New maritime cybersecurity database identifies nearly 30,000 vulnerabilities affecting ships and ports

Posted in Commentary with tags on October 26, 2026 by itnerd

A new maritime cybersecurity initiative has identified nearly 30,000 vulnerabilities relevant to ships, ports and offshore infrastructure, according to the newly launched Blue Initiative, a collaboration led by Cydome Security and maritime industry partners.

The database currently tracks 29,505 vulnerabilities, including 2,004 rated critical and 586 listed in CISA’s Known Exploited Vulnerabilities catalog. It also identifies 37 maritime-specific vulnerabilities affecting systems built for ships and ports.

The initiative categorizes vulnerabilities across navigation, propulsion, communications, industrial controls and onboard IT systems, helping operators identify which flaws affect their equipment. It also provides alerts for newly disclosed critical vulnerabilities and those known to be exploited.

John Strand, Owner, Black Hills Information Security:

“This is another example of how we fail to look at the interconnectedness of all the devices we use. I think this maritime report is fantastic because it examines vulnerabilities from end to end across an entire ecosystem, in an industry that has traditionally been underserved by the security community.

“When we look at ships, cranes, and the systems moving cargo in and out of ports, we tend to treat them as things. We don’t think about whether they need endpoint detection, a firewall, or patches and updates. It’s just a device attached to a widget. We forget about the whole ecosystem that makes it work.

“That’s why this case study matters. Take the same approach to military systems, medical devices, or pharmaceutical manufacturing, and I think we’d probably find very similar problems. We depend on these connected devices, but we still don’t consistently treat them as computer systems that need to be secured.”

ㅤ

Seemant Sehgal, Founder & CEO, BreachLock:

“A database of 29,505 vulnerabilities is noise until an operator knows which of them are actually reachable and exploitable in their environment. Severity counts and KEV listings only answer part of the question. What matters for any single operator is how many of those vulnerabilities an attacker could actually reach on their fleet, their ports, and their offshore assets.

“That question manually at this scale. The combination of distributed assets, long operational windows between port calls, mixed IT and OT environments, and limited onboard security staffing means any approach that depends on human analysts triaging thousands of CVEs will fall behind the exposure before the next voyage begins. The scalable version is continuous testing of what an attacker could actually reach across the fleet, so when a critical CVE lands, the operator already knows which vessels and which systems are exposed and which are not.”

Let’s see how well this works out. I say that because having a database is good. But actioning the information in it on a consistent and quick basis is much better. And actioning it with everything is the best possible outcome.

AI robocalls + NFC relay drained €380K in Dutch bank scam

Posted in Commentary with tags on October 26, 2026 by itnerd

Dutch police arrested two men who drained more than €380,000 from 170 bank customers using AI-generated robocalls. The recordings warned of suspicious account activity, then a live “bank employee” took over and talked victims into installing an app and holding their debit card to the phone. The app captured the card’s NFC data and relayed it to an accomplice waiting at an ATM.

Rohan Gupta, CEO & Co-founder, Diopter Had This To Say:

“Based on the reporting, this was a familiar social engineering playbook with AI running the first step. An AI-generated recording warned people about suspicious activity on their bank account and asked them to press 1 if it wasn’t them, establishing authority and urgency. A live caller posing as a bank employee then took over, said the card had been blocked, and had them download an app and hold the card to their phone. An AI voice was the thing that allowed a two-person crew to run that first step at scale, and it looks like it cost 170 people more than €380,000. Businesses should expect the same approach on their own phone lines, from callers who sound just like their bank or one of their vendors. Any request to install software, move money, or share a login is a red flag even if the caller sounds like someone you know. Your bank should never ask you to tap your card to your phone during a call. If that happens, best practice is to hang up and call the number on the back of your card.”

Social engineering has got a new life thanks to AI. Thus people need to be educated about this new but old threat that is out there.

PHP2Shell security flaws now successfully exploited in the wild

Posted in Commentary with tags on October 26, 2026 by itnerd

Two critical remote code execution vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell, have now been confirmed as successfully exploited in the wild. Adel Karimi, detection and response lead at Perplexity, captured evidence of successful exploitation against an Apache mod_php installation running PHP 8.4.26, including memory disclosure and subsequent command execution. The findings, corroborated by security researcher Marcus Hutchins, mark a significant escalation from earlier reports of scanning and unsuccessful exploitation attempts.

