The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe.
The post US Agencies Urge Organizations to Harden Refrigeration Controllers appeared first on SecurityWeek.
Read more of this story at Slashdot.
Picture this: The next time you're pulling into one of the many parking lots at Disneyland in Anaheim, California, or Walt Disney World in Orlando, Florida, you might not need to go hunting for a parking spot. Instead, you're greeted by a car that looks like it drove straight out of Pixar's Cars.
The car is decked out in a bright orange paint job with a yellow safety vest and marshaling wands, with a screen on top displaying directional arrows telling you where to turn and park. It even offers a friendly wink as you start to make the turn.
Then, as you approach the end of your spot, another little vehicle rolls up alongside you, its screen flashing 'slow,' then a thumbs up, and finally 'have a nice day.' It's a pretty magical way to be welcomed to a Disney park before you've even stepped inside, right?
And it might not be as far off as you think. As part of Disney Accelerator 2026, Disney is collaborating with Field AI to test autonomous robots in parking lots and explore how they could help with park operations.
Field AI essentially develops the intelligence — or the brain — behind robots, rather than the robotic hardware itself. The company has experience deploying autonomous solutions in engineering environments, and Disney is now exploring how that technology could translate to its theme parks.
It’s essentially the intelligence that comes in the form of hardware and software as a kit that goes on top of the robot. In the video, it’s clear that the Cars figure is the end goal, but we do see what appears to be a Boston Dynamics robot with the Field AI stack on top, offering the screen and directional movement guidance for a few brief moments.
Gary Daniels, SVP of Technology at Disney Experiences, said: "We're excited to be working with Field AI, testing autonomous robots' ability to guide cars to park. Imagine if characters from Cars or robots from Wall-E direct you where to park when you arrive. The work we're doing now is a great way to see how robots function and, as important, how people respond."
It's clearly a test for now, but seeing Field AI's intelligence solution in action in the demonstration videos is pretty compelling. Particularly when you consider how it could pair with Disney Imagineering's existing research and development work in robotics.
Think about the robotic Star Wars BDX Droids, Olaf from Frozen, or even the walking Groot. Disney has already been exploring how to bring familiar characters into the physical world. Now, there's an opportunity to take some of those robotics advances beyond entertainment and into the everyday guest experience — while also helping with operational challenges like parking management and moving guests around the parks. The latter is something Disney Experiences knows a lot about, and a car from Cars or a robot from Wall-E would fit right in.
Of course, it's still early days, and these experiments are just that: explorations. But Disney Accelerator participants have found their way into the parks before.
Haddy, part of the 2025 group, develops large-scale 3D printing technology that produces materials and components to match the quality Imagineering requires. Its work was used to create an entirely new boat for Jungle Cruise at Disneyland in 2025. I wouldn't be surprised to see Haddy's technology featured in future projects, potentially including new environments like the forthcoming Monstropolis land at Disney's Hollywood Studios.
The parking experiment is perhaps the most immediately exciting from a guest perspective, but another Disney Accelerator 2026 participant is exploring a robotic application that could have just as much impact behind the scenes.
Physical Intelligence is working on a tool that could greatly benefit Cast Members. Attractions like Star Tours, Toy Story Midway Mania, and Mickey's PhilharMagic — found at Disney parks in the United States and elsewhere around the world — use 3D glasses that guests pick up and wear during the attraction before returning them afterward.
Guests, myself included, don't always think twice about dropping those glasses back into a collection bin. But someone has to sort through them, untangle them, and make sure they're in good shape for the next guest.
That's where Physical Intelligence comes in. The exploration takes shape as a robot that can sort and organize the glasses, potentially untangling them and stacking them for redistribution. It's not necessarily an easy task for a robot to handle. It requires dexterity, precision, and the ability to apply varying amounts of force depending on what it's handling.
Physical Intelligence already trains robots to carry out everyday tasks, including folding shirts, cutting vegetables, and folding boxes. Teaching a robot to handle Disney's 3D glasses is another step toward getting these machines to carry out more complicated physical tasks.
