoring customers gain access to Pye-Barker’s broader fire-protection and life-safety service lines, while the local technician base and customer relationships are expected to remain intact through the transition.

    Source: Pye-Barker Fire & Safety press release, PR Newswire, September 29, 2026. Confidence rating: DIRECT (primary company press release with named executive quotes).

    Sources and Further Reading