Bri Frost, Director of Product Management, Cloud Range said this:

“PHP2Shell highlights a challenge that security teams increasingly face: exploitation can begin before defenders have complete information about a vulnerability, its impact or even whether available mitigations are effective. In these situations, the biggest risk isn’t necessarily a lack of security tools. It’s whether the people responsible for responding can make the right decisions quickly under pressure.

“Organizations should be testing how their security teams respond when a critical vulnerability moves from theoretical risk to active exploitation. Can analysts distinguish scanning from successful compromise? Can they identify suspicious activity on affected servers, determine whether attackers have established persistence and coordinate containment without unnecessarily disrupting business operations? These are skills that need to be developed through realistic exercises, not figured out during an actual incident. The faster exploitation timelines become, the more important it is that security teams have already practiced responding to situations where the threat is evolving faster than the available intelligence.”

If you haven’t fixed or replaced any application that uses PHP, now is a really good time to do so. Though based on this, it might be too late already.

New FIRE Analysis: Inside an Active ChatGPT Billing Phishing Campaign

Posted in Commentary with tags on October 26, 2026 by itnerd

New research from Fortra Intelligence and Research Experts (FIRE) dives deeps into an active campaign using fake ChatGPT Plus billing emails, revealing the infrastructure and mechanics keeping it running.

Key findings include:

  • Live operators control victim sessions and can escalate from card theft to OTP/2FA capture.
  • Identical code and shared identifiers connect independently deployed phishing sites.
  • Short-lived sites are replaced while the underlying operation continues.
  • The phishing kit is evolving, with newer instances showing changes to its front end.

The analysis shows how a familiar phishing lure has become a repeatable, operator-driven payment-card theft operation.

Full analysis was just published here: https://www.fortra.com/blog/anatomy-openai-phishing-kit-rotating-wordpress-hosts-live-operators-and-otp-theft

Takeaways From ‘Black October’

Posted in Commentary with tags on October 26, 2026 by itnerd

This month was coined ‘Black October’ by the infosec community, following the onslaught of widespread and critical vulnerabilities and security incidents, such as P2PShell, the LiteLLM suplly chain attack and the eMhudra certificate compromise.

Allen Houchins, CIO, Fleet Device Management

“Black October exposed a lack of visibility into their own environments as a major weakness in how organizations respond to emerging security threats.

With incidents like PHP2Shell and the eMudhra certificate compromise, security teams were immediately faced with two questions: where are we exposed, and how quickly can we fix it? Neither question should take days to answer.

There are three key lessons organizations should take away:

  1. Know what’s running across your entire environment: IT and security teams need a complete, real-time inventory of every workstation and server, including installed software and configurations. When a new vulnerability emerges, organizations should be able to identify affected devices in seconds, rather than waiting hours or days for inventory scans and reports.
  2. Make remediation as fast as detection: Finding vulnerable systems is only the first step. Organizations need the ability to push patches, configuration changes and other fixes across their entire environment quickly, without waiting hours or days for policies to take effect. The longer that gap remains open, the greater the opportunity for attackers.
  3. Prepare to respond at AI speed. without sacrificing oversight: Automated workflows, GitOps and infrastructure-as-code approaches can help organizations deploy changes rapidly while ensuring every action is documented, reversible and verified by a human before deployment.

Ultimately, Black October is a reminder that knowing about a vulnerability is only half the battle. The real measure of security readiness is how quickly organizations can identify where they’re exposed, take action and verify that the issue has been resolved.”

Hopefully November is better as I can’t deal with another October.

