We’re Tracking the Future of Security

Category: News

Current, event-driven reporting, announcements and industry developments.

  • Dataminr Launches Agentic AI Tools for Corporate Security Threat Assessment

    Dataminr Launches Agentic AI Tools for Corporate Security Threat Assessment

    Dataminr launched Dataminr Advanced for Corporate Security at GSX 2026 in Atlanta, adding three artificial intelligence capabilities intended to help security teams assess threats to personnel, facilities and operations, according to Security Today. The company is demonstrating the platform at booth 1560 during the September 14-16 event at the Georgia World Congress Center.

    The release includes Agentic Corroboration, which gathers information to help verify developing events, and Agentic Context, which searches publicly available information and Dataminr’s event archive for material related to an incident. A third capability, Near-Term Predictive Intelligence, analyzes the company’s historical event archive to forecast how an emerging threat could develop.

    Dataminr said all three capabilities are now generally available and integrate with its existing real-time alerting system and ReGenAI Live Briefs feature. The company said the system draws on more than 60 task-specific large language models trained on an event archive spanning more than a decade, with multimodal technology capable of processing text, images, video and audio.

    Why it matters

    Corporate security operations centers are increasingly judged on how fast they can verify a developing event, not just detect it; agentic corroboration tools aim at that verification bottleneck specifically, though outcomes will depend on false-positive rates in real deployments.

    Sources

  • Honeywell Showcases LenelS2 Access Control and AI-Driven Security Integration at GSX 2026

    Honeywell Showcases LenelS2 Access Control and AI-Driven Security Integration at GSX 2026

    Honeywell Technologies is presenting updates across its physical security portfolio at GSX 2026 in Atlanta, including access control, video management, visitor processing and security operations systems, according to Security Today.

    The company is demonstrating LenelS2 OnGuard v8.4 integrated with Milestone’s video management system, connecting access control with video and other third-party security platforms, alongside LenelS2 NetBox v6.4 paired with a 35 Series embedded network video recorder. Honeywell is also showing Pro-Watch v6.6 SP1 with MAXPRO VMS R795 SP3 for managing access control and video across local, regional or global operations, and cloud-based tools including LenelS2 Elements and an integration with Rhombus that combines cloud video, access events and artificial intelligence analytics in one interface.

    Additional exhibits include LenelS2 BlueDiamond readers and mobile credentials, SINE visitor and contractor check-in tools, and camera lines spanning low-light, dual-sensor, outdoor and bi-spectrum models. Honeywell is previewing its LenelS2 Adaptive Intelligence Suite with Forge Cognition, which integrates video, access control, fire detection and building data with artificial intelligence functions for event validation and false-alarm detection.

    Why it matters

    The push to unify access control, video and fire data behind one AI layer reflects a broader industry trend toward consolidated operations platforms rather than siloed subsystems, with false-alarm reduction as an early, measurable use case.

    Sources

  • CISA Flags Critical Authentication Flaw in mySCADA myPRO Manager Used in Water, Energy Systems

    CISA Flags Critical Authentication Flaw in mySCADA myPRO Manager Used in Water, Energy Systems

    CISA released an advisory on September 15 warning of two vulnerabilities in mySCADA myPRO Manager, industrial control software from Czechia-based mySCADA Technologies that is deployed worldwide across the critical manufacturing, energy, food and agriculture, transportation, and water and wastewater sectors.

    The more severe flaw, CVE-2026-73807, carries a CVSS v3.1 score of 9.8, near the maximum critical rating. CISA said the myPRO Manager command application programming interface fails to properly enforce authentication for privileged functions, meaning an unauthenticated attacker with network access to the API could reach privileged management capabilities without credentials. A second flaw, CVE-2026-82567, allows an unauthenticated attacker to send arbitrary SMS messages through a GSM modem connected to the software’s notification gateway.

    mySCADA Technologies has addressed both issues in myPRO Manager version 2.2 and is notifying connected users of the update, according to the advisory. The vulnerabilities were reported to CISA by Shirshak Secnora OU. CISA said it has not observed public exploitation of the flaws to date but urged operators to minimize internet exposure of control system devices, isolate them behind firewalls, and use virtual private networks for any required remote access.

