We’re Tracking the Future of Security

Category: News

Current, event-driven reporting, announcements and industry developments.

  • Rapid Response Monitoring Expands Henderson, Nevada Facility, Plans 75 New Jobs

    Rapid Response Monitoring Expands Henderson, Nevada Facility, Plans 75 New Jobs

    Rapid Response Monitoring Services is expanding its central-station operations in Henderson, Nevada, adding roughly 12,000 square feet of leased space and planning to create 75 full-time jobs at the facility over the next two years.

    Investment in Local Operations

    The expansion includes tenant improvements and a $600,000 capital investment in equipment and facility upgrades. The new hiring is expected to grow the Henderson site’s headcount to approximately 240 employees supporting the company’s nationwide Response Management Platform.

    Founded in 1992 and headquartered in Syracuse, New York, Rapid Response protects more than 4 million subscriber accounts across the United States and Canada, combining monitoring technology, artificial intelligence and trained response specialists to process alarm signals and coordinate emergency response.

    “Nevada represents an important part of Rapid’s long-term growth strategy,” said David Pida, chief financial officer at Rapid Response Monitoring. “As the company expands its operational footprint in the state, Rapid is committed to creating high-quality careers, investing in advanced technology, and building lasting partnerships that contribute to the economic vitality of the communities it serves.”

    A Welcome Addition for the City

    Henderson Mayor Michelle Romero welcomed the continued investment, saying it reinforces the city’s position as a destination for business growth. “Their continued growth strengthens our local economy, creates valuable job opportunities, and reinforces Henderson as a premier destination for business,” Romero said.

  • Overhead Door Corp. Acquires Motion Access, Expanding Horton’s Pedestrian Access Business

    Overhead Door Corp. Acquires Motion Access, Expanding Horton’s Pedestrian Access Business

    Overhead Door Corp. has acquired the assets of Motion Access, an Elk Grove Village, Illinois-based provider of automatic pedestrian door operators, replacement parts, retrofit solutions and rebuilt equipment. Motion Access will continue operating under its existing name as part of Horton Automatics, the premium access brand within Horton Pedestrian Access Solutions, a division of Overhead Door Corp.

    Strengthening Aftermarket and Service Capacity

    Overhead Door said the deal expands Horton’s aftermarket, service and retrofit capabilities for automatic pedestrian door solutions across North America, adding a company that has built its reputation serving automatic door professionals nationwide.

    “Motion Access has earned a reputation as a trusted provider of automatic entrance solutions, and we are excited to welcome their team into the Horton family,” said Kelly Terry, president and CEO of Overhead Door Corp. “This acquisition strengthens our aftermarket and service capabilities, expands our product offering, and reinforces our commitment to delivering innovative solutions and exceptional support to customers throughout North America.”

    Motion Access owners Joseph Madden, Robert Oakley, Gilbert Valencia and Michael Valencia said in a joint statement that finding the right long-term home for the business was one of the most important decisions they had made as owners, and that joining Horton creates new opportunities for employees and customers.

    Part of a Broader Pedestrian Access Portfolio

    Horton Pedestrian Access Solutions, which also operates the WonDoor brand, runs multiple manufacturing and service locations and works with more than 200 distribution partners across North America. Lewisville, Texas-based Overhead Door Corp., a subsidiary of Tokyo-based Sanwa Holdings Corp., serves more than 4,500 professional distribution partners across residential, commercial, institutional and industrial access markets.

  • Epson and STOPware Partner on On-Demand Color Visitor Badge Printing

    Epson and STOPware Partner on On-Demand Color Visitor Badge Printing

    Epson and visitor management software provider STOPware have announced a partnership integrating Epson’s ColorWorks on-demand color printing technology with STOPware’s PassagePoint platform, allowing organizations to produce full-color, photo-ready visitor badges in real time at sign-in.

    Color as a Security and Workflow Tool

    The integration pairs Epson’s CW-C4000 and CW-C6000 ColorWorks printers with PassagePoint to generate badges featuring visitor photos, color-coded access levels, department or zone identifiers, branding elements, and QR codes or barcodes for check-in, check-out tracking and access control integration.

    According to the companies, color coding helps front-line staff quickly distinguish visitors, contractors, vendors and temporary staff, and can visually flag which building zones a given badge is authorized to access. Full-color photos on the badge itself are also intended to reduce the risk of badge cloning or reuse.

