We’re Tracking the Future of Security

Category: News

Current, event-driven reporting, announcements and industry developments.

  • SITA Launches Border Flow Lane, an In-Motion Biometric Border Check for Airports

    SITA Launches Border Flow Lane, an In-Motion Biometric Border Check for Airports

    SITA launched Border Flow Lane, a border-processing model that replaces stop-and-check passport control at gates, kiosks and officer stations with continuous, in-motion identity verification as travelers walk through the terminal. The company says the approach runs up to eight times faster than standard eGates and can clear more than 75% of passengers before their flight departs, freeing immigration officers to focus on non-routine cases while retaining full authority to stop any traveler.

    Toronto Pearson is piloting the system with Air Canada across four facial-verification gates — one for domestic travelers and three for U.S.-bound passengers — using Dormakaba hardware with middleware from SITA and Airsphere. For U.S.-bound flights, the reference image comes from the identity record created during U.S. preclearance; for domestic flights, it draws on the record generated through Air Canada’s app. Participation remains voluntary, and travelers can opt for standard document checks instead.

    Why it matters

    Airports have largely hit the physical limits of widening queues and adding staff to handle passenger growth; shifting identity verification earlier and making it continuous rather than a single stop-and-check event is one of the few remaining ways to add effective checkpoint capacity without new floor space.

    Sources

  • Oracle Ships Java 27 With Post-Quantum Hybrid Key Exchange for TLS 1.3

    Oracle Ships Java 27 With Post-Quantum Hybrid Key Exchange for TLS 1.3

    Oracle released Java 27, the platform’s second non-LTS update since JDK 25, headlined by JEP 527: Post-Quantum Hybrid Key Exchange for TLS 1.3. The feature implements the IETF’s Hybrid Key Exchange in TLS 1.3 specification, pairing a quantum-resistant key-exchange algorithm with a conventional one in the same handshake so a connection stays secure as long as either algorithm holds up. The release ships nine JEPs in total, five of which remain in preview or incubator status.

    The hybrid approach is designed to blunt “harvest now, decrypt later” attacks, in which adversaries capture encrypted traffic today and store it until a sufficiently powerful quantum computer can break the classical encryption protecting it. Because Java 27 combines the new algorithm with an existing one rather than replacing it outright, Oracle says organizations can adopt the protection with minimal disruption to existing TLS-dependent applications.

    Why it matters

    TLS underpins the great majority of encrypted communication between servers, applications and connected devices; building quantum-resistant key exchange into a mainstream runtime like Java gives large swaths of enterprise and industrial software a path to post-quantum protection without a wholesale cryptographic migration.

    Sources

  • Rohde & Schwarz Debuts QPS Walk500 Walk-Through Scanner for High-Traffic Events

    Rohde & Schwarz Debuts QPS Walk500 Walk-Through Scanner for High-Traffic Events

    Rohde & Schwarz will introduce the QPS Walk500, a new walk-through security scanner aimed at high-throughput venues, at Security Expo 2026 in Essen (September 22-25, Booth 6C39, Hall 6). The scanner is a more compact addition to the company’s QPS Walk product line, sitting below the existing QPS Walk2000, and is built for event security where large crowds need to move through checkpoints quickly.

    The QPS Walk500 combines millimeter-wave imaging with AI-based detection algorithms to identify metals, plastics, liquids, granules, organic materials and ceramics, and can screen up to 750 people per hour without requiring visitors to stop, empty pockets or remove outerwear. Detected items are flagged on a neutral avatar so staff can direct a follow-up check to the specific area of concern, and an optional hand-masking mode lets people continue holding phones or wallets during screening. Rohde & Schwarz positions the scanner for aviation, border crossings, data centers, correctional facilities, critical infrastructure sites and large public events.

    Why it matters

    Walk-through screening that does not require people to stop or shed clothing addresses one of the main throughput bottlenecks at stadiums, transit hubs and other high-footfall venues, where queue time at checkpoints is often the limiting factor on how many people a site can screen per hour.

