This posting is here to collect cyber security news in November 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
This posting is here to collect cyber security news in November 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
222 Comments
Tomi Engdahl says:
Vesipumput tekstailivat toisilleen miljoonakulut: 32 000 sivun laskuerittely piti toimittaa pahvilaatikossa – yhdistys oli ajautua konkurssiin
Kaksi vesipumppua kyseli toisiltaan veden loppumisesta miljoonia kertoja.
https://www.city.fi/arki/vesipumput-tekstailivat-toisilleen-miljoonakulut-32-000-sivun-laskuerittely-piti-toimittaa-pahvilaatikossa-yhdistys-oli-ajautua-konkurssiin/?fbclid=IwdGRjcAVYL5tjbGNrBVgvW2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfWAUWHT1N5OWk3IVs7ZMJvJ88hu0bqxJnP70UY-mHxyEC3Tce07Nv2V45TQw_aem_TkaVfrzxkJ9Buz4jg57kDQ
Tavallisesti 10 viestiä päivässä – nyt yksi sekunnissa
Pumput lähettävät normaalisti toisilleen noin kymmenen tekstiviestiä vuorokaudessa, mutta tekninen häiriö muutti viestittelyn lähes tauottomaksi.
SVT:n mukaan laitteet lähettivät noin yhden viestin sekunnissa reilun kuukauden ajan, jolloin viestien kokonaismäärä kasvoi noin kahteen miljoonaan.
Sekunnin välein lähetetty viesti tarkoittaa laskennallisesti 86 400 tekstiviestiä vuorokaudessa, kun koneilla ollut tarvetta nukkua tai pitää taukoja.
Kaikki alkoi 3G-verkon sulkemisesta
Ruotsissa vanhan 3G-verkon sulkeminen pakotti yhdistyksen uusimaan pumppaamojen tiedonsiirtoon käyttämänsä tekniikan.
Yhdistys alkoi testata uusia laitteita ja teleoperaattori Telenorin liittymää, mutta järjestelmä ei toiminut toivotulla tavalla.
Yhdistys päätti olla jatkamatta liittymää kuukauden kokeilun jälkeen tietämättä, että pumput olivat lähettäneet valtavan määrän maksullisia tekstiviestejä.
Ilmaiset tekstiviestit muuttuivat jättilaskuksi
Yhdistykselle oli syntynyt käsitys, että sen hankkimaan liittymään kuuluivat rajattomat tekstiviestit.
Sopimuksen ehdoissa oli kuitenkin 15 000 viestin kuukausiraja, jonka jälkeen jokainen ylimääräinen viesti maksoi 63 Ruotsin äyriä eli noin kuusi senttiä ilman arvonlisäveroa.
Yksittäinen viesti maksoi siis vain muutamia senttejä, mutta miljoonien viestien jälkeen laskun loppusumma oli huimat 1,4 miljoonaa kruunua.
Laskuerittelyssä oli käsittämättömät 32 000 sivua
Yhdistys pyysi Telenorilta erittelyn, josta selviäisi, mistä valtava puhelinlasku oli syntynyt.
Operaattori toimitti yhdistykselle peräti 32 000 sivun mittaisen laskuerittelyn, joka osoitti tekstiviestiliikenteen laajuuden.
Yhdistyksen puheenjohtaja Ludvig af Klinteberg kertoi Dagens Nyheterille, että lasku oli noin kymmenen kertaa suurempi kuin yhdistyksen koko kassa, joten sen maksaminen ei ollut mahdollista.
Konkurssi uhkasi – Telenor perui lopulta laskun
Yhdistyksessä järjestettiin useita kokouksia, joissa pohdittiin, miten täysin odottamattomasta laskusta selvittäisiin.
Af Klinteberg kertoi SVT:n haastattelussa, että pahimmassa tapauksessa yhdistystä olisi uhannut konkurssi, koska sillä ei ollut varaa maksaa laskua.
Lopulta Telenor kuitenkin päätti perua vaatimuksensa yhdistyksen kanssa käytyjen keskustelujen jälkeen, ja konkurssiuhka väistyi.
Häiriön syyksi epäillään SIM-kortin vikaa
Vesipumppujen poikkeuksellisen tekstiviestitulvan tarkka syy jäi epäselväksi, mutta VVS-Forumin mukaan sen taustalla saattoi olla SIM-korttiin liittyvä ohjelmistovirhe.
Yhdistys luopui epäonnistuneesta testijärjestelmästä ja palasi toistaiseksi vanhaan, prepaid-liittymiä ja 2G-verkkoa käyttävään ratkaisuun.