Claude Accessed Georgia State Voter Count Data –

Posted in Commentary with tags on October 26, 2026 by itnerd

AI model Claude bypassed a paywall ​and accessed publicly available US ‌state of Georgia aggregate voter counts without human authorization. Which is of course bad. More info here: https://www.reuters.com/world/us/anthropics-claude-accessed-public-us-state-georgia-voter-information-axios-2026-10-25/

Erin Hamm, Chief Data Officer DataBee, A Comcast Company:

“This is not a story about a single model or a single agent. It is a story about the gap between what is available and what is authorized. The data was public but it sat behind a fee. Any person would have understood that fee as a boundary. An agent treated it as an obstacle. Access control tells you who is allowed in. It says nothing about what a system will decide to do in order to finish its assigned task. Most organizations are still governing agents the way they govern users. They set permissions, write a policy, and assume intent will follow. Agents have goals, not intent. A goal plus a path that is reachable is enough for that agent to cross the boundary a human wouldn’t.”

Scott Miserendino, Chief Technology Officer DataBee, A Comcast Company:

“This hardly qualifies as hacking. The AI used an existing public endpoint to create a visitor account. The Georgia State agency responsible for the website should have fully deprecated the older versions of the website that allows for free visitor access if they no longer wished to support it. The AI did not do anything nefarious here. It was just thorough in its attempt to complete a legitimate task.”

Dan Moore, Sr. Director CIAM Strategy at cybersecurity company FusionAuth:

“Strip away the sensational AI headline and you have a basic authorization flaw: the server confirmed a visitor held a token, but never checked if they’d actually paid for what it unlocked.

Most systems end up full of blind spots like this simply because they were never worth a person’s time to dig up. An unused, forgotten endpoint, an inconsistent permission check, a paywall enforced on the front page but missed on a deep link. Flaws like that go unnoticed for years because no one invested time to look for them.

People are now using AI agents to find these vulnerabilities. What were previously edge cases that required multiple steps too time-consuming for a human to undertake are now easy and cheap for AI agents to find. You no longer need a skilled, dedicated attacker targeting your application—an automated tool can find the gap through sheer volume and patience. This makes the access-control cleanup everyone knew they should do but put off to deliver revenue generating features a lot more urgent.”

I’ve always believed that AI needs to be locked up and restricted in terms of what it can do. This highlights that I was right about that..

Ridge Security Is the Only Vendor Listed Across Four Categories in Three Gartner Cybersecurity Reports

Posted in Commentary with tags on October 26, 2026 by itnerd

Ridge Security has been included in four cybersecurity technology categories across three Gartner research reports, we believe it’s reflecting the growing focus on validating security defenses and identifying exposure before attackers can exploit it.

The reports include:

  • Adversarial Exposure Validation: Market Guide for Adversarial Exposure Validation lists Ridge Security for its RidgeBot in its table of Representative Vendors.
  • Agentic Red Teaming: Emerging Tech Impact Radar: Preemptive Cybersecurity includes Ridge Security among its Sample Vendors.
  • Unified Exposure Management Platforms: Emerging Tech Impact Radar: Preemptive Cybersecurity report includes Ridge Security among its Sample Vendors.
  • Agentic AI for Security: Emerging Tech Impact Radar: AI Cybersecurity Ecosystem includes Ridge Security among its Sample Vendors.

Together, these categories reflect a broader shift in cybersecurity toward more continuous, automated ways to test defenses, understand exposure and identify weaknesses before they can be exploited.

Ridge Security’s portfolio includes RidgeBot®, its automated penetration testing platform; RidgeGen™, its agentic AI platform for autonomous security testing and red teaming; and RidgeOne, an “AI Pentesting in a Box” solution that combines RidgeGen with a locally running AI model on NVIDIA DGX Spark. Together, these solutions help organizations identify vulnerabilities, validate attack paths and better understand their exposure, and determine how to remediate security issues. RidgeOne extends autonomous testing into environments where data privacy, infrastructure requirements and AI costs are key considerations.

Attribution and Disclaimer:

Gartner®, Market Guide for Adversarial Exposure Validation, Dhivya Poole et al., 24 March 2026

Gartner®, Emerging Tech Impact Radar: Preemptive Cybersecurity, Elizabeth Kim et al., 11 September 2026

Gartner®, Emerging Tech Impact Radar: AI Cybersecurity Ecosystem, David Senf et al., 5 October 2026

GARTNER is a trademark of Gartner, Inc. and its affiliates.

Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner’s business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose.