The company explained that training robots to perform basic functions, while pairing that training with the right inputs — such as sight through a camera and touch through sensors — is key. For the glasses-sorting experiment, the robot is taught how to carry out the task through demonstrations and training, allowing it to learn how to handle and stack the glasses. It’s also been deployed in parks in some test use cases.
There's an interesting parallel here with the reinforcement training Disney worked on alongside Google DeepMind and Nvidia for its BDX Droids. While the applications are different, both demonstrate how extensive training and the right combination of inputs can help robots interact with the physical world in increasingly sophisticated ways. Here it’s clear, though, that real hands-on — err, robotic arms — training was needed versus simulation.
And there's an important distinction in how this could benefit Disney's workforce. The goal isn't necessarily to replace a Cast Member or eliminate a role. Instead, automating a repetitive task like sorting glasses could free someone up to spend more time interacting with guests, thus creating those little moments that make a Disney visit special.
Both Physical Intelligence's glasses-sorting experiment and Field AI's autonomous parking guidance show that Disney's robotic ambitions, with the right partners, go well beyond bringing characters to life. One could help make arriving at a park more seamless and perhaps a little more magical, while the other could make some of the less glamorous work of running a theme park easier.
Even so, the learnings from these two use cases and prototypes could eventually find their way into future roaming characters in the parks or even on Disney Cruise Line ships.
And while the BDX Droids aren't greeting guests daily in the parks just yet, and Olaf has taken a few tumbles along the way, Disney has a much bigger vision for where this technology could go.
Kyle Laughlin, SVP of R&D, Technology and Engineering at Walt Disney Imagineering, previously told us: "We don't envision just one robot from a franchise, but an entire world populated with characters you know and love."
Maybe that world starts with a robot directing you into a parking spot.
A Delaware-based defense and aerospace company has settled a case with U.S. agencies over government allegations that the firm neglected its cybersecurity obligations in its contracts.
ILC — the name the government uses to collectively refer to ILC Dover and ILC Astrospace — agreed to pay $13 million to resolve the False Claims Act allegations involving its contracts with the Department of the Army, Missile Defense Agency and National Aeronautics and Space Administration.
ILC, according to the government, submitted false or fraudulent claims for payment on contracts with the agencies because it knew it hadn’t complied with the contracts’ cybersecurity requirements over a period between 2018 and 2024.
For instance, ILC allegedly used a third-party company to store sensitive data in the cloud without proper safeguards, and didn’t develop and update mandated security plans for each of its covered information systems.
“The best response to cyberattacks is to prevent them from happening in the first place,” Benjamin Wallace, U.S. Attorney for the District of Delaware, said in a news release Tuesday. “The obligations that ILC violated exist to prevent bad actors from taking advantage of the United States’ technical innovation.”
American industrial manufacturing giant Ingersoll Rand, the parent company of ILC Dover, said it inherited the issue when it purchased the firm.
“We became aware of this matter following our acquisition of ILC Dover in June 2024, took prompt action to address the identified issues, and were in compliance with applicable requirements by October 2024,” said Sara Hasell, a spokesperson for Ingersoll Rand. “We have agreed to resolve this matter with the U.S. Department of Justice without an admission of liability and remain committed to maintaining strong cybersecurity practices.”
The $13 million settlement is one of the bigger settlements since the Justice Department began using the False Claims Act in 2022 to penalize contractors over cybersecurity shortcomings. The False Claims Act is a Civil War-era law passed to deal with fraudulent contractors.
“To protect sensitive information from cyber threats, defense and aerospace contractors must comply with the cybersecurity requirements in their federal contracts and subcontracts,” said Assistant Attorney General Brett Shumate of the Justice Department’s Civil Division.
Under the law, a private citizen can raise allegations that the contractor defrauded the government and is entitled to receive a portion of any settlement. The whistleblower in the ILC case, Philip Root, the company’s former director of cybersecurity, will receive $2.35 million.
Government contract attorneys say that a forthcoming regulatory overhaul could expose more companies to False Claims Act punishments.
The post Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements appeared first on CyberScoop.
Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells.
