We’re Tracking the Future of Security

Category: News

Current, event-driven reporting, announcements and industry developments.

  • Warner and Wyden Reintroduce Bill to Set Mandatory Cybersecurity Standards for Hospitals

    Warner and Wyden Reintroduce Bill to Set Mandatory Cybersecurity Standards for Hospitals

    Senators Mark R. Warner (D-VA) and Ron Wyden (D-OR) reintroduced the Health Infrastructure Security and Accountability Act on September 17, 2026, legislation that would establish mandatory minimum cybersecurity standards for hospitals and other covered healthcare entities and their business associates. The bill largely mirrors a 2024 version the senators introduced previously, with its implementation timeline shifted forward by two years.

    Under the bill, the Department of Health and Human Services would set, enforce and update the minimum standards at least every two years, with heightened requirements for systemically important entities and those deemed critical to national security. Covered entities would also need continuity and recovery plans covering technical failures, disruptive cyber events and natural disasters. The legislation would direct $1.3 billion toward helping hospitals meet the new standards, including $800 million earmarked for rural hospitals and facilities serving underserved urban communities.

    Why it matters

    Healthcare has lagged other critical-infrastructure sectors on baseline cybersecurity requirements even as ransomware and data-theft incidents increasingly disrupt patient care rather than just back-office systems — the bill’s dedicated funding for rural and underserved hospitals directly addresses the resource gap that smaller facilities cite as the main reason they can’t meet the same security bar as large health systems.

    Sources

  • SightLogix Launches NS12 and TC12 Thermal Cameras for Critical Infrastructure Perimeters

    SightLogix Launches NS12 and TC12 Thermal Cameras for Critical Infrastructure Perimeters

    SightLogix introduced two new fixed thermal cameras, the SightSensor NS12 and TC12, designed to extend perimeter coverage at critical-infrastructure sites while reducing the number of devices needed across large properties. Both use a 1280×1024 thermal imager, which the company says covers approximately 2.5 times the area of a traditional 640×480 thermal camera, and both run on SightLogix’s Gen7 edge-processing platform, which the company describes as delivering 20 times the AI processing throughput of previous generations.

    The NS12 offers detection distances up to 310 meters depending on lens configuration, while the TC12 combines a thermal sensor with a 4K visible-light camera in a single unit, processing both streams on-device without relying on cloud analysis. Both models use edge-based AI classification intended to reduce false alarms, and integrate with SightLogix’s SightTracker PTZ system for automated target following. The company is positioning the cameras for utility substations, data centers, airports, ports, logistics facilities and large industrial campuses.

    Why it matters

    Perimeter camera coverage at large industrial sites is often limited less by camera quality than by how many devices and how much cabling and networking a site can afford to install — a sensor that covers 2.5 times the area of the previous generation directly reduces that per-site device and installation cost for operators securing long perimeters.

    Sources

  • PD Ports Deploys Abloy Electronic Access Control Across UK Sites

    PD Ports Deploys Abloy Electronic Access Control Across UK Sites

    PD Ports, which operates major UK port gateways handling millions of tonnes of cargo annually, has deployed Abloy UK’s PROTEC2 CLIQ electronic access control system across multiple sites, combining mechanical lock protection with digital access management. The port group previously relied on Abloy mechanical products to secure perimeter gates and operational facilities, but growing operations and increasingly complex access requirements prompted it to add electronic control without ripping out the existing hardware.

    The deployment covers 112 PROTEC2 CLIQ keys alongside 32 mechanical padlocks. Each CLIQ key can be programmed and updated remotely, letting PD Ports control permissions across different locations from a central point, and every use is logged through CLIQ Web Manager, creating an audit trail and allowing access rights to be revoked instantly if a key is lost. Because CLIQ keys also operate Abloy’s existing mechanical locks, PD Ports introduced electronic access control incrementally rather than replacing its entire lock inventory at once. The system protects warehouses holding high-value goods as well as perimeter gates and remote access points.

    Why it matters

    Ports typically have large numbers of gates, warehouses and remote access points spread across a site that is expensive to fully re-key — a system that layers electronic control onto existing mechanical locks, rather than requiring wholesale replacement, is often the more realistic upgrade path for large industrial sites with sunk investment in mechanical hardware.