Ruotsin yrittäjäjärjestö Företagarna nosti tapauksen varoittavaksi esimerkiksi siitä, miten automaatio voi jatkaa virheellistä toimintaansa pitkään ilman ihmisen puuttumista asiaan.
Sama tekninen murros koskee myös suomalaisia
Suomessa teleyritysten velvollisuus ylläpitää 2G-verkkoja päättyy vuoden 2029 lopussa, minkä jälkeen myös 2G-yhteyksiä käyttävien laitteiden toimintaa on syytä tarkastella uudelleen.
Mökin etäohjaimen, hälyttimen tai muun SIM-kortilla toimivan laitteen omistajan kannattaa selvittää laitteensa verkkoyhteys, liittymän viestirajat ja mahdolliset kulurajoitukset, sillä muutaman sentin tekstiviestistäkin voi syntyä kallis ongelma.
Tomi Engdahl says:
Ranskassa hyökättiin veriplasman säilytysjärjestelmiin – tämä on tilanne Suomessa
Suomen Punaisen Ristin Veripalvelu sanoo seuraavansa tiiviisti ict-järjestelmien häiriö- ja tietoturvariskejä
Ranskassa hyökättiin veriplasman säilytysjärjestelmiin – tämä on tilanne Suomessa
https://www.is.fi/digitoday/art-2000012388848.html
Alkuviikosta kauppoihin kohdistuneen kylmälaiteiskun kanssa samaan aikaan nähtiin hyökkäys veriplasmapakastimiin Ranskassa.
Ranskan veripalvelu Établissement français du sang (EFS) kertoi tiistai-iltana tietoturvapoikkeamasta kolmessa toimipaikassaan. Itse hyökkäys tapahtui sunnuntain ja maanantain välisenä yönä 1.–2. marraskuuta.
Suomessa vastaavaa ei ole tapahtunut.
Ranskassa kylmätiloissa säilytettiin verensiirtoihin tarkoitettuja plasmapusseja sekä lääkkeiden valmistamista varten fraktiointiin tarkoitetut plasmapussit.
EFS:n mukaan nämä siirrettiin muualle ja turvattiin.
– Lämpötila- ja sulatusasetuksia nostettiin erittäin korkeiksi. EFS:n valvonta- ja hälytysjärjestelmät havaitsivat poikkeamat nopeasti, minkä ansiosta tarvittavat toimet voitiin toteuttaa niin, ettei yksikään näyte tai verituote vahingoittunut, EFS kertoo tiedotteessaan.
Hyökkääjä ja mahdollinen yhteys eurooppalaisiin kauppahyökkäyksiin ovat vielä selvittämättä.
Traficomin Kyberturvallisuuskeskus kertoi tiistaina Ilta-Sanomille, että sillä ei ole tiedossa merkkejä siitä, että terveydenhuoltosektoriin tai muuhun uuteen merkittävään huoltovarmuuskriittiseen toimijaan olisi kohdistunut uhkaa.
Tomi Engdahl says:
Tämä tiedetään kylmälaiteiskuista Suomessa nyt
https://www.is.fi/digitoday/tietoturva/art-2000012384330.html
Tomi Engdahl says:
Cyber covid video
https://www.facebook.com/share/v/1DM5wyjfcJ/
Tomi Engdahl says:
Several UK meat suppliers reportedly fell victim to cyber attacks overnight with refrigeration units heating up
FULL STORY
https://www.examinerlive.co.uk/news/uk-world-news/cyber-attack-hits-uk-meat-34859491?utm_term=Autofeed&utm_medium=Social&utm_source=Facebook#Echobox=1793781007
Cyber attack hits UK meat suppliers as fridges reach 100C amid urgent warning
Several UK meat suppliers reportedly fell victim to cyber attacks overnight with refrigeration units heating up
Several UK meat suppliers have reported their refrigeration systems heating up overnight following cyber attacks targeting software utilised by supermarkets and food suppliers throughout Europe. The Association of Independent Meat Suppliers (Aims) disclosed that a number of its roughly 300 members had “unexpectedly become collateral” from the breach.
Some members observed their fridge systems starting to defrost on Monday evening, while another witnessed their unit’s temperature climb to an alarming 100C. Nevertheless, owing to the typical operating patterns of abattoirs, the units were empty at the time – meaning no food produce was compromised, reports the Daily Star.
An Aims spokesman said: “None who have been affected have lost any meat, but once again this must act as a reminder to all in the food industry, at whatever point in the supply chain they are, that their businesses may be seen by some as targets.
Speaking at the NCSC annual report launch on Tuesday, director of operations Paul Chichester said: “We’re aware of those incidents in the UK, and obviously we’re working with the affected organisations. We’ll keep monitoring that. At the moment, the impact is minimal.”
