physical security3 articles
Ransomware Crews Are Done With Your Data. Now They Want Your Building
Cybercriminals are increasingly targeting physical building and operational systems — such as refrigeration units, HVAC controls, and door access systems — to cause real-world disruption and pressure victims into paying ransoms, moving beyond traditional data theft. Building automation systems are particularly attractive targets due to their poor security controls, widespread use of insecure protocols, and lack of network monitoring, with ransomware attacks on industrial organisations rising sharply year on year. Experts warn that AI is lowering the barrier for attackers to exploit obscure OT systems, and that as IT security improves, internet-connected physical infrastructure will increasingly become the next prime target.
Drone Strike Knocks Out Yandex Datacenter. Industry Told You So.
A Ukrainian drone attack caused a fire at Yandex's datacenter in Sasovo, Russia, taking down one of its cloud availability zones with little prospect of near-term restoration. Yandex, Russia's dominant internet company, has not officially attributed the attack, though Ukrainian President Zelensky suggested it was a response to Russian attacks on Ukrainian datacenters. The incident highlights a growing trend of datacenters becoming targets in armed conflict, following a similar attack on an AWS facility in Bahrain earlier in the year.
How Complaining About a Doctor Got a Red Teamer Into a Restricted Hospital Records Room
A red teamer named Dahvid Schloss successfully infiltrated a hospital's secure records room using social engineering — by wearing scrubs, carrying a fake badge, and bonding with a nurse over complaints about a real, notoriously difficult doctor. He also discovered serious network security flaws at other hospitals, where medical devices transmitted sensitive patient data, including Social Security numbers, unencrypted over the same Wi-Fi network as guests. The incidents highlight how human trust and poor network segmentation can be just as dangerous as technical vulnerabilities in healthcare settings.