physical security

Greenlane’s SOC 2 Type 2 milestone is more than a procurement checkbox for the commercial EV charging sector. It signals that the company is trying to sell something fleet operators have increasingly demanded from every infrastructure partner: not just uptime and power, but verifiable...

A weekend of unexplained reboots turned out to be exactly what it sounded like: a literal knee-jerk. The anecdote — a 1990s-era telemarketing shop, a cluttered server room, a lanky student who somehow managed to press a server’s reset button with his knee when standing up — reads like a...

Johnson Controls’ iSTAR Ultra family has been the subject of coordinated security advisories after multiple remote OS command‑injection and related firmware‑integrity weaknesses were disclosed; attackers who successfully chain these issues could modify firmware, gain root access, and take full...

The Louvre’s security embarrassment has become the story’s most combustible aftershock: investigators and journalists unearthed an old cybersecurity audit showing that a server controlling the museum’s video surveillance accepted the literal password “LOUVRE,” a detail that has fuelled ridicule...

The Louvre’s security collapse reads like a cautionary tale written for IT teams: a daylight heist that lasted under eight minutes exposed not only a physical breach of priceless objects but decades of deferred cybersecurity maintenance, trivial credential hygiene, and unsupported vendor...

Johnson Controls’ iSTAR Ultra family of door controllers contains a cluster of high‑impact vulnerabilities that — if left unpatched — can give remote attackers a path to root access, firmware modification, and local console takeover, creating a direct route from network compromise to physical...

For critical infrastructure operators, scientists, and engineers, National Instruments LabVIEW occupies a unique and essential place. This graphical programming environment is a workhorse across research laboratories, industrial automation, biomedical development, aerospace, and countless other...

July 2025 emerged as a sobering reminder of the relentless escalation in both the sophistication and scale of global cybersecurity threats. Critical vulnerabilities in ubiquitous platforms like Google Chrome, SharePoint, NVIDIA’s container technology, and core enterprise appliances have been...

A critical vulnerability has struck at the heart of Windows security, putting BitLocker’s much-touted full-disk encryption under the microscope. Dubbed CVE-2025-48818, this flaw exposes millions of devices to the risk of unauthorized data access—not through high-tech remote exploits, but via a...

A newly disclosed flaw, tracked as CVE-2025-48818, has drawn urgent attention to the integrity of Microsoft’s BitLocker drive encryption, threatening to upend long-standing assumptions about physical security and data privacy on Windows devices. BitLocker, a staple security feature for millions...

CVE-2025-26637 is a security vulnerability identified in Windows BitLocker, a full-disk encryption feature designed to protect data on Windows devices. This vulnerability allows an unauthorized attacker to bypass BitLocker's security mechanisms through a physical attack, potentially granting...

A recent Microsoft security advisory has raised serious concerns over CVE-2025-48800—a new BitLocker security feature bypass vulnerability that spotlights potential risks in Windows’ physical security landscape. BitLocker, a cornerstone of Microsoft’s drive for data protection since its...

BitLocker, Microsoft's full-disk encryption feature, is designed to protect data by encrypting entire volumes, thereby preventing unauthorized access in the event of physical theft or loss. However, a recently disclosed vulnerability, identified as CVE-2025-48003, has raised significant concerns...

A recently disclosed vulnerability, identified as CVE-2025-48001, has raised significant concerns regarding the security of Windows BitLocker, Microsoft's full-disk encryption feature. This flaw, stemming from a time-of-check to time-of-use (TOCTOU) race condition, allows unauthorized attackers...

The morning after the United States Cybersecurity and Infrastructure Security Agency (CISA) releases a fresh batch of five Industrial Control Systems (ICS) advisories, security teams across multiple industries find themselves poring over technical documentation, re-evaluating their patch...

Industrial control systems form the backbone of countless essential infrastructure sectors, from energy to manufacturing, utilities, and transportation. As these environments increasingly adopt Internet-connected technologies and IT-OT convergence continues, the risk profile for such systems...

From the engines powering modern factories to switches safeguarding citywide power grids, Siemens’ RUGGEDCOM APE1808 devices serve as the backbone of critical infrastructure worldwide. Designed for the extreme, these robust devices are workhorses of the industrial edge, trusted by sectors that...

Across the corridors of modern industry, from manufacturing plants to energy facilities, the seamless orchestration of machines is the lifeblood of progress. Yet as these operational technology (OT) environments become increasingly intricate, the threats lurking at their digital gates grow both...

March 2025’s arrival in the world of Microsoft security sees another Patch Tuesday rolling out 57 fresh vulnerabilities. That figure is in line with recent months, but the real story is tucked within the details: Microsoft acknowledges active exploitation for as many as six vulnerabilities, all...

If you ever thought the world of physical security systems was as impenetrable as the steel doors they control, the latest revelation about the Nice Linear eMerge E3 might make you want to double-check who’s outside before buzzing them in. Executive Summary With a Twist Let’s start with the...