Dragos Expands Into Connected Devices With Phosphorus Buy

Shaun Waterman • June 1, 2026

Dragos, one of the first OT cybersecurity companies, announced Monday it acquired Phosphorus, the IoT security and management player, a move analysts said was designed to catch Dragos up with its competitors and expand its offerings to cover the quickly growing IoT sector.

Cybersecurity

AI Era Raises Stakes for IT-OT Integration Security

Latest

IoT/IIoT Device Management

New CEO Joe Diamond Pushes Axonius Beyond Asset Management

Michael Novinson • May 19, 2026

New Axonius CEO Joe Diamond said the New York-based company is evolving from asset management to asset intelligence by combining visibility, contextual correlation and automated remediation across IT, IoT, OT and emerging AI agent environments. Diamond takes over from founding CEO Dean Sysman.

Agentic AI

IT Innovation Manufacturing Summit Maps Industry Trends

Poulami Kundu • May 15, 2026

CIO.inc, ISMG's global platform for technology and digital innovation, convened India's top manufacturing CIOs, CDOs and digital leaders in Mumbai for the IT Innovation Series Manufacturing Summit to translate the sector's growing technology ambitions into execution-ready strategies.

Frame Security Debuts With $50M for Human-Centric Protection

Michael Novinson • May 12, 2026

Frame Security, founded by former Wiz product and sales leader Tal Shlomo, emerged from stealth with $50 million to build AI-generated cyber training and simulations designed to prepare employees for phishing, deepfakes, voice cloning and other personalized social engineering attacks.

Freight Hacker Wields Code-Signing Service to Evade Defenses

Mathew J. Schwartz • April 16, 2026

Cargo-stealing hackers have a new trick up their sleeve: using a third-party code-signing service makes their remote management and monitoring software installers appear to be legitimate. Who's providing this signing service isn't clear. It's probably distributed by word of mouth.

Bug Management in the Mythos Era: 'Assume You're Unpatched'

Mathew J. Schwartz • April 9, 2026

Thanks to Anthropic's Mythos presaging a world in which zero-day exploits are common, one cybersecurity expert says the new mantra is this: "assume you are unpatched." Vendors and customers must focus more than ever on strong monitoring, behavior-based controls and virtual patching.

Cybersecurity

The Importance of Securing Neural Implants by Design

Marianne Kolbasuk McGee • April 6, 2026

Neural implants promise advanced patient therapies. But the products' security and privacy risks demand stronger design controls, encryption and adaptive threat models as data sensitivity and device complexity increase, said Kevin Fu of the Archimedes Center at Northeastern University.

Cybersecurity

Cheap and Dangerous: IP KVMs Carry Flaws

Greg Sirico • March 17, 2026

A flood of lost-cost devices for remote IP control of servers or human-machine interfaces has roused a concomitant wave of security warnings about their security defects. Firmware security company Eclypsium probed devices made by four KVM vendors, discovering nine vulnerabilities.

NY Sets 'First-of-Nation' Cyber Mandates for Water Sector

Chris Riotta • March 16, 2026

New York is rolling out new cybersecurity regulations for water and wastewater utilities, requiring operators to conduct risk assessments and deploy security controls while offering $2.5 million in grants to strengthen defenses against rising cyberthreats targeting critical infrastructure.

Health Sector Braces for Stryker Hack Supply Chain Shock

Marianne Kolbasuk McGee • March 16, 2026

An Iranian cyberattack on medical device maker Stryker's internal IT environment does not appear to affect connected products used by the company's healthcare clients. But an outage of Stryker's electronic ordering system could lead to supply chain issues for its customers.

Industry Innovations

Amazon Opens Its Logistics Empire to the World

Yamini Kalra • May 6, 2026

Twenty years after Jeff Bezos monetized excess server capacity and rewired the entire software industry with Amazon Web Services, Andy Jassy is running the same play - this time with planes, warehouses and a $1.2 trillion third-party global logistics market in his sights.

Cyberattacks

CISA 'CI Fortify' Aims to Keep Services Running Under Attack

Chris Riotta • May 5, 2026

The Cybersecurity and Infrastructure Security Agency launched CI Fortify, urging critical infrastructure operators to adopt isolation and rapid recovery capabilities to maintain essential services under cyberattacks, amid warnings that nation-state actors are already embedded in operational systems.

Security Lost The Speed War: Context Is How We Win

Elastic Security Team • May 5, 2026

AI has lowered the cost and speed of cyberattacks, enabling adversaries to exploit vulnerabilities within minutes. As breakout times collapse, security teams must respond faster by using context-driven intelligence and automation to detect, prioritize and stop threats in real time.