Hisense unveils new C3 projector family for immersive home entertainment

Posted in Commentary with tags on October 26, 2026 by itnerd

Hisense, is expanding its home entertainment portfolio with the new C3 projector family, designed to bring cinema-sized entertainment into everyday life.

Showcased at IFA 2026 in Germany, the C3 Ultra and C3 Ultra Max are launching across global markets this September, with the C3 Pro set to follow. From movie nights and live sports to gaming with friends, the C3 family is designed around the moments people want to make bigger. With projection sizes of up to 300 inches, powerful brightness and immersive sound, it transforms living rooms, bedrooms and other spaces into flexible entertainment destinations, giving users more freedom to enjoy the big-screen experience at home.

The C3 Ultra delivers 4,000 ANSI lumens and a 5,000:1 contrast ratio with an IRIS Lens, combining vivid visuals with gaming-enhanced performance. Its Devialet-tuned audio system, featuring co-engineered hardware and a built-in subwoofer, delivers deep bass and immersive surround sound for a more engaging entertainment experience.

For users seeking greater visual power and responsiveness, the C3 Ultra Max delivers 5,000 ANSI lumens, 5,000:1 contrast with an IRIS Lens and 1ms ultra-low latency, supporting dynamic entertainment across movies, sports and gaming. Enhanced by Devialet audio, it completes the experience with rich, immersive sound that matches its high-performance visuals.

The C3 Pro brings the C3 experience to more users with 3,000 ANSI lumens, 5,000:1 contrast with an IRIS Lens and Devialet-tuned audio with a built-in subwoofer, offering a compelling balance of performance and value.

Together, the C3 Ultra, C3 Ultra Max and C3 Pro further enrich the C3 family, offering consumers a broader range of choices to suit different entertainment needs and spaces. Earlier this year, the C3 has undergone Life Cycle Assessment (LCA) and product carbon footprint (PCF) verification by SGS, supporting transparent evaluation of environmental impact across the product lifecycle and reflecting Hisense’s commitment to transparent product-level environmental assessment.

With the C3 family, Hisense continues to bring more immersive entertainment into everyday spaces, making it easier for people to turn ordinary moments at home into experiences worth sharing.

For more information, please visit hisense-canada.com.

Colare launches to help hardtech industries hire the right engineers, the first time

Posted in Commentary with tags on October 26, 2026 by itnerd

The companies building rockets, satellites, defense systems, and the factories behind them are opening engineering roles faster than their own engineers can screen for them. But, hiring a single mechanical, electrical, or embedded engineer takes roughly 40 hours of senior engineering time across phone screens, take-home reviews, and multi-hour onsite interviews, because there has been no reliable way to test hardware skills. Today Colare launched publicly to change that. The San Francisco company runs simulation-based technical assessments that let hardware teams watch candidates solve realistic engineering problems in the tools they would use on the job, before anyone books an interview.

The launch is accompanied with a $2.5 million pre-seed in funding to scale its simulation-based hiring platform, which lets companies watch candidates solve realistic engineering problems. The round includes Afore Capital, Garage Capital and Acadian Ventures.

Why hardware hiring is breaking

The most reliable way to understand whether an engineer can do a job is to watch them work. In hardware, that has historically been almost impossible to do at scale.

Aerospace, defense, and manufacturing are among the largest employers of hardware engineers, and they screen candidates through multiple technical rounds: presentations, take-home exercises, and onsites. The rounds that actually test the job come last and can only be run by engineers, so every candidate who should have been filtered earlier drains scarce engineering time. Further compounding the issue, aerospace manufacturing already runs at a 15% attrition rate, more than double the rate of other sectors, and 29 percent of the aerospace and defense workforce is 55 or older, so the hiring load is rising just as the people qualified to judge candidates are leaving. Meanwhile, the U.S. Bureau of Labor Statistics projects roughly 3,800 aerospace engineer openings a year through 2031 just to keep pace with growth and retirements

AI is making traditional signals weaker. Résumés can be inflated, interview answers can be assisted, and polished profiles increasingly reveal less about how someone will perform in the job (Greenhouse, 2026 benchmark report). For hardtech companies scaling quickly, that creates pressure on both sides: hiring demand is rising while confidence in the traditional screening process is falling.”

