A large-scale npm supply-chain campaign has been linked to an emerging cryptojacking operation targeting rented GPUs, after researchers found both operations using the same command-and-control infrastructure. Cybersecurity researchers at CloudSEK said a single npm account, @prime0, published 85 typosquatted packages…
Ontario airport deploys private 5G for security and perimeter monitoring
Boldyn Networks has been selected to design, build and operate a private wireless network at Ontario International Airport in California, with the initial deployment focused on physical security and perimeter intrusion detection. The network will combine private 4G and 5G…
Camera hack highlights physical security risks for IoT
Cybersecurity experts are warning that the hack of an automatic number plate recognition camera highlights the need for manufacturers to focus on physical device security as well as protecting connected systems from remote attacks. The comments follow a WIRED and…
IoT Insider webinar: Cyber Resilience Act puts lifetime security responsibility on manufacturers
The EU’s Cyber Resilience Act (CRA) is forcing IoT manufacturers to rethink cybersecurity as an ongoing responsibility rather than a one-off compliance exercise, according to industry experts speaking at an IoT Insider webinar that is now available to watch on…
GOV.UK rolls out passkeys to 23 million One Login users
The UK government is rolling out passkeys to more than 23 million GOV.UK One Login users, as it moves to replace passwords with phishing-resistant authentication across its digital services. Nearly one in 10 daily GOV.UK sign-ins are already being made…
Exein raises $270m to secure connected and autonomous devices
Italian cybersecurity company Exein has raised $270m at a valuation of $1.7bn as it expands its security technology from connected devices into robots, autonomous vehicles and other AI-enabled machines. The funding round, led by Headline with participation from existing and…
Trusted Computing Group and DMTF strengthen hardware-backed device security
The Trusted Computing Group (TCG) and DMTF have combined their security technologies in an open-source implementation that allows devices to use Trusted Platform Modules (TPMs) for hardware-backed authentication and attestation. DMTF has added a TPM backend to libspdm, its open-source…
Silicon Motion reaches initial milestone in EU Cyber Resilience Act
Silicon Motion Technology has completed the first stage of its compliance program for the European Union Cyber Resilience Act (CRA). Following a comprehensive internal assessment, the company has aligned its product cybersecurity controls and processes with the CRA’s incident-reporting obligations…
Half of companies form teams to prepare for Cyber Resilience Act
More than half of German industrial companies have assigned dedicated staff to prepare for the European Union’s Cyber Resilience Act, as manufacturers of connected products face growing pressure to overhaul cybersecurity processes and product development. A survey of 200 German…
Unchecked AI agents raise new security risks for connected businesses
Businesses are increasingly deploying AI tools and agents without the oversight of IT teams, raising the risk of data exposure and unsafe behaviour as autonomous systems gain access to corporate networks and information. Research from AI and SaaS specialist Reco…