    “We’re seeing firsthand that on-demand, full-color badge printing can help enable safer and faster access decisions, especially in high-traffic environments like hospitals, schools, corporate campuses or government facilities,” said Michael Weitz, product manager for ColorWorks at Epson America.

    Removing Pre-Printed Badge Inventory

    Because badges are printed on demand rather than drawn from pre-printed stock, organizations using the integration no longer need to maintain separate badge inventories or manually restock supplies, and every badge reflects current visit information and access policy.

    “Visitor badges are a frontline tool in ensuring building safety,” said Debbie Pendleton, chief operating officer of STOPware. “By combining ColorWorks color printing technology with STOPware’s platform, organizations gain instantaneous visual clarity and robust identification without slowing down visitor flow.”

  • CISA Flags Active Exploitation of LiteLLM and Starlette Flaws in First AI-Heavy KEV Batch

    CISA Flags Active Exploitation of LiteLLM and Starlette Flaws in First AI-Heavy KEV Batch

    The Cybersecurity and Infrastructure Security Agency added seven vulnerabilities to its Known Exploited Vulnerabilities catalog on Sept. 2, 2026, based on evidence of active exploitation. Three of the seven affect artificial intelligence and machine learning infrastructure — the first KEV batch in which AI-related components make up nearly half the additions.

    Authentication Bypass in a Widely Used AI Gateway

    The most significant of the AI-related entries is CVE-2026-59822, an improper-authentication flaw in LiteLLM, an open-source proxy server that routes calls to large language model APIs. According to the National Vulnerability Database, versions of LiteLLM prior to 1.84.0 allowed an unauthenticated attacker to submit a fabricated bearer token to the product’s Model Context Protocol Streamable HTTP endpoint, triggering an OAuth2 fallback path that granted access without a valid key. The flaw is fixed in version 1.84.0 and carries a CVSS score of 8.8.

    CISA also added CVE-2026-48710, an HTTP request/response smuggling vulnerability in the Starlette web framework that underlies the popular FastAPI toolkit used to build many AI agent and API services. Because Starlette typically ships as a transitive dependency of FastAPI rather than a direct one, researchers tracking the issue note it rarely appears in software inventories, making dependency lockfile scanning the more reliable way to detect exposure. A third AI-adjacent flaw affects JFrog Artifactory, a package repository manager widely used in AI development pipelines to store and distribute models and dependencies.

    Agentic Infrastructure Becomes a Target

    Security researchers at Microsoft and Wiz say the exploitation activity reflects a broader shift toward targeting AI infrastructure components — including LLM gateways, vector databases and MCP servers — to steal API keys, gain backend access, and monetize compromised hosts, in some cases through cryptocurrency mining.

    Under Binding Operational Directive 26-04, federal civilian agencies must remediate most of the newly added vulnerabilities by Sept. 5, 2026, while the Starlette and LiteLLM flaws carry a Sept. 16, 2026 deadline. CISA continues to recommend that all organizations, not just federal agencies, prioritize patching KEV Catalog entries as part of routine vulnerability management.

  • IQSIGHT Names Michael Schulte Chief Executive Officer

    IQSIGHT Names Michael Schulte Chief Executive Officer

    IQSIGHT, the video security business formerly known as Bosch Video Systems, has appointed Michael J. Schulte as chief executive officer, effective Sept. 1, 2026. Schulte will lead the company’s global operations and report to Chairman Steve Shine.

    A Veteran Operator Takes the Helm

    Schulte brings more than 30 years of leadership experience across technology, industrial and private-equity-backed businesses, including senior roles at Safe Fleet, Atkore International, Danaher Corporation and Boston Consulting Group. He holds an MBA from Harvard Business School.

    “IQSIGHT has a strong heritage, outstanding people and a compelling strategy,” Schulte said. “I am excited to join the team and build on the excellent work already underway. Together, we will focus on execution, innovation and creating even greater value for our customers, partners and employees.”

    Positioning for the Next Growth Phase

    Shine, who remains chairman and will work with Schulte on strategic direction, said the appointment follows months of work with the leadership team to define IQSIGHT’s direction following its transition from Bosch Video Systems.

    “Over the past months, we have worked closely with the leadership team to define a clear strategic direction for IQSIGHT and position the business for its next phase of growth,” Shine said. “With that foundation in place, this is the right time for Michael to take the helm.”

    The leadership change comes as IQSIGHT continues to build a standalone identity in the video security market, aiming to maintain continuity for existing customers and channel partners while pursuing global expansion.