    Why it matters

    myPRO Manager sits inside operational technology environments spanning energy, water and transportation, where an unauthenticated privilege gap can translate directly into physical-process risk. Asset owners should apply version 2.2 and re-confirm remote-access paths rather than assume perimeter isolation is already in place.

    Sources

  • CISA Warns of Critical Flaws in Digital Watchdog VMAX Video Recorders

    CISA Warns of Critical Flaws in Digital Watchdog VMAX Video Recorders

    The Cybersecurity and Infrastructure Security Agency (CISA) published an advisory on September 15 detailing six vulnerabilities in Digital Watchdog’s VMAX A1 G4 and VMAX IP G4 digital and network video recorder lineups, including its VA1G4 and VG4 recorder models. According to CISA, successful exploitation could grant an attacker full administrative control of an affected device, enabling access to live and recorded surveillance footage, alteration of device configurations, and use of the recorder as a pivot point into a broader network.

    Two of the flaws, tracked as CVE-2026-66890 and CVE-2026-66887, received a CVSS v3.1 severity score of 9.6 out of 10, in the critical range. CISA said the issues include missing authentication for critical functions, use of hard-coded credentials, missing authorization checks on state-changing requests, and a predictable random-number generator used to create session tokens. The vulnerabilities were reported to CISA by researcher Scot Berner of TrustedSec.

    Digital Watchdog products are deployed worldwide across commercial facilities, government buildings, healthcare and transportation sites, according to CISA’s sector tagging. The company has released updated firmware addressing the vulnerabilities, available through its website, CISA said. The agency recommends isolating control system devices from the internet and placing them behind firewalls, and noted that no public exploitation of the flaws has been reported to date.

    Why it matters

    Recorders sit at the center of a facility’s video evidence chain; a fully compromised DVR/NVR can expose live and archived footage and serve as a foothold into the wider network. Operators running affected VMAX models should prioritize the firmware update and confirm the devices are not internet-exposed.

    Sources

  • CBP Seeks Walk-Through Facial Comparison Systems for 38 Airport Terminals

    CBP Seeks Walk-Through Facial Comparison Systems for 38 Airport Terminals

    U.S. Customs and Border Protection has issued a solicitation for biometric capture lanes intended to photograph Global Entry travelers while they continue walking through airport arrival areas. The procurement covers 38 terminal installations at 30 airports, including several sites with more than one terminal.

    The requested system would capture and transmit facial images while CBP’s Traveler Verification Service, or a successor government platform, performs matching and identity adjudication. Public documents describe a movable archway or comparable structure with cameras, lighting where needed and protected electrical and data wiring.

    The solicitation contains availability, throughput and image-quality requirements, but it does not publish an estimated contract value. It also includes privacy, civil-rights, data-security and AI risk-management conditions; those requirements are procurement terms, not evidence that a system has already been selected or deployed.

    Why it matters

    Continuous-flow biometrics may reduce passenger stops, but they shift design pressure to capture quality, exception handling and transparent governance. Airport operators need to plan for travelers who cannot be matched as well as those cleared automatically.

    For wider context, see SectechMedia’s related technical coverage.

    Sources

  • Thales Launches UK-Hosted Luna Cloud HSM Service

    Thales Launches UK-Hosted Luna Cloud HSM Service

    Thales announced on September 14 a UK-hosted version of Luna Cloud HSM, its hardware-security-module capability delivered as a cloud service. The company says customer keys can be generated, stored, used, backed up and destroyed within UK-hosted infrastructure.

    Two UK instances are intended to support availability and disaster recovery within the country. The service is positioned for organizations that need to separate the location of application data from control of the cryptographic keys used to protect it.

    Claims about service architecture and compliance originate with Thales and should be treated as vendor statements unless checked against the relevant independent validation records and customer-specific configuration. UK hosting also does not remove the need for access governance, backup policy and key-lifecycle controls.

    Why it matters

    Data residency answers where data is stored; key sovereignty asks who can authorize decryption and under which jurisdiction. Regulated organizations increasingly need evidence for both questions when evaluating cloud security architecture.

