Loading story…
Enterprises are rapidly adopting new Wi-Fi standards such as Wi-Fi 7, driven by the need for higher throughput, lower latency, and improved spectrum utilization to support dense device environments. This evolution is reshaping security priorities, with a heightened focus on access control, visibility, and telemetry as organizations manage mixed generations of devices and increased encrypted traffic. The expansion into the 6 GHz band further complicates network management, requiring robust authentication and session continuity to maintain security in public venues, multi-dwelling units, and industrial sites.
Simultaneously, the proliferation of rugged IoT devices in mission-critical environments such as defense, utilities, and public safety introduces unique cybersecurity challenges. These devices often operate outside traditional secure perimeters and in harsh, disconnected conditions, making conventional security models inadequate. The risks associated with compromised edge IoT devices include operational paralysis, data leaks, and disruption of essential services, with the financial and reputational impact of breaches continuing to rise. Organizations must rethink their security strategies to address the distinct requirements of both advanced Wi-Fi networks and rugged IoT deployments.
See affected versions and whether adversaries are exploiting it.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Enterprises are increasingly exposed to cybersecurity risks due to the proliferation of unmanaged and diverse extended Internet of Things (xIoT) and operational technology (OT) devices within their networks. Research analyzing over 10 million devices across 700 organizations found that two-thirds of networked devices are not traditional IT assets, but rather include network gear, OT, IoT, and medical equipment. Common high-risk device types such as VoIP phones, IP cameras, point-of-sale systems, and uninterruptible power supplies are often widespread yet remain unmanaged, creating significant security blind spots. The diversity of device functions, vendors, and operating system versions further complicates risk management, making it challenging for security teams to identify, patch, and mitigate vulnerabilities effectively. Manufacturers, in particular, face heightened OT security challenges due to legacy technology, lack of asset visibility, and the growing number of access points resulting from mergers and acquisitions. The complexity of managing access permissions, especially with multiple users sharing admin accounts, increases the difficulty of incident response and overall security posture. Despite increased awareness of these risks, the combination of device diversity, legacy systems, and human factors continues to present substantial obstacles to securing enterprise and manufacturing environments against cyber threats.
Jun 29, 2026
A recent attempted cyberattack on a French ferry highlighted the growing threat posed by physical access to enterprise networks through small, easily concealed devices such as Raspberry Pi computers. The attacker attempted to compromise the vessel’s operations by plugging a Raspberry Pi paired with a cellular modem into the network, but was thwarted due to effective network segregation and the absence of remote access to critical controls. Security analysts warn that many enterprises are vulnerable to similar attacks, as their physical security measures often lag behind their digital defenses, leaving them exposed to threats from rogue devices introduced onsite. This incident underscores the broader issue of IoT and connected device security in enterprise settings, where digital signage, smart displays, and other networked endpoints are frequently overlooked as potential attack vectors. As organizations deploy increasing numbers of such devices across distributed locations, the attack surface expands, and the risk of compromise grows. Experts emphasize the need for robust physical security controls, network segmentation, and heightened awareness of the risks posed by seemingly innocuous devices that can provide attackers with a foothold inside corporate networks.
Jun 29, 2026
Recent research highlights that enterprise networks are increasingly vulnerable due to a high prevalence of legacy, end-of-life (EOL) systems, unpatched devices, and poor network segmentation. Telemetry from over 27 million devices across 1,800 enterprises reveals that 26% of Linux and 8% of Windows systems are running unsupported operating systems, with 39% of IT devices lacking active endpoint security. Additionally, a significant portion of devices operate outside IT control, and 77% of corporate networks are poorly segmented, allowing low-security devices to share network space with high-value assets, increasing the risk of lateral movement by attackers. Simultaneously, critical infrastructure sectors such as energy, healthcare, government, and transportation are experiencing a surge in cyberattacks targeting IoT and Android devices. Attackers are exploiting the interconnectedness of these industries for financial gain, with the U.S. being the primary target. The rise in attacks underscores the need for stringent tracking of user behaviors, robust access controls, accurate asset inventories, and improved network segmentation to mitigate risks posed by unmanaged and vulnerable devices in both enterprise and critical infrastructure environments.
Jun 29, 2026