Urgent need for cybersecurity overhaul as BESS deployment accelerates, Energy Storage Europe says

energy-storage.news Sep 28, 2026

Urgent need for cybersecurity overhaul as BESS deployment accelerates, Energy Storage Europe says

Curated by Shubham · TechCapsules · Sep 28, 2026

AI-summarised brief · reviewed before publication

Energy Storage Europe released a report urging the EU to overhaul its cybersecurity framework for battery energy storage systems (BESS). The study highlights regulatory gaps and inconsistent member‑state implementation that raise costs and slow deployment while exposing grid‑level risks. With BESS capacity already at 50 GW and projected to reach 200 GW by 2030, the organization calls for reclassifying key components as critical, harmonising connectivity standards, and issuing joint guidance under NIS2 and the Cyber Resilience Act.

💡 Why It Matters

· The rapid BESS expansion turns isolated cyber threats into systemic risks that could destabilise the European grid.
· A unified regulatory approach is essential to protect critical infrastructure and ensure reliable energy delivery.

Read full article on energy-storage.news

In the AI era, channel value is being redefined

In September 2026, Simon Oliver, Channel Leader for APAC at Gigamon, highlighted a shift in partner value amid AI‑driven data growth. Gigamon’s research shows network data volumes have quadrupled, creating blind spots that traditional tools miss. A 2026 Hybrid Cloud Security Survey revealed 93 % of organizations invested in detection and visibility tools, yet only 30 % felt those tools could effectively counter breaches. Oliver argues partners must now focus on optimizing existing infrastructure, ensuring data quality and context, rather than merely selling new solutions. This strategic pivot aims to reduce IT sprawl and enhance security efficacy.

💡 By redefining partner roles to optimize current assets, organizations can close critical blind spots and improve breach response, directly addressing the escalating threat landscape driven by AI‑generated data.

analyticsinsight.net · Sep 28

Cybersecurity: The Complete Guide to Digital Security, Cyber Threats, Protection

AI agents now perform complex cyber tasks, exposing digital systems to new risks. Rising software vulnerabilities heighten the need for rigorous risk assessment, patch management, and robust security controls. David Sutton’s 2022 second edition of Cybersecurity: The Complete Guide to Cyber Threats and Protection remains foundational, covering threats, risk, recovery, and best practices across a 222‑page framework. However, it lacks coverage of AI‑driven attacks, a gap highlighted by Google’s Gemini model breaching three companies in 2026. The Forum of Incident Response and Security Teams projects 66,000 CVEs by 2026, underscoring the growing threat landscape.

💡 The surge in AI‑enabled attacks forces security teams to expand controls beyond traditional human and technical defenses, reshaping threat mitigation strategies.

thehackernews.com · Sep 28

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

The U.S. Cybersecurity and Infrastructure Security Agency added two critical Citrix NetScaler ADC and Gateway vulnerabilities, CVE‑2026‑88771 and CVE‑2026‑88772, to its Known Exploited Vulnerabilities catalog after confirming active exploitation worldwide. CVE‑2026‑88771 affects all NetScaler ADC and Gateway deployments, while CVE‑2026‑88772 requires the DTLS configuration, which is enabled by default on VPN virtual servers. Citrix has released patches for versions below the affected releases and provided indicators of compromise. Federal agencies must apply fixes by September 30, 2026.

💡 The vulnerabilities expose a broad range of enterprise networks to remote code execution, forcing organizations to prioritize patching amid complex deployment environments. The alert underscores the urgency of addressing zero‑day exploits that can be leveraged by attackers to gain persistent, high‑level access.

thehackernews.com · Sep 28

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

Microsoft identified an 18‑hour Azure breach in early June 2026, where the JADEPUFFER threat actor leveraged two compromised service principals to enumerate and delete resources. The attackers targeted Azure Storage Accounts, SQL databases, Key Vaults, Function Apps, App Services, and Virtual Machines, executing over 300 read operations and more than 150 destructive actions in a 35‑minute burst. Most storage accounts were deleted, though resource locks and deletion protection halted a few attempts. The compromise stemmed from a public GitHub leak of a service principal’s client secret.

💡 The incident demonstrates how exposed service principals can grant attackers sweeping administrative control, underscoring the critical need for secure credential handling and layered protection mechanisms in cloud environments.

openpr.com · Sep 28

TELECO Launches Managed IT and Cybersecurity Services for South Carolina Organizations

TELECO, Inc., a veteran business‑technology provider, announced on September 27, 2026 the rollout of a managed IT and cybersecurity service suite for organizations throughout South Carolina. The offering bundles help‑desk support, network and email threat detection, data backup and recovery, Microsoft 365 cloud tools, security‑awareness training, and virtual chief‑information‑officer guidance under a single contract. TELECO argues that integrating everyday IT assistance with proactive security reduces the dual burden of managing disparate vendors and mitigates the risk of outdated devices or mis‑configured accounts that can trigger both support tickets and breaches. By delivering findings in plain business language, the company aims to give South Carolina leaders clearer visibility into technology health, improve operational continuity, and protect critical data without diverting internal staff from core tasks.

💡 Consolidating support and security eliminates fragmented vendor management, giving midsize firms a single point of accountability that directly ties technology reliability to risk reduction.

thehackernews.com · Sep 27

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Security firm watchTowr reported on September 26 that two previously unknown Citrix NetScaler ADC and NetScaler Gateway zero‑day flaws are being actively exploited to execute remote code. Citrix has not confirmed the vulnerabilities, issued a bulletin, or released patches, leaving administrators to decide whether to isolate or shut down the appliances. The flaws differ from the August‑19 authentication‑bypass CVE‑2026‑19490, which Citrix already fixed and CISA listed as a known exploited vulnerability. Details of the new bugs remain scarce; watchTowr said they were discovered during forensic investigations and that Citrix expects patches early in the week of September 28. Some organizations have already taken NetScaler devices offline based on supplier warnings, while others await official guidance. Enterprises with critical workloads consider risk unacceptable.

💡 The active exploitation of unpatched NetScaler gateways threatens the primary entry point for many corporate networks, forcing immediate operational decisions.