Tomi Engdahl says:
Venäjä-mieliset hakkerit kertovat olleensa kyberhyökkäysten takana
Venäläismieliset hakkeriryhmät väittävät olleensa ruokakauppojen kylmälaitteisiin kohdistuneiden kyberhyökkäysten takana.
https://www.iltalehti.fi/ulkomaat/a/c1e76516-8a3f-4d53-958e-036901077a70
Kaksi venäläismielistä hakkeriryhmää on ilmoittanut olevansa vastuussa useissa Euroopan maissa tehdyistä kylmälaitteisiin kohdistuneista kyberhyökkäyksistä, kertoo italialaismedia Rai.
Telegramissa julkaistulla tekoälyllä luodulla videolla hakkeriryhmät NoName057(16) ja Z-Pentest väittävät manipuloineensa etäyhteyksien avulla satoja jäähdytysjärjestelmiä eri puolilla Eurooppaa.
Videoviestissä ryhmät uhkaavat myös uusilla hyökkäyksillä Euroopan kriittistä infrastruktuuria vastaan.
Ryhmien mukaan tulevien hyökkäysten kohteeksi voivat joutua esimerkiksi vesihuoltojärjestelmät, voimalaitokset, teollisuuslaitokset ja elintarvikevarastot.
Kyberturvallisuuskeskuksen erityisasiantuntija Juha Tretjakov vahvisti Uutissuomalaiselle keskiviikkona suomalaisten ruokakauppojen kylmälaitteissa havaittujen lämpötilahäiriöiden johtuneen kyberhyökkäyksestä.
Tomi Engdahl says:
Fridge cyberattacks hit 3 German supermarkets: How likely are further attacks?
https://www.iamexpat.de/expat-info/germany-news/fridge-cyberattacks-hit-3-german-supermarkets-how-likely-are-further-attacks
German supermarkets have now recorded three cases of cyberattacks on fridges and freezers. Here’s what we know about the likelihood of further attacks, who might be behind the attacks and their motives.
Edeka, REWE and CAP-Markt hit by cyberattack
Around midnight on Sunday, November 2, a branch of Edeka in Reisbach, Bavaria, was hit by a cyberattack on its fridges and freezers, according to a report by Bayerischer Rundfunk (BR).
Hackers turned the fridge and freezer temperatures up to 50 degrees celsius, forcing staff returning to the Edeka Ernst branch on Monday morning to throw away huge amounts of defrosted and warm food. The supermarket said it would restock fridges and freezers by Tuesday morning.
A REWE branch in Raesfeld, North Rhine-Westphalia, was also affected, with staff arriving Monday morning to find fridge and freezer temperatures at 50 degrees. A CAP-Markt branch in Volmarstein, also in North Rhine-Westphalia, is the third affected supermarket. There, fridges and freezers were only turned up to 10 degrees, though it is currently unclear whether this was due to a cyberattack or a technical fault.
These appear to be among the first fridge and freezer cyberattacks in Germany, following attacks in recent weeks across the Netherlands, Sweden, Ireland, Estonia, Belgium, Finland, Luxembourg, France, Italy and Portugal.
Around 400 supermarkets across France were affected, along with 17 small branches in the Netherlands, around 15 Carrefour branches in Belgium, 13 supermarkets in Ireland, around six Coop branches in Sweden, and just one supermarket in Estonia.
How likely are further cyberattacks on German supermarkets?
The attacks targeted software from the engineering firm Danfoss, which allows supermarkets to remotely manage fridges and freezers. The Danish company has said the affected cold units were running security software that had not been updated, increasing vulnerability to hacks.
The risk of further attacks varies by country and supermarket. Speaking to Berliner Morgenpost, an “insider who operates several large [supermarket] branches” explained that German supermarkets are less vulnerable to widespread attacks than those in neighbouring France.
This is because the German supermarket industry is more decentralised. For example, Edeka and REWE branches are run by individual independent retailers under the Edeka or REWE brand. Each retailer can choose which fridge and freezer system it uses.
“Such a scenario would be more realistic [at Lidl and Aldi],” the insider noted. These German supermarkets are centrally managed. Aldi and Lidl refused to comment on the risk to their cooling units.
Who is behind the fridge and freezer hacks?
It is currently unclear who is behind the cyberattacks. However, speaking to BR, experts suggested that since hackers made no financial demands of supermarkets, sabotage is a likely motivation.
Speaking to the Guardian about the Europe-wide attacks, Rafe Pilling, senior director for threat intelligence at cybersecurity company Sophos, said he believed there to be two