Entrust IDV DeviceSecurity shared native dependency for Flutter, used by the Entrust IDV native capture module packages. Changelog excerpt: ### Changed - On iOS, the NFC package now depends on the `OpenSSL-Universal`pod - Update Android SDK to 100.18.0 - Update iOS SDK to 100.19.0

Learn why your employees shouldn’t have permanent administrator access to their computers and how to remove it safely without disrupting work.

Cisco has alerted customers regarding a critical authentication bypass flaw inside the Secure Firewall Management Center (FMC) software that is being actively exploited in the attacks.  The vulnerability, known as CVE-2026-20079, is given a maximum CVSS score 10.0, which makes it one of the most dangerous flaws impacting Cisco’s firewall management products.  The flaw was first disclosed in March 2026 by Cisco, but on September 9, Cisco updated its security advisory to confirm about the active exploitation in August that its Product Security Incident Response Team (PSIRT) became aware about. Cisco has advised users to update impacted systems immediately.  About the vulnerability The flaw impacts the web interface of Cisco Secure Firewall Management Center Software. When an improper system process is created after the starting of the impacted device, it results in the flaw.  The threat actor does not require authentic credentials to abuse the vulnerability. A remote attacker can escape verification by sending specially tailored HTTP requests to a compromised FMC device.  Cisco has listed the problem as authentication bypass using a different channel or path, or CWE-288. As the flaw can be abused remotely without user interaction or verification, Cisco has given it a CVSS score of 10.0. Impacted products Vulnerable products According to Cisco, regardless of device configuration, the flaw impacts Cisco Secure FMC Software and Cisco Security Cloud Control (SCC) Firewall Management. Not vulnerable products The following products are not impacted by the vulnerability: * Firewall Device Manager (FDM) * Secure Firewall Adaptive Security Appliance (ASA) Software * Secure Firewall Threat Defense (FTD) Software * Security Cloud Control (SCC), formerly Defense Orchestrator Impact on organizations The flaw could have severe impact for enterprises using Cisco Secure Firewall Management Center for managing their security infrastructure If a threat actor gains root access, they may modify system configurations, install additional malware, use the infected management system as a base for future attacks and run malicious commands. The vulnerability could have serious consequences for organizations using Cisco Secure Firewall Management Center to manage their security infrastructure. An attacker who gains root access could potentially alter system configurations, execute malicious commands, install additional malware or use the compromised management system as a foothold for further attacks. “To determine if this vulnerability may have been exploited, use the zgrep "package_info.*license" messages* CLI command in expert mode,” Cisco said.  According to Cisco, if organizations suspect exploit, they should reach out to the Cisco Technical Assistance Center (TAC) for help with recovery options. 

CmReady, a new standard by Wibu-Systems, harmonizes hardware and software worlds, offering enhanced product security and monetization for industrial devices.

Crypto is a strange beast. On one side you’ve got math that can stand up to nation-state pressure.

 Crossing into the United States has become riskier since the start of Trump’s second administration. Foreign visitors and US visa holders are increasingly being detained, questioned, or deported. As uncertainty grows, travel demand from Canada and Europe has dropped sharply. Regardless of why you are traveling, US Customs and Border Protection (CBP) has the authority to search phones and other electronic devices at the border.  While other countries also inspect devices, the volatile US policies have led travelers and companies to reconsider what they carry. Canada has issued travel warnings, and journalists are advised to prepare for device searches. At the border, CBP can demand PINs or biometrics to unlock devices. US citizens and green card holders can refuse without being denied entry, although this may trigger additional questioning or device seizure. Visa holders and visitors, however, face detention or deportation if they refuse a search. Travelers must assess their own risk based on legal status, nationality, profession, and online activity.  To minimize risk, disable facial recognition or fingerprint unlock before traveling and use only a PIN. Update your phone’s software to make it harder to crack. Carry a paper boarding pass and keep your phone off or out of sight when approaching agents. One strategy is to travel with a separate device, either by wiping an old phone or buying a new one. Build a limited digital footprint on the travel phone—use separate emails, social media accounts, and encrypted messaging apps like Signal.  However, the device should not appear suspiciously clean; normal usage should be simulated to avoid drawing attention. Another option is to clean your primary phone before traveling by backing up and deleting sensitive data and unnecessary apps. After returning, you can restore your phone from backup. However, mistakes in this process can leave traces of personal information vulnerable during inspection. Even if you don’t make major changes, basic steps like deleting old apps, updating software, limiting social media use, and keeping important documents printed can protect your privacy.  Experts warn that travelers should assume border agents may scrutinize online presence and past posts. As device searches become more common at US borders, preparing ahead of travel has become critical for safeguarding personal information.

A practical guide to generating, storing, and using private keys with hardware-backed protection

Google introduced Device Bound Session Credentials (DBSC) in Chrome 146 for Windows to cryptographically bind session cookies to hardware-backed keys, blocking info-stealing malware from reusing stolen credentials. macOS support will arrive in a future Chrome release, and testing with partners like Okta showed a decline in session theft by infostealers such as LummaC2. #DeviceBoundSessionCredentials #LummaC2

As the workforce disperses beyond the corporate perimeter, Zero Trust is essential to tie identity to device posture rather than assuming anything inside the network is safe. Because MFA alone cannot detect compromised endpoints or stolen session tokens, solutions like Specops Device Trust bind identity to a verified device and enforce continuous posture checks to secure access. #SpecopsDeviceTrust #ActiveDirectory