  • Maximum-Severity SAP Commerce Cloud Flaw Targeted Days After Patch

    Maximum-Severity SAP Commerce Cloud Flaw Targeted Days After Patch

    A maximum-severity vulnerability in SAP Commerce Cloud is facing active exploitation attempts, according to threat intelligence firm Defused and reporting by Cybersecurity Dive and The Hacker News, only days after SAP issued a fix.

    A Default-Authentication Bypass Rated CVSS 10.0

    The flaw, tracked as CVE-2026-58231, is described by SAP and CVE.org as an improper authorization issue in the Commerce Cloud Data Hub Adapter that allows an unauthenticated attacker to abuse a default authentication client and submit crafted input to functions that lack sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, according to CVE.org’s description, affecting confidentiality, integrity and availability. SAP Commerce Cloud is an enterprise e-commerce platform widely used by retailers to run online storefronts.

    From Patch to Exploitation in Days

    SAP shipped the fix, detailed in Security Note 3771065, as part of its August 2026 Security Patch Day on August 11, 2026. Defused CEO Simo Kohonen told Cybersecurity Dive that the firm’s honeypots began recording exploitation activity just three days after the patch was released, and that, as of the firm’s report, only one threat actor appeared to have attempted exploitation, suggesting the activity is not yet widespread. Defused said no proof-of-concept had circulated publicly before this exploitation was observed.

    Why It Matters

    No specific breached retailer had been publicly confirmed as of the most recent reporting; coverage has focused on exploitation attempts and defensive urgency. Prior SAP vulnerabilities, including CVE-2025-31324 in NetWeaver, have previously been weaponized by China-nexus espionage groups and ransomware actors such as BianLian and RansomExx, according to The Hacker News, underscoring the importance of applying SAP’s patch immediately rather than waiting for a confirmed incident.

  • Security 101 Expands Southern California Reach With Silverstrand Technologies Acquisition

    Security 101 Expands Southern California Reach With Silverstrand Technologies Acquisition

    Security 101, a national provider of commercial electronic security solutions, announced on August 26, 2026 that it has acquired Silverstrand Technologies Inc., a San Diego-based systems integrator, according to Security 101’s own announcement and reporting by SDM Magazine and Security Info Watch.

    Strengthening the West Region

    Silverstrand has operated for 19 years, providing video surveillance, access control, structured cabling, wireless networking, sound masking and life safety solutions to commercial, government, hospitality, aviation and institutional clients across Southern California. The acquisition strengthens Security 101’s presence in the San Diego, Orange County, Los Angeles and Riverside markets and folds Silverstrand’s regional team into the company’s West Region operations.

    Local Team Stays in Place

    “Silverstrand is one of Southern California’s most respected technology integrators, with a culture centered on taking care of both employees and customers,” said Greg Daly, CEO of Security 101, in the announcement. “That focus mirrors our own. Bringing this team into the Security 101 organization strengthens our West Region and gives customers access to national resources delivered by the same local team they already trust.” Silverstrand founder Jeremy Johnson will remain with the operation as general manager, continuing to lead the team that built the company’s regional reputation.

    Part of a Broader Consolidation Trend

    The deal is the latest in a wave of consolidation among regional security integrators, as national platforms acquire established local firms to combine deep market relationships with broader technical portfolios and lifecycle support. Security 101, based in West Palm Beach, Florida and founded in 2005, delivers design, installation and maintenance of access control, video surveillance, intrusion detection, visitor management and managed services across healthcare, education, financial and government end markets nationwide.

  • L3Harris and ARX Robotics Mount Counter-Drone Sensors on Uncrewed Ground Vehicle

    L3Harris and ARX Robotics Mount Counter-Drone Sensors on Uncrewed Ground Vehicle

    L3Harris Technologies and ARX Robotics UK demonstrated a mobile counter-drone capability during the U.S. Army’s Project Convergence-Capstone 6 experimentation campaign, mounting L3Harris’ CORVUS-RAVEN counter-small uncrewed aircraft system onto ARX’s remotely controlled Gereon unmanned ground vehicle, according to a joint announcement published on L3Harris’ newsroom on August 27, 2026.

    Moving Sensors Closer to the Threat

    CORVUS-RAVEN is a lightweight, portable system that provides passive detection of drone threats out to four kilometers, along with bearing information fed into command-and-control and battle management applications, according to L3Harris’ product materials. By mounting the sensor on the Gereon UGV, the companies said the demonstration showed how robotic mobility can extend passive drone-detection coverage into forward or hazardous areas without placing personnel directly in those zones.