How Colare works

Colare is a specialized technical assessment platform for hardware talent screening. Colare maps the role based on the company’s job description to engineering assessments across disciplines including CAD, PCB design, thermal analysis, FEA, systems problem solving, and more.

The simulations recreate the decisions engineers face on the job. Colare evaluates both process and final output, returns a detailed debrief, assessing candidates, and handles scheduling and industry-specific hiring workflows.

That domain depth matters because hardware engineering rarely has one correct answer. Engineers constantly make tradeoffs across performance, cost, manufacturability, reliability, and physical constraints.

Colare builds its assessments around those judgments, using rubrics informed by senior engineers who have shipped hardware. The goal is to turn the intuition an experienced engineer uses to recognize strong talent into a signal that can scale across hundreds of candidates.

Traction

Colare is already working with companies ranging from newly funded startups to multi-billion-dollar aerospace manufacturers, with half of its clients currently operating in aerospace and defense.

For a two-person chemical manufacturing startup hiring its first electrical engineer, Colare became the technical evaluation layer the founders did not have in-house. At a subsidiary of a public manufacturer, Colare flagged major engineering gaps in a candidate who had cleared the initial screen and was headed for the CEO round, catching the problem before it reached senior leadership.

The origin story

Colare was founded by Nain Abdi and Esther Thomas after Abdi encountered the problem firsthand as an electrical engineer at Ford. His team had stopped trusting résumés because candidates who looked strong on paper often struggled in technical interviews.

The problem is growing as hardtech hiring accelerates. Aerospace and defense funding reached $35.6 billion in the first half of 2026, while one Colare space customer is adding up to 50 open roles a month.

What’s next

Every assessment Colare runs captures something a résumé never has: how an engineer actually thinks through real work. The long-term bet is that as that signal compounds, skill replaces pedigree as the credential companies hire on.

Eagle Eye and Playable bring gamification to loyalty and promotions

Posted in Commentary with tags , on October 26, 2026 by itnerd

Eagle Eye’s AI-powered loyalty and personalised promotions platform with Playable’s marketing gamification technology combined offer brands the ability to create engaging loyalty and membership experiences that drive participation, capture richer first-party data, and activate smarter 1:1 marketing at scale. The partnerships allows retailers to turn loyalty into a true engagement engine – shaping behaviour, increasing engagement, and delivering real commercial value.

We take a look at behind the scenes of the rollout, plus the implications and lessons for brands across other global markets like APAC.

The challenge

As loyalty strategies increasingly focus on first-party data, personalised marketing and customer lifetime value, combining gamification with loyalty infrastructure provides brands with a powerful new way to engage customers beyond transactional interactions.

The solution

Eagle Eye, a leading SaaS and AI technology company that delivers loyalty, personalized promotions and omnichannel marketing solutions for retail, travel and hospitality brands has announced a new technology partnership with Playable, the leading marketing gamification platform. Read the original partnership announcement.

The partnership enables brands to combine Eagle Eye’s loyalty and promotions capabilities with Playable’s gamification technology to create highly engaging loyalty and membership experiences that increase participation, capture valuable first-party data and drive more personalised marketing.

Key loyalty features and use cases

Through the integration, gamified experiences can connect directly with loyalty mechanics such as points, rewards, coupons and personalised promotions.

Customers might earn points by completing a game, unlock rewards through interactive challenges, or trigger targeted offers based on their participation.

Across these organisations, Eagle Eye powers core loyalty and promotions infrastructure, including points programmes, rewards, coupons and personalised offers; while Playable delivers engaging gamified experiences that encourage customers to interact with these programmes more frequently.

The benefits

By linking engagement with loyalty incentives, retailers can increase programme usage, strengthen customer relationships and deliver more relevant marketing at scale.

Together, the two platforms help brands increase engagement across loyalty ecosystems while enabling scalable campaign execution across web, mobile, apps and in-store environments.

The partnership is particularly relevant for enterprise retailers across grocery, retail, ecommerce, and hospitality looking to maximise the value of their loyalty and membership programmes.

Visit www.eagleeye.com to learn more.