The post Critical Node-RED Flaw Exploited in Attacks appeared first on SecurityWeek.
Attackers again tampered with internet-exposed refrigeration controllers, this time at stores in Belgium, Sweden, Ireland and beyond.
The post Over 100 European Stores Hit as Supermarket Fridge Attacks Return appeared first on SecurityWeek.
Major industry groups are clamoring for Congress to include a 10-year extension of a law that they say is essential to cyber threat information sharing in the annual defense policy bill.
Congress has mixed a series of short-term renewals and lapses of the Cybersecurity Information Sharing Act of 2015 (CISA 2015) — which provides legal protections for threat data exchanges between the government and private sector as well as between companies — since its previous 10-year sunset came and went last year. It’s now set to expire again on Dec. 11.
On Sunday, 35 business groups sent a letter to leaders of the House and Senate Armed Services panels, asking them to renew the law for 10 years as part of their final negotiations for the fiscal year 2027 National Defense Authorization Act.
“The case for a long-term reauthorization has only grown more urgent,” they wrote. “Recent incidents have demonstrated that advanced AI systems can identify and exploit software vulnerabilities at machine speed, collapsing the window between the discovery of a weakness and its use in an attack.”
“AI tools are also making sophisticated cyber capabilities cheaper, faster and easier to use, allowing threats to spread and adapt in real time,” they continued. “In this environment, the speed and breadth with which defenders share information determines whether they keep pace with adversaries. That speed depends on the legal certainty CISA 2015 provides.”
The letter’s signatories include overarching business groups like the Chamber of Commerce and Business Roundtable, the latter of which led the letter, as well as groups representing critical infrastructure sectors such as aviation, telecommunications and technology.
The House version of the fiscal 2027 defense bill includes a 10-year extension. The Senate version notably does not, and past efforts to include a long-term extension in the defense bill, which has been signed into law every year for decades, have encountered objections from Senate Homeland Security and Governmental Affairs Chairman Rand Paul, R-Ky.
Paul has hinged his support for any long-term extension of CISA 2015 on adoption of provisions designed to curtail past practices at the other CISA — the Cybersecurity and Infrastructure Security Agency — that he maintains threaten free speech.
Top Trump administration cyber officials have pressed Congress for a straightforward extension of the CISA 2015 laws. The Trump administration has also touted its efforts to crack down on what they said was the free-speech-limiting disinformation work of the agency CISA, which the Biden administration denied impinged on free speech and that it had ended anyway.
The annual defense policy bill often passes at the end of each calendar year or beginning of the next. A potential congressional committee leadership shuffle could change the equation for CISA 2015 in 2027, but the Dec. 11 expiration looms in 2026.
The post Business groups mount fresh campaign for long-term renewal of information sharing law appeared first on CyberScoop.
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
The post Long-Hidden Flaws Patched in EPICS Research Facility Control Software appeared first on SecurityWeek.
Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.
The post Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems appeared first on SecurityWeek.
Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.
The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities appeared first on SecurityWeek.
In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.
The post Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ appeared first on SecurityWeek.
The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.
The post Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform appeared first on SecurityWeek.
The first phase will cover up to 500 utilities, which will get free security tools, equipment, deployment help and training.
The post Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities appeared first on SecurityWeek.
Russian government-connected hackers compromised two defense firms and a law enforcement agency in North Atlantic Treaty Organization countries as part of an espionage campaign, Symantec researchers said in a blog post Tuesday.
The infamous group behind hacks of the Democratic National Committee during the 2016 election cycle was behind the attacks that Symantec identified in recent months: Swallowtail, also known as APT28, Fancy Bear and Forest Blizzard, notorious for its links to the Russian military agency GRU.
The hackers apparently chose the targets of their attacks carefully, including a naval shipbuilder, a manufacturer of military aircraft engines and the law enforcement agency. In the attack on the shipbuilder, Symantec saw “hands-on-keyboard” activity as the hackers repeatedly returned to a compromised host over the course of a week to steal credentialed material.
