Ruotsalaisessa kunnassa tekstiviestejä toisilleen lähettäneet vesipumput aiheuttivat noin 1,4 miljoonan kruunun laskun. Kaksi pumppua lähetti toisilleen yli 2,2 miljoonaa tekstiviestiä kuukauden aikana.

Ongelma syntyi, kun paikallinen teleoperaattori ilmoitti sulkevansa pumput toiminnassa pitäneet 2G- ja 3G-verkot. Järvivesijärjestö joutui verkkojen sulkemisen myötä vaihtamaan operaattoria Telenoriin. Seuraavassa kuussa lähetetty lasku sai pumput omistaneen järjestön leuat loksahtamaan auki ja epäilemään, että jokin on vialla.

”Se oli absurdia. Olemme pieni järjestö, jolla ei ollut edes kymmenystä vaaditusta 1,4 miljoonasta kruunusta”, Slottsbrinkensin järvivesiyhdistyksen puheenjohtaja Ludvig af Klinteberg kertoo Dagens Nyheterille.

Kaksi pumpunhallintajärjestelmää oli lähettänyt toisilleen tekstiviestin joka sekunti kuukauden ajan pyytäen toista pumppua ottamaan ohjat. Järvivesiyhdistyksen pyytäessä selvitystä Telenorilta selvisi, että heidän rajattomassa tekstiviestipalvelussaan oli 15 000 viestin kuukausiraja ja ylimääräisistä viesteistä perittiin maksua.

Yhdistyksellä tai Telenorilla ei ollut Dagens Nyheterin kysyessä tarkkaa syytä sille, miten pumput päätyivät loppumattomaan tekstiviestikierteeseen. Järjestö on siirtynyt takaisin 2G-verkkoon, joka af Klintebergin mukaan ”toimii vielä ainakin vuoden”.

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.

https://www.securityweek.com/max-severity-gitlab-vulnerability-exploited-against-alpine-linux/

GitLab

A recent code execution vulnerability in GitLab was exploited one week after disclosure in a failed attack against Alpine Linux’s instance.

Tracked as CVE-2026-97229 (CVSS score of 10/10), the flaw stems from insufficient regular expression validation in Onigmo, Ruby’s regular expression engine.

The bug “could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration,” GitLab noted in an October 12 advisory.

According to Alpine Linux, a threat actor targeted its GitLab instance with a CVE-2026-97229 exploit on October 20 and 21. The attack failed, but the Linux distribution rebuilt the instance from scratch.

“Our checks show that the aports repository, packages, and the October 21 releases were not tampered with,” Alpine Linux notes.

It is still testing the GitLab instance before public release, and has reset all passwords, warning of observed automated login attempts using passwords compromised in other leaks.

Polymarket’s soothsaying powers apparently didn’t foresee the platform getting hacked — again.

The controversial prediction market lost millions of dollars of its users’ money after hackers breached its defenses on the international version of its website on Thursday, forcing the company to temporarily suspend trading. According to the Wall Street Journal, some $2.6 million was stolen from around 700 traders.

Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.

https://www.securityweek.com/fresh-wordpress-vulnerability-in-attackers-crosshairs/

WordPress vulnerability exploited

Threat actors started exploiting a new high-severity WordPress vulnerability within hours of patches rolling out, Defiant warns.

Patched on October 28 in WordPress 7.1.4, the security defect impacts the WordPress update process and can be exploited for remote code execution.

According to Defiant, it is a race condition in WordPress’s Core update process that can be exploited without authentication. The attack complexity, however, is high. No CVE identifier has been assigned to the vulnerability yet.

Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware.

https://www.securityweek.com/in-other-news-anthropic-breach-dispute-uefi-flaw-hits-most-servers-cloudflare-ai-data-leak/

Watch The Watchers
Cops Not Happy When Man Creates Flock-Style Camera That Only Collects Police Plates
“Two police officers walked up my driveway and knocked on my door to question me about it.”
https://futurism.com/future-society/police-upset-flock-camera-alpr-surveillance-canada?fbclid=IwdGRjcAVTZxVjbGNrBVNnAWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfn5psNeCB7H9L2IOy7EO88sl52RfcVbwyPKYaXiBhiIwtNYGAW1KPXi7v4jU_aem_rX81OhdAAaJ4mF0nrPGZ4Q

A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines.
https://www.wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems/?utm_brand=wired&utm_campaign=aud-dev&utm_medium=social&utm_social-type=owned&utm_source=facebook&fbclid=IwdGRjcAVTZuBleHRuA2FlbQIxMQBwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABH6N1Dm3oxTr0e2NDt2XCTXvX7uYq7P_6h3mW7rzptQUhvnz5NCGGd1B2kf4y_aem_aVQWCdyFgq6hqg1fValjKA