Last updated
ST Engineering iDirect: Cybersecurity Incident
Critical vulnerabilities (CVE-2026-38059, CVE-2026-38057) in ST Engineering iDirect iQ-Series Terminals affect Evolution iQ, 3315, and 9-Series models (versions ≤4.5.2.1). Missing authentication on REST API endpoints allows unauthetticated attackers to retrieve sensitive device information (serial number, Device ID, Terminal Private Key identifier, MAC address, firmware version) and cause denial-of-service. Affects critical infrastructure sectors worldwide (Communications, Defense, Energy, Government, Transportation).
Source: CISA Cybersecurity Advisories
- Who
- ST Engineering iDirect · Telecommunications · USA
- What happened
- Critical vulnerabilities (CVE-2026-38059, CVE-2026-38057) in ST Engineering iDirect iQ-Series Terminals affect Evolution iQ, 3315, and 9-Series models (versions ≤4.5.2.1). Missing authentication on REST API endpoints allows unauthetticated attackers to retrieve sensitive device information (serial number, Device ID, Terminal Private Key identifier, MAC address, firmware version) and cause denial-of-service. Affects critical infrastructure sectors worldwide (Communications, Defense, Energy, Government, Transportation).
- When
- 2026-07-02
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For ST Engineering iDirect in Telecommunications, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: The wider read — a Talent Market Index of 97.6 (Neutral), down 3.4 month-on-month — shows Americas signal flow easing (-15.6pts).
ST Engineering iDirect: 0 signals in the last 90 days — below the Telecommunications median of 1 across 34 tracked companies; 2 tracked across 94 days.
MitchelLake in this thematic
Also at ST Engineering iDirect →
More signals across Telecommunications
Partnership · Americas
Boldyn Networks →Hornets Sports & Entertainment and Boldyn Networks announced a significant extension of their cellular wireless infrastructure partnership, deploying high-performance cellular 5G across Spectrum Center and the new Novant Health Performance Center in Charlotte.
Geographic Expansion · Americas
Arelion →Arelion is adding five new network Points-of-Presence in North American data center markets (Reno, Fargo, Atlanta, Houston, South Florida/Miami) to serve neocloud, GPU-focused and hyperscale customers.
Capital Raising · Americas
Brightspeed →Apollo-owned US fibre broadband provider is in talks with creditors to raise $2B-$3B of new money, carries about $10B of debt, has warned about its survival, and may file for bankruptcy as soon as December.
Leadership Change · Americas
Lightspeed Networks →Lightspeed Networks, a Pacific Northwest fiber network provider, appointed internal executive Leif Hansen as CEO effective November 2, 2026, succeeding Randy Brogle who is departing.
Restructuring · Americas
Telesat →Ottawa-based satellite operator Telesat is working on a recapitalization plan ahead of more than $2 billion in debt maturing between December 2026 and October 2027. Lenders have proposed full principal plus interest recovery through a $1.7B equity rights offering and a $1.5B loan, following a legal dispute over moving part of its LEO business into an indirect subsidiary. Q3 2026 revenue fell 20% to C$81M and the net loss widened to C$157M.
M&A Activity · Americas
Crown Castle →Crown Castle paid $275 million to acquire a residual economic interest on a subset of tower sites, buying out revenue-sharing rights to retain more rental income, and extended lease terms with a key carrier.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- Executive Search: Americas →
Our Americas practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