Breaking
Outrage as China programmer’s toilet death ruled non-work-related for being ‘not at desk’Social assistance spending rises 6.1% in 2025PalawanPay targets physical card rollout in Q4Kelas Sekejap: KJ and Shahril Hamdan's AI learning app expands to schools and enterprisesUniversity students in Malaysia get free Google AI Plus for 12 months: how to redeemPoverty rate falls to single digits in 2025Chinese insurer Ping An eyes Hong Kong ETFs as Beijing greenlights cross-border investmentSickKids data breach exposes employee and job applicant informationGitLab’s critical CVE-2026-19478 is under active exploitation within days of disclosure.Khazanah affirms governance push after third-quarter board meetingQR code payments launched for ShopeePay users in ChinaBanjarbaru delays school start times as haze worsensLuxury sales drop more than 10% in China as tax crackdown bitesCDL net profit surges 230.7% in first half on Lumina Grand recognitionTrade Minister sets US$25 billion Trade Expo Indonesia 2026 targetTeladan Group swings to RM9.31 million profit in 2QFY2026 on higher progressive billingsAI Living @ i-City to launch in Shah Alam with four agenciesNevada approves 8,000 robotaxis for Tesla, Uber and WaymoAI data startup Micro1 reaches $500M gross run rate amid AI training boomMan jailed and caned for stabbing Singapore priest during communionOutrage as China programmer’s toilet death ruled non-work-related for being ‘not at desk’Social assistance spending rises 6.1% in 2025PalawanPay targets physical card rollout in Q4Kelas Sekejap: KJ and Shahril Hamdan's AI learning app expands to schools and enterprisesUniversity students in Malaysia get free Google AI Plus for 12 months: how to redeemPoverty rate falls to single digits in 2025Chinese insurer Ping An eyes Hong Kong ETFs as Beijing greenlights cross-border investmentSickKids data breach exposes employee and job applicant informationGitLab’s critical CVE-2026-19478 is under active exploitation within days of disclosure.Khazanah affirms governance push after third-quarter board meetingQR code payments launched for ShopeePay users in ChinaBanjarbaru delays school start times as haze worsensLuxury sales drop more than 10% in China as tax crackdown bitesCDL net profit surges 230.7% in first half on Lumina Grand recognitionTrade Minister sets US$25 billion Trade Expo Indonesia 2026 targetTeladan Group swings to RM9.31 million profit in 2QFY2026 on higher progressive billingsAI Living @ i-City to launch in Shah Alam with four agenciesNevada approves 8,000 robotaxis for Tesla, Uber and WaymoAI data startup Micro1 reaches $500M gross run rate amid AI training boomMan jailed and caned for stabbing Singapore priest during communion
Economy

Critical Bluetooth flaw exposes Flow Neuroscience FL-100 device to local manipulation

Flow Neuroscience’s FL-100 brain-stimulation device contains a hard-coded credential that lets an attacker within Bluetooth range bypass authentication and override safety limits, CISA said on Aug 13 2026.

Source: CISA · August 14, 2026 at 12:02 AM · AI-assisted report

Single-source
Critical Bluetooth flaw exposes Flow Neuroscience FL-100 device to local manipulation
Photo: torkildr via flickr (BY-SA)

KUALA LUMPUR, 14 AUGUST 2026 —

Listen to this article

DomainFork Audio · read aloud

Flow Neuroscience’s FL-100 brain-stimulation device contains a hard-coded credential that lets an attacker within Bluetooth range bypass authentication and override safety limits, CISA said on Aug 13 2026.

Market Impact

The vulnerability, tracked as CVE-2026-18164, affects every FL-100 unit—including the Halo and CV variants—sharing the same undocumented password. CISA rated the flaw high severity with a CVSS v3.1 base score of 8.1 and CVSS v4.0 base score of 7.2. Exploitation is limited to local proximity; remote attacks are not possible. The agency reported no known public incidents exploiting the flaw as of Aug 13 2026.

Flow Neuroscience advises users to install the latest firmware via the Flow app. CISA recommends minimising Bluetooth exposure, isolating device networks behind firewalls, and using up-to-date VPNs for remote access. The advisory classifies the device as critical infrastructure in healthcare, though it does not indicate any deployment in Malaysia.

Malaysian medical-device distributors and hospitals should verify whether inventory includes the FL-100 and apply the firmware update promptly, according to industry sources. No Malaysian company or regulator has issued guidance as of Aug 13 2026.

Reporting based on CISA. Figures and claims are subject to revision as the story develops. DomainFork publishes editorial context, not investment advice — see our editorial standards.