    Sources

  • Hensec Launches Portags, a Combined Drone and GNSS Monitoring Platform for Ports

    Hensec Launches Portags, a Combined Drone and GNSS Monitoring Platform for Ports

    German security company hensec secure solutions launched Portags, short for Port Airspace and GNSS Security, an integrated monitoring platform designed to protect ports against airborne threats and disruption to satellite navigation. Rather than treating drone detection and GNSS interference as separate problems handled by separate systems, Portags fuses data from radio-frequency sensors, passive radar and GNSS signal analysis into a single operational view.

    The system watches the airspace above a port for potential drone activity while simultaneously assessing whether GNSS signals in the area are reliable or under jamming or spoofing attack, giving security teams one interface to detect, assess and document both types of threat. The modular platform can be deployed in stationary or mobile configurations across container terminals, tank farms, port entrances and automated facilities, with open interfaces for integration into existing operations centers. hensec developed Portags following a 2025 measurement campaign that identified combined jamming and spoofing activity in the southern Baltic Sea, as regional nations tighten security cooperation against hybrid threats.

    Why it matters

    Drone incursions and GNSS interference at ports have typically been monitored by separate systems, if at all — correlating the two in one platform matters because attackers increasingly combine tactics, and a port that can only see one threat type at a time may miss an incident where GNSS spoofing and an unauthorized drone are part of the same operation.

    Sources

  • Critical Docker Sandboxes Flaw Let Malicious Code Escape Into macOS Host Files

    Critical Docker Sandboxes Flaw Let Malicious Code Escape Into macOS Host Files

    Docker disclosed and patched a critical vulnerability, CVE-2026-77179, affecting Docker Sandboxes versions 0.28.0 through 0.41.x on macOS. The flaw sits in the virtio-fs host server that Docker Sandboxes uses to share files between a virtual machine and the host: when the server reopens an unlinked file from a previously stored path, it improperly follows symbolic links. A malicious guest can exploit that behavior by replacing a parent directory with a symlink, breaking out of the shared workspace it was supposed to be confined to.

    Once outside the shared workspace, code running inside the sandboxed VM can read or modify arbitrary files anywhere on the host, running with the privileges of the host account that operates the virtual machine, which can extend to host code execution. Docker fixed the issue in version 0.42.0, released September 7, 2026. Docker has not reported any in-the-wild exploitation, and as of the September 16 edition of CISA’s Known Exploited Vulnerabilities catalog, the flaw had not been added.

    Why it matters

    Sandboxing is supposed to be the containment boundary that makes it safe to run untrusted or AI-agent-generated code; a host-escape flaw in the sandbox’s own file-sharing layer undermines that boundary for any developer or CI pipeline that assumed the VM could not touch files outside its assigned workspace.

    Sources

  • SU Group Holdings to Acquire Hong Kong Safety Firm KM Safety Solution

    SU Group Holdings to Acquire Hong Kong Safety Firm KM Safety Solution

    SU Group Holdings Limited, a Nasdaq-listed integrated security services provider offering security engineering, guarding, screening and vocational training services in Hong Kong, agreed to acquire 100% of KM Safety Solution Company Limited for HK$5,616,000 (approximately US$721,000) in cash at completion. The deal is contingent on satisfactory due diligence and required approvals by October 31, 2026.

    KM Safety Solution provides safety consultancy services and holds a 24-month distribution agreement, started in July 2026, for intelligent emergency-lighting control products in Hong Kong. SU Group said the acquisition is intended to “expand SU Group’s technology-enabled safety and security offerings,” with management saying KM’s operations and distribution rights complement SU Group’s existing security-engineering capabilities and support more integrated customer solutions.

    Why it matters

    The deal is a small one in dollar terms, but it reflects a broader pattern among regional security-services firms of adding adjacent life-safety product lines — like emergency lighting — to existing guarding and engineering businesses rather than staying narrowly focused on a single service category.

    Sources

  • Sen. Hawley Expands AI Surveillance-Camera Probe to Motorola Solutions, Verkada and Axon

    Sen. Hawley Expands AI Surveillance-Camera Probe to Motorola Solutions, Verkada and Axon

    Senator Josh Hawley, a Missouri Republican who chairs the Senate Subcommittee on Crime and Counterterrorism, sent letters to the chief executives of Motorola Solutions, Verkada and Axon in early September 2026, expanding an investigation he had previously directed at Flock Safety’s camera network to three additional companies that operate AI-assisted surveillance camera systems. The letters gave the companies until September 16 to respond.

    According to Hawley’s office, the letters state that the companies “are building large camera networks, assisted by artificial intelligence, that intrude on the privacy of all Americans.” The senator requested information on the geographic scope of searches customers can run for vehicle or driver data, how long that data is retained, confirmed cases of misuse since 2021, and the safeguards governing who can search the systems and why.

