Cyberattack Compromises Refrigeration Systems in French Supermarkets
PremiumCyberattack disrupted freezers and refrigerators across hundreds of French supermarkets causing spoilage and outages.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Today
GhostAction Strikes Again: 1,900 GitHub Accounts Breached in New Attack Wave
PremiumGhostAction campaign compromised ~1,900 GitHub accounts and attempted to extract secrets from thousands of repositories' CI.
Cyberattack on French Grocers Highlights Risks of Unpatched Refrigeration Systems
PremiumHundreds of grocery stores lost millions after third-party-managed, outdated OT fridge firmware caused failures and outages.
Critical Bug in Claude Code Desktop Exposes Sensitive Developer Credentials
PremiumAnthropic SneakPeek bug in Claude Code Desktop preview pane can silently exfiltrate SSH keys, AWS credentials and OAuth tokens.
CISA Alerts on Ivanti and Microsoft Vulnerabilities Amid Record Patch Tuesday
PremiumCISA issues warning about newly exploited Ivanti vulnerability while Microsoft ships record-breaking Patch Tuesday fixes.
Security Experts Use AI to Develop Chrome Exploit in Record Time
PremiumResearchers used a public GPT-5.6 model to craft a full-chain Chrome exploit in six days, leading Google to patch three bugs.
AI Agent Uncovers Critical OTP Bypass Vulnerability in Major Insurer's Website
PremiumAn AI pentesting agent autonomously discovered a critical OTP routing bypass in a live insurer site, enabling account takeover.
Ivanti Connect Secure Faces Exploitation of Critical Zero-Day Vulnerability
PremiumBSI warns multiple Ivanti Connect Secure zero-days are being actively exploited, enabling auth bypass and remote code execution.
Critical Windows Shell Vulnerability Patched Amid Active Exploitation
PremiumMicrosoft patched actively exploited Windows Shell zero-day CVE-2026-96951 that bypasses Mark of the Web protections (CVSS 8.8).
Critical Vulnerability in Collabora Exploited to Compromise Nextcloud Servers
PremiumAttackers exploited Collabora Online CODE Server RCE (CVE-2026-110447) to plant web shells and backdoor Nextcloud servers.
Ad-Delivered Spyware Campaign Targets Al Jazeera Devices
PremiumCitizen Lab documents ad-delivered zero-click spyware campaign infecting 45 Al Jazeera devices via background ads.
Critical Flaw in ChatGPT's GitHub Integration Exposes Private Repository Secrets
PremiumCritical ChatGPT GitHub integration flaw could be manipulated to modify private repos and exfiltrate repository secrets via Actions.
Burger King Japan Data Breach Impacts Millions of App Users
PremiumBurger King Japan breach exposed roughly 11.18 million app member records after unauthorized access to membership systems.
Next.js Releases Urgent Update to Address Critical Security Vulnerabilities
PremiumNext.js emergency update fixes two critical unauthenticated RCEs in React Server Components and librsvg/Sharp SVG processing.
Microsoft Cripples Global Phishing Network Responsible for Over a Billion Scams
PremiumMicrosoft disrupted a Chinese-language phishing ecosystem (Yam Store) responsible for over one billion scam messages.
Ivanti's Zero-Day Challenge: Navigating Vulnerability Management
PremiumIvanti ICS zero-day CVE-2026-104935 highlights incomplete patches and operational obstacles leaving ICS environments exposed to RCE.
Data Breach at CenterPoint Energy Exposes Over 1 Million Texans' Personal Information
PremiumCenterPoint Energy breach exposed names, addresses, SSNs and driver license numbers of roughly one million Texas residents.
Drupal Addresses Critical Security Vulnerability in Field UI Module
PremiumDrupal Field UI core flaw enables unauthenticated remote code execution via contributed modules; patches released for Drupal 10/11.
AdFection Spyware Exploits Digital Ads for Covert Surveillance
PremiumAdFection zero-click spyware delivered via targeted ads infects devices without user interaction, affecting news organizations.
Historic Data Breach Hits UK Legal Aid Agency
PremiumLegal Aid Agency breach exposed records dating back to 1978, expanding scope to hundreds of thousands of historic records.
Get these articles delivered to your inbox.
Subscribe free