“Hands-on-keyboard activity means a human operator is choosing what to do next, rather than malware running a fixed routine,” Dick O’Brien, principal intelligence analyst at the Symantec Threat Hunter Team, told CyberScoop. “It’s essentially confirmation that the organization is a genuine target for the operators, not an accidental infection. It also confirms that further exploitation beyond the initial infection was at least attempted.”
O’Brien said the campaign reflected broader intelligence collection aimed at European government and defense targets, but its motive wasn’t certain. He speculated that it could have been part of campaigns to target nations aiding Ukraine in its war against Russia.
The hackers made use of the Hookedge backdoor first identified in August by Recorded Future’s Insikt Group. That firm saw attacks dating back to September of last year by the same group using the same backdoor on defense and diplomatic targets in Romania, Spain and Turkey.
Symantec also observed the hackers deploying a previously undocumented loader.
“What surprised us was that the attackers then moved their most sensitive follow-up activity onto a dedicated server, when Recorded Future had expected them to keep hopping between free services,” O’Brien said. “The loader, ld.exe, hadn’t been publicly documented. It decrypts its payload in memory, and it needs a key supplied only at runtime on the command line. Without both the encrypted file and the key, the payload can’t be recovered. We didn’t recover it, so we don’t know its function.”
This spring, researchers and U.S. government agencies said they quashed a Forest Blizzard espionage campaign. Western governments warned last year about the group targeting companies supporting Ukraine.
The post Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign appeared first on CyberScoop.
The Department of Homeland Security is banning the use of Chinese AI model DeepSeek and its affiliates by civilian federal agencies.
The notice, set to publish Tuesday in the Federal Register, cites the Federal Acquisition Supply Chain Act and a review by the Federal Acquisition Security Council to bar federal agencies from buying all information technology products and services from parent company Hangzhou DeepSeek Artificial Intelligence.
The notice includes a copy of a letter from Secretary of Homeland Security Markwayne Mullin ordering the exclusion of DeepSeek products on June 26, indicating the ban has been in place for months.
Mullin claimed that DeepSeek’s models present “multiple threat vectors” to civilian federal agency IT systems. Some are unique to the company’s country of origin, while others identify potential privacy and mass data collection concerns that could also apply to other Chinese and U.S. AI models.
He said DeepSeek models store data in servers based in China, where national security laws give the Chinese government wide latitude to request and obtain data from domestic companies. Models hosted directly by DeepSeek collect personally identifiable information from users and trace their “digital fingerprints” online. And like every other major AI model on the market, DeepSeek relies on a “prompt and response” process, something Mullin said “may result in the transfer of sensitive data” to the Chinese government.
“The transfer of the aforementioned information to the [People’s Republic of China], either independently or in combination with publicly available data, could produce actionable intelligence on U.S. persons and/or government programs,” Mullin wrote.
CyberScoop had reached out to CISA and DHS for further details.
The decision will exclude federal agencies from using one of the most popular and powerful Chinese open-weight AI models more than a year after U.S. frontier AI companies and the federal government accused DeepSeek’s makers of “systematically” distilling their models.
The order requires civilian agencies to exclude DeepSeek products from future procurements while removing any versions that might have been put in place prior to the ban. In the past, federal agencies have used their own discretion to block the use of models like DeepSeek, as the Department of Commerce confirmed to FedScoop last year.
Agencies can request exceptions, but must submit their request 60 days in advance and must provide a “compelling justification” for the action, like an inability to fulfill a mission-critical function, or other national security considerations.
Mullin also said agencies that remove DeepSeek from their IT are “encouraged” to enhance their security controls to protect against the possibility that their networks were compromised through the Chinese AI tool.
“During the period between the issuance of this order and full removal of covered articles from agency systems, federal agencies are encouraged to take steps to address risk to their systems, such as monitoring the flow of traffic in and out of the agency, implementing enhanced logging and controls on data exfiltration for the relevant systems, and detecting and flagging anomalous activity,” he wrote.”
DeepSeek is the only Chinese AI model named in the order, but it’s just one of several Chinese open weight AI models that have worried national security officials or have been accused of illegally distilling U.S. models, along with Moonshot AI, the makers of Kimi and Alibaba, makers of Qwen.
