Home/Digest/Transportation/Past issues
Transportation digest,
Transportation: Ukraine Accuses US of Throttling Starlink Amid… (+3 more)
Threat actors and malware
Philippines 5th Most Targeted by Chinese Cyber Operations
According to Microsoft's Digital Defense Report 2026, the Philippines is the fifth-most targeted country by Chinese state-sponsored cyber operations, accounting for 2% of reported activity. The report highlights that the primary focus of these operations is large-scale information gathering to support China's international objectives. The United States, Taiwan, Japan, and Hong Kong are the top four targets, with 27%, 24%, 20%, and 3% respectively. The report also notes that the Philippines ranks 10th among countries targeted by North Korea and 12th overall for cyber threats. Techniques employed by Chinese state actors include exploiting vulnerabilities in applications, deploying remote access trojans, and using AI tools for identifying vulnerabilities. The Armed Forces of the Philippines has warned of escalating cyber threats amid rising geopolitical tensions with China, particularly over the West Philippine Sea.
APT · 2 sources · score 59
AI-Driven Threats and Recovery Challenges Highlighted in Cyber Security Awareness Month 2026
During Cyber Security Awareness Month 2026, experts emphasized the growing risks associated with AI in cybersecurity. AI has accelerated the timeline for vulnerability exploitation, with threats evolving from months to mere days or hours. The articles discuss the importance of resilience over mere recovery, stressing that organizations must identify critical systems and test their recovery plans effectively. Notably, 88% of organizations reported experiencing AI-related security incidents in the past year, highlighting the urgency for robust AI governance frameworks. The need for continuous visibility into AI environments is critical, as over half of organizations lack confidence in their knowledge of AI agents operating within their systems. Experts warn that technical debt and unsupported devices pose significant risks, as demonstrated by the FBI's dismantling of a botnet exploiting end-of-life routers.
APT · 2 sources · score 56 · Volt Typhoon
Also worth knowing
Ukraine Accuses US of Throttling Starlink Amid Russian Attacks
Ukraine's military operations have been severely disrupted due to sudden restrictions imposed on SpaceX's Starlink satellite communication system, which limits connectivity for drones traveling over 100 mph. This limitation was implemented without prior warning and coincided with intensified Russian missile strikes that left 600,000 people without power. Ukrainian President Volodymyr Zelensky has accused the US of failing to provide timely intelligence on incoming attacks, further straining relations between Kyiv and Washington. The restrictions on Starlink are believed to be linked to US President Donald Trump's recent decisions regarding Russian diesel imports and calls for Ukraine to halt strikes on Russian energy infrastructure. Ukrainian officials express concerns that these developments could jeopardize their military capabilities and overall defense strategy against Russian aggression.
Other Threats · 20 sources · score 68
NSA Advocates Zero Trust for Aging Critical Infrastructure Security
On October 8, 2026, the NSA released guidance urging the implementation of zero trust principles to protect aging operational technology systems, which are increasingly vulnerable to cyber threats. The guidance highlights the need for controlled access, segmentation, and monitoring to secure critical infrastructure sectors, including energy, water, and healthcare. It emphasizes that legacy systems often lack modern security capabilities, making them susceptible to attacks. The NSA's recommendations are particularly aimed at National Security Systems and the Department of War, but they also apply broadly to operators of essential services. The guidance reflects a shift from traditional network isolation to a focus on securing individual operational capabilities. The NSA warns of potentially catastrophic consequences for national security and public safety if these systems remain unprotected. The report aligns with previous CISA guidance from April 2026, which also addressed the unique challenges of securing operational technology environments.
Critical Infrastructure · 2 sources · score 57
New on leak sites
13 victims listed on ransomware leak sites by 9 groups in the 7 days before this issue. The most active:
Get the next one by email
The transportation digest is free and arrives on Tuesdays. One click to leave.
Subscribe to the transportation digest
A free account turns the digest into a personal watchlist: choose what you want to follow.