    Sources

  • Leonardo and Marshall Unveil Containerised Falcon Shield Counter-Drone System

    Leonardo and Marshall Unveil Containerised Falcon Shield Counter-Drone System

    Leonardo and Marshall Land Systems unveiled a containerised configuration of Leonardo’s Falcon Shield counter-uncrewed aircraft system (C-UAS) at the Defence Vehicle Dynamics (DVD) show. The new package integrates Leonardo’s HYAS command-and-control system and Nerio ultra-long-range surveillance and target-acquisition sensor inside a standard ISO shipping container, so the whole detect-and-defeat stack can move by air, land or sea and be set up wherever protection is needed.

    The containerised system keeps Falcon Shield’s open architecture, which can integrate radar, electronic-surveillance sensors and electro-optical/infrared cameras alongside kinetic and non-kinetic effectors, and multiple units can be networked for layered coverage. Falcon Shield is already in service with the UK Royal Air Force — where the system is designated Orcus and has protected major international events — and with the Canadian Armed Forces.

    Why it matters

    Packaging a full C-UAS detect-track-identify-defeat chain into a standard shipping container turns counter-drone protection into something that can be trucked or shipped to a temporary site — an airbase, a border crossing, a major event — and stood up quickly rather than requiring a fixed installation.

    Sources

  • CISA Advisory Flags Two Critical Flaws in Hitachi Energy Grid Control Platform

    CISA Advisory Flags Two Critical Flaws in Hitachi Energy Grid Control Platform

    CISA published an advisory covering five vulnerabilities in Hitachi Energy’s FACTS Control Platform (FCP), software used to manage Flexible AC Transmission Systems that stabilize voltage and power flow on electric grids. Two of the flaws, CVE-2024-4872 and CVE-2024-3980, are rated 9.9 (Critical) on the CVSS v3.1 scale; a third, CVE-2024-7940, is rated 8.3 (High); a fourth, CVE-2024-3982, is rated 8.2 (High); and a fifth, CVE-2024-7941, is rated 4.3 (Medium).

    According to CISA, the flaws include improper neutralization of special elements in data query logic, path traversal, authentication bypass by capture-replay, missing authentication for a critical function, and open redirect. An authenticated attacker could chain these to inject code, access critical files, hijack sessions, bypass authentication or run phishing attacks against operators. Hitachi Energy says only FCP deployments with the GWS component installed since 2020 are affected, spanning FCP versions 3.4.0 through 4.1.1. The company’s advisory 8DBD000229 outlines remediation; interim mitigations include isolating control systems behind firewalls, requiring VPNs for remote access and enforcing strong password policies.

    Why it matters

    FACTS platforms sit inside the control layer that keeps transmission voltage stable — CISA lists the affected sector as Energy, and a successful chained exploit could let an authenticated attacker manipulate grid-stabilization logic rather than simply steal data.

    Sources

  • Sam Altman’s World Launches Iris-Verified ‘World Money’ App Across 150+ Countries

    Sam Altman’s World Launches Iris-Verified ‘World Money’ App Across 150+ Countries

    World, the identity and cryptocurrency project from Tools for Humanity co-founded by Sam Altman and Alex Blania, launched “World Money,” a self-custodial financial app now live in more than 150 countries supporting balances in eight currencies. The app integrates Stripe for converting Apple Pay funds to stablecoins, Circle’s USDC, Bridge for virtual bank and payroll accounts, Morpho for yield, and Kalshi for prediction-market trading.

    World ID, the platform’s iris-scan-based biometric identity credential, is positioned as an anti-fraud and anti-fake-account layer, with verified users unlocking additional rewards within the app. The launch extends World’s biometric identity infrastructure — built primarily to prove a user is a unique human rather than a bot — into mainstream consumer payments and cross-border finance.

    Why it matters

    Tying a biometric identity credential directly to a payments app is a significant step in normalizing iris-scan verification for everyday financial transactions, a use case with different privacy and consent stakes than the anti-bot verification World was originally built for.

    Sources

  • Texas School District Rolls Out AI Weapons-Detection Scanners at Elementary and Middle School Entrances

    Texas School District Rolls Out AI Weapons-Detection Scanners at Elementary and Middle School Entrances

    Center Independent School District in Texas is deploying AI-based weapons-detection scanners at every student and visitor entry point across three campuses, phasing the rollout in day by day: F.L. Moffett Elementary, Center Elementary and Center Middle School. Superintendent Jake Henson described the deployment as “a proactive measure … designed to provide an additional layer of safety and security for our students, staff, and visitors.”