    For wider context, see SectechMedia’s related technical coverage.

    Sources

  • Indonesia Says IKD Digital ID Has Passed 20.5 Million Users

    Indonesia Says IKD Digital ID Has Passed 20.5 Million Users

    Indonesia’s Directorate General of Population and Civil Registration says 20,598,478 residents had activated Identitas Kependudukan Digital, or IKD, by the first half of 2026. The authority presented the figure alongside broader electronic identity registration data.

    The official account describes IKD as a gateway to multiple public services rather than only a digital copy of a physical identity card. Biometric Update separately reported the figures and noted continuing barriers involving connectivity, smartphone access and digital literacy.

    Adoption counts show reach, not security performance. They do not on their own demonstrate fraud resistance, service availability or equitable access, and those outcomes need separate operational evidence.

    Why it matters

    National digital identity becomes critical infrastructure as more services depend on it. Growth should be matched by resilient enrollment, secure account recovery, accessible alternatives and clear governance for verification data shared across agencies.

    For wider context, see SectechMedia’s related technical coverage.

    Sources

  • South Africa Seeks Facial Recognition for Police Body and Dashboard Cameras

    South Africa Seeks Facial Recognition for Police Body and Dashboard Cameras

    South Africa’s State Information Technology Agency is seeking a supplier for body-worn cameras, vehicle dashboard cameras and supporting software for the national police. Public tender information describes facial recognition, automatic number-plate recognition and integration with other security platforms.

    The procurement is described as a three-year contract including training and maintenance. Public documents cited in the reporting do not state a target budget or a final camera quantity, so those fields remain unknown rather than estimated.

    Biometric Update also highlighted unresolved governance questions around police processing of biometric footage. Procurement requirements establish desired technical functions; they do not by themselves demonstrate that privacy, retention, accuracy and redress rules are complete.

    Why it matters

    Body-camera programs combine evidentiary, operational and civil-rights requirements. Buyers need measurable image-quality and audit controls as well as explicit policies for face searching, retention, access and disclosure before deployment.

    For wider context, see SectechMedia’s related technical coverage.

    Sources

  • Google Pay and Mastercard Plan Device-Biometric Card Payments in India

    Google Pay and Mastercard Plan Device-Biometric Card Payments in India

    Mastercard and Google Pay plan to introduce optional device-biometric approval for eligible card payments in India. Participating customers would use the fingerprint, face recognition or passcode already configured on their phone to approve supported transactions.

    The companies previewed the capability at Global Fintech Fest and expect rollout to begin by the end of 2026. Participating issuers and eligible card products have not yet been publicly specified, so availability should not be described as nationwide or universal.

    The design uses a consumer-device cardholder verification method and is separate from payment tokenization. Tokenization protects card details used in a transaction; local biometric or passcode verification confirms that the person operating the device is authorized to approve it.

    Why it matters

    India’s updated payment-authentication directions allow alternatives to SMS one-time passwords while retaining multi-factor requirements. Device-based verification can improve usability, but secure enrollment, fallback and issuer risk controls remain essential.

    For wider context, see SectechMedia’s related technical coverage.

    Sources

  • Ukraine Considers Unified Biometrics Law to Align With EU Rules

    Ukraine Considers Unified Biometrics Law to Align With EU Rules

    Ukraine is considering a comprehensive law to standardize how biometric data is defined, collected, stored, accessed and overseen. Reporting on a parliamentary study says the current framework is spread across multiple laws and subordinate acts, creating inconsistent terminology and controls.

    The study recommends clearer processing purposes, retention rules, human-rights safeguards, independent oversight and security and interoperability requirements. It also calls for special treatment of automated facial recognition in law-enforcement and security contexts.

    The proposals are part of a policy process rather than an enacted law. Claims about future obligations therefore need to remain conditional until Ukraine adopts final legislation and publishes its operative text.

    Why it matters

    Unified definitions matter because biometric governance cannot be enforced consistently when agencies use different scopes, retention periods or access rules. Interoperability goals also need privacy, audit and redress mechanisms to avoid turning technical integration into uncontrolled data sharing.

    For wider context, see SectechMedia’s related technical coverage.

    Sources