French Supermarket Fridge Cyberattack Hits Danfoss

French supermarket fridge cyberattack: Danfoss refrigeration controllers forced into defrost, October 2026

Attackers took control of refrigeration controllers at hundreds of French supermarkets overnight on October 11 to 12 and forced them to heat up, and this French supermarket fridge cyberattack left several chains throwing away stock. Les Mousquetaires, which owns Intermarché, said its fridges and freezers were put into defrost and heated to as much as…

Read More

GhostAction GitHub Actions Attack Steals Secrets

The GhostAction GitHub Actions attack is back: fake security-audit workflows now harvest secrets from whole git histories. Check your repos since August 31.

The GhostAction GitHub Actions attack is back, and its payload now reads a repository’s entire git history. Researchers report that attackers took over two well-known maintainer accounts on October 8 and pushed a workflow called “Security Audit” into 345 repositories within minutes. Rotating your current Actions secrets no longer settles the exposure, because the workflow…

Read More

Flax Typhoon Integrity Tech Domain Seizure

Flax Typhoon Integrity Tech: the FBI seized seven domains behind two Chinese hacking tools. The advisory lists Exchange password spraying and old CVEs.

The Flax Typhoon Integrity Tech case reached a new stage on October 8, when the FBI seized seven domains behind two hacking tools, MicroScan and FishHub. The Justice Department says a Chinese company with government contracts, Integrity Technology Group, operated them. The joint advisory published alongside gives defenders a short list: password spraying against Microsoft…

Read More

Top 5 Cybersecurity News

Top 5 Cybersecurity News, October 9, 2026: FortiBleed lockouts, AI-driven bank hacks, the ASOS app breach, Osaka ransomware and Warlock SharePoint attacks.

This week’s Top 5 Cybersecurity News for October 9, 2026 has one thing in common: nobody needed a new exploit. A credential campaign against Fortinet firewalls now locks owners out of their own devices and feeds ransomware affiliates. An open-source AI tool probed South Korean banks through employee-facing systems. ASOS customers received their breach announcement…

Read More

Denmark CPR Data Breach: 8.8 Million Records

Denmark CPR data breach: 8.8 million records pulled through one company's lawful registry access. An oversized invoice exposed it after ten days.

The Denmark CPR data breach exposed the names, addresses and personal ID numbers of about 8.8 million people, roughly four in five records in the country’s Central Person Register. Unauthorized parties reached it through a smaller company’s lawful lookup access, ran more than 14 million queries over about ten days in September, and were noticed…

Read More