The post DHS to ban DeepSeek from federal civilian agencies appeared first on CyberScoop.
Spyware has been detected on devices used by some of Serbia’s most prominent figures connected to the country’s political upheaval, according to researchers who announced their findings Monday.
Vladan Ðokić, the rector of the University of Belgrade and prominent figure in the country’s student protest moment, and Rade Bajić, a lawyer with Serbia’s Public Prosecutor’s Office for Organized Crime, were targeted, according to research from the SHARE Foundation, a Serbian digital rights group, and The Citizen Lab at the University of Toronto.
The new cases follow what the SHARE Foundation described in September as the largest documented wave of spyware surveillance in the country to date. That wave included 14 people, among them a member of parliament and a local government official, targeted with Pegasus and a new version of the NoviSpy Android spyware.
Đokić, an architect and former dean of the university’s Faculty of Architecture, has led the University of Belgrade since 2021. He has publicly backed the student-led anti-corruption protests that followed the 2024 Novi Sad railway station canopy collapse, and government officials and pro-government news outlets have portrayed him as a driving force behind the movement.
His tenure has included direct confrontations with the government. In March, Serbian authorities raided his offices, and reportedly seized computers and servers. After the incident, Đokić accused authorities of trying to humiliate the institution, saying police entered without prior notice or clear legal grounds.
Andrijana Ristić, a researcher at the SHARE Foundation, whose organization conducted the initial forensic analysis, said the case is the second confirmed Pegasus infection in Serbia this year. She declined to say when the infection was discovered, citing the sensitive nature of the investigation.
The device was then given to The Citizen Lab to further confirm that Pegasus was used.
“We found with high confidence that it was infected with NSO Group’s Pegasus spyware in 2026,” a report released by the lab reads. “The infection leveraged a zero-click exploit. No action, such as a click or opening a file was necessary for infection.”
Ðokić was unavailable for comment.
Bajić was on the legal team prosecuting a high-profile corruption case involving Serbian government officials signing off on a $500 million hotel and residential tower planned for a protected historic site in Belgrade. According to recent reporting from The Guardian, Serbian President Aleksandar Vučić allegedly pressed government officials to strip the building’s protection so that Affinity Partners, the private investment firm owned by Jared Kushner, could develop it into a Trump hotel.
Bajić believes his work on the case led to him being a target of spyware. He pointed CyberScoop to news articles and Serbian television programs where Vučić referred to him as a “criminal” and part of a “gang that fabricated” the corruption case.
“In my opinion, my involvement in this case was the sole reason for this unlawful spyware attack,” Bajić told CyberScoop.
Ristić told CyberScoop that Bajić received a threat notification from Apple, but neither SHARE nor Citizen Lab could pinpoint exactly what type of spyware his device was infected with. The investigation of Bajić’s device is ongoing.
Ristić described surveillance in Serbia as longstanding, tracing it to earlier tools such as FinFisher and alleged dealings with the hacking group Hacking Team — along with the original NoviSpy report by Amnesty International in 2024, which identified journalists, activists and civil society members as targets.
“I would definitely say that [spyware] is widespread,” she told CyberScoop. “I think right now it’s gaining much more media attention, especially internationally, because of the political moment.”
John Scott-Railton, senior researcher at The Citizen Lab, said “NSO has spent a decade claiming to turn over a new leaf each time an abuse surfaces. But there is no hiding the truth: Pegasus is a technology for repression. So it’s no accident that people standing up for freedom in the face of corruption keep getting hacked with NSO’s products.”
Serbia will hold parliamentary elections Oct. 25, with Vučić fighting to retain control of the government. The vote comes amid the student-led protest movement, fueled by anger over government corruption, that has grown into the largest challenge to Vučić’s rule in years.
The post Spyware found on devices belonging to prominent Serbian critics as elections loom appeared first on CyberScoop.
Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility.
The post Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers appeared first on SecurityWeek.
In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes.
The post AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds appeared first on SecurityWeek.
ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability.
The post ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw appeared first on SecurityWeek.
Login