    The district released an explanatory video covering how the system works and outlining new entry procedures for students and visitors adjusting to the scanners. No cost or budget figures were disclosed publicly alongside the rollout.

    Why it matters

    AI weapons-detection scanners are becoming a routine capital purchase for US school districts, but they also raise questions — being litigated elsewhere — about liability when a system misses a threat, making transparent rollout communication like this district’s explainer video part of managing that risk.

    Sources

  • CISA Flags Command-Injection and SQL Injection Flaws in Schneider Electric NetBotz Monitors

    CISA Flags Command-Injection and SQL Injection Flaws in Schneider Electric NetBotz Monitors

    CISA published an advisory covering two vulnerabilities in Schneider Electric’s NetBotz 5 appliances, which provide video, door-contact, leak, smoke, vibration, temperature and humidity monitoring for data centers and industrial facilities. CVE-2026-13336 is an OS command-injection flaw reachable through a maliciously modified backup-restore file, rated 6.4 (Medium) on the CVSS v3.1 scale. CVE-2026-13337 is a SQL injection flaw in the appliance’s web interface, rated 4.6 (Medium).

    Both vulnerabilities affect NetBotz software versions 5.5.2 and earlier. Schneider Electric has released version 5.6.0 to remediate both issues. CISA lists the affected sectors as Commercial Facilities, Critical Manufacturing and Information Technology, with unpatched devices at risk of arbitrary code execution, device manipulation or unauthorized data access.

    Why it matters

    NetBotz appliances are themselves security and environmental monitoring equipment installed inside data centers — a vulnerability in the monitor undermines the very physical-security function the device is deployed to provide.

    Sources

  • FERC Approves Tougher NERC Physical Security Standard for Critical Power Substations

    FERC Approves Tougher NERC Physical Security Standard for Critical Power Substations

    The Federal Energy Regulatory Commission has approved a revised reliability standard, CIP-014-4, developed by the North American Electric Reliability Corporation to strengthen physical security requirements for critical bulk-power transmission substations and control centers. The standard applies to facilities whose loss or damage could trigger cascading failures across the grid, and the revision tightens the timelines utilities must follow when conducting risk assessments of those facilities.

    The order also clarifies which facilities fall under the standard’s scope and increases the rigor required for third-party verification of risk and vulnerability evaluations. FERC simultaneously approved retirement of the prior standard, CIP-014-3, with utilities given a multi-year runway to reach compliance with the new requirements.

    Why it matters

    Physical attacks on substations — from gunfire to intrusion — have repeatedly knocked out power to thousands of customers in recent years; a tighter, more consistently enforced risk-assessment standard is meant to close gaps in which facilities utilities have historically been required to protect.

    Sources

  • Coast Guard and FBI Board Oil Tankers After Cyberattacks Reach Engine-Room Systems

    Coast Guard and FBI Board Oil Tankers After Cyberattacks Reach Engine-Room Systems

    The US Coast Guard and FBI boarded at least two foreign-flagged, US-bound oil tankers in the Gulf of Mexico — including the Liberian-flagged VL Prosperity — on August 21 and August 24, 2026, after detecting evidence that the vessels’ onboard networks had been compromised. Coast Guard Rear Adm. Amy Grable confirmed “evidence of a malicious cyber actor” on the ship’s IT/OT systems, though the Coast Guard has not attributed the intrusion to any state actor. A joint team of Coast Guard cyber specialists, a vessel inspector and an FBI Cyber Action Team spent four days aboard the VL Prosperity.

    Iran’s Mehr News Agency separately reported that the VL Prosperity suffered a cyberattack on August 7 while transiting the Strait of Gibraltar, alleging the intrusion reached engine-room systems — altering coolant flow, engine speed and fuel delivery — and knocked out communications for roughly 30 hours; those specific technical claims have not been confirmed by the Coast Guard. Officials say there is no evidence the vessels operated unsafely, and the Coast Guard says it has conducted an estimated 40-50 similar cyber-related boardings over the past year.

    Why it matters

    Commercial vessels increasingly run networked engine, navigation and fuel-management systems that were not designed with the same threat model as IT networks — an attacker reaching those systems mid-voyage, even briefly, raises the kind of physical-safety stakes that a typical office network breach does not.

    Sources