    An Open-Architecture Partnership

    “Project Convergence has allowed us to demonstrate how uncrewed ground systems can extend the reach of specialist capabilities without extending the risk to personnel,” said David Roberts, CEO of ARX Robotics UK, in the companies’ announcement. L3Harris said the collaboration reflects modular, open-architecture integration between an established defense contractor and an emerging robotics provider, and that lessons from the exercise at Fort Irwin, California will inform further development of combined counter-drone and uncrewed ground system capabilities.

    Context

    The demonstration is part of a broader push by defense and physical security organizations to pair ground robotics with counter-UAS sensing as drone threats to installations, personnel and critical infrastructure continue to grow. L3Harris said Project Convergence-Capstone 6 will help identify further opportunities to integrate counter-drone technology with robotic platforms across additional missions.

  • Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Records

    Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Records

    Thomson Reuters disclosed on September 2, 2026 that an unauthorized party obtained files from C-Track, the court case management platform sold by its West Publishing Corporation unit, in an intrusion the company says occurred in March 2026, according to Thomson Reuters’ own disclosure and reporting by Reuters and The Hacker News.

    Scope: 11 States, the U.S. Virgin Islands and Ontario

    West Publishing said it discovered the unauthorized activity on June 30, 2026 and notified affected courts and Ontario’s Ministry of the Attorney General between July 23 and July 27. According to the company’s notice, a subset of affected court records could contain individuals’ names, Social Security numbers, driver’s license numbers, dates of birth, medical information and health insurance information. Some states reported that only backup data was involved, while Ohio said its production platform was accessed; Montana and Minnesota said court documents themselves were not part of the accessed data, though the vendor’s notice indicates sealed material may have been affected for certain courts.

    Coordinated, Delayed Public Disclosure

    Public disclosure came more than two months after the affected courts and Ontario were notified. Montana officials said the September 2 disclosure date was chosen so that the vendor and the various affected states could issue simultaneous announcements. Thomson Reuters said it has found no evidence to date that the exposed data has been misused.

    Why It Matters

    Court case management platforms sit at a sensitive intersection of physical and information security: they hold sealed records, victim and witness information, and identity data whose exposure carries legal as well as privacy consequences. The incident underscores the exposure created by shared third-party software used across many independent government bodies, where a single vendor compromise can cascade into simultaneous notifications across multiple jurisdictions.

  • Maximum-Severity SonicWall SMA 1000 Flaws Under Active Exploitation, CISA Warns

    Maximum-Severity SonicWall SMA 1000 Flaws Under Active Exploitation, CISA Warns

    SonicWall disclosed on September 1, 2026 that two vulnerabilities in its SMA 1000 series secure remote access appliances are being actively exploited in the wild, according to the vendor’s own advisory, SNWLID-2026-0016, and confirmed by CISA, Rapid7 and Qualys Threat Protect.

    A Chainable Path to Unauthenticated RCE

    The more severe flaw, CVE-2026-83548, is a pre-authentication server-side request forgery (SSRF) vulnerability in the SMA 1000 Appliance Work Place interface, carrying the maximum possible CVSS score of 10.0. According to SonicWall’s advisory, an unintended alternate access path causes the appliance to act as an unintended forward proxy, letting a remote unauthenticated attacker reach sensitive functionality. Rapid7’s analysis found that this SSRF flaw can be chained with a second, high-severity OS command injection vulnerability in the Appliance Management Console, CVE-2026-83549, which normally requires authenticated administrator access, to achieve full unauthenticated remote code execution.

    Federal Deadline and Wide Exposure

    CISA added the flaw to its Known Exploited Vulnerabilities catalog and set a September 5, 2026 remediation deadline for federal civilian agencies. SonicWall SMA 1000 appliances are widely deployed as VPN and zero-trust access gateways by large enterprises, government agencies and managed service providers, making the appliance an attractive target given the level of internal network access it typically brokers.

    Response

    SonicWall has released a hotfix addressing CVE-2026-83548; the company states no workaround is available for organizations that cannot immediately patch. Security researchers recommend organizations apply the hotfix without delay, review SMA 1000 logs for signs of the unauthorized proxy behavior described in the advisory, and treat any indicators of compromise found before the patch was applied as a potential breach requiring further investigation.