    Why it matters

    The probe puts four of the largest AI-assisted camera and license-plate-recognition networks under the same congressional scrutiny at once, and the specific questions — retention periods, search scope, documented misuse — track closely with the data-governance practices state and local agencies are increasingly asked to justify when they deploy these systems.

    Sources

  • Agility Robotics Unveils Digit 5, a Humanoid Built to Work Without Safety Cages

    Agility Robotics Unveils Digit 5, a Humanoid Built to Work Without Safety Cages

    Agility Robotics unveiled Digit 5, the fifth generation of its general-purpose humanoid robot and the company’s first designed for what it calls “cooperatively safe work at scale” — operating alongside people without the physical safety cages traditional industrial robots require. The robot uses sensors, human-detection and independent motion control to stop or reposition itself when a person moves into its workspace, rather than relying on fixed barriers to keep people out.

    Digit 5 stands 5 feet 11 inches tall, weighs 284 pounds and can reach up to 7.2 feet, with grippers that let it lift up to 50 pounds repeatedly and recharge in nine minutes for shifts the company says can run more than 20 hours a day. Agility reports more than $300 million in multi-year customer orders as of May 2026 and says it plans to make Digit available for commercial deployment outside North America for the first time, starting with the EU and UK, with CE and other regional certification marks.

    Why it matters

    Most humanoid and industrial robots still depend on fenced-off work cells to keep people safe; a robot engineered to share floor space with workers without that barrier changes the layout calculus for warehouses and factories, and shifts more of the safety burden onto the robot’s own sensing and control systems rather than the facility’s physical design.

    Sources

  • Drone Strikes on Saudi Arabia’s East-West Pipeline Expose a Critical Bypass Route

    Drone Strikes on Saudi Arabia’s East-West Pipeline Expose a Critical Bypass Route

    A series of drone strikes hit Saudi Arabia’s East-West Crude Oil Pipeline in the Riyadh and Medina regions on the morning of September 10-11, 2026, causing fires and damage to pump stations and injuring several people, according to the Saudi government. Saudi authorities shut the 1,200-kilometer pipeline as a precautionary measure. No group had claimed responsibility for the strikes as of this writing, and officials said the drones were launched from Iraqi territory amid the wider 2026 Iran war.

    The pipeline had taken on outsized importance in the weeks before the attack: with the Strait of Hormuz effectively closed by Iran, Saudi Arabia had been rerouting roughly 5 million barrels of oil per day through the East-West pipeline to the Red Sea port of Yanbu instead of the Gulf. The strikes cut off a critical bypass route for Saudi crude exports at a moment when alternative shipping capacity was already constrained.

    Why it matters

    The attack illustrates how a single above-ground pipeline corridor can become a single point of failure for a country’s export capacity once its primary maritime route is blocked — pump stations and above-ground infrastructure along long-haul pipelines are difficult to defend comprehensively against low-cost drone strikes.

    Sources

  • Plugin4Shell: Same Zero-Click RCE Flaw Hits Claude Code, Codex, Copilot and Gemini CLI

    Plugin4Shell: Same Zero-Click RCE Flaw Hits Claude Code, Codex, Copilot and Gemini CLI

    Security researchers disclosed a zero-click remote-code-execution flaw, dubbed Plugin4Shell, affecting the plugin-installation logic shared by four major AI coding agents: Claude Code, OpenAI Codex, GitHub Copilot and Gemini CLI. Researchers describe it as the first supply-chain vulnerability found across the AI coding agent ecosystem, giving an attacker who exploits it the same system and data access as the developer running the agent.

    The flaw lies in how these tools handle SHA-pinned plugin versions: marketplaces pin a plugin to a specific Git commit hash after review, but for Claude Code, Codex and Copilot, an attacker can create a branch whose name matches that 40-character commit hash, and Git may check out the attacker-controlled branch instead of the reviewed commit. Gemini CLI has a related variant that abuses a branch named FETCH_HEAD to redirect the checkout. Anthropic patched Claude Code in version 2.1.179 and OpenAI fixed Codex in version 0.146.0. Microsoft has not yet shipped a fix for Copilot, and Google chose to deprecate Gemini CLI rather than patch it, leaving existing installs exposed indefinitely.

    Why it matters

    AI coding agents now run with broad repository and system access inside many development pipelines; a shared flaw in how four of the most widely used agents install plugins means a single exploitation technique can reach into a large share of the software supply chain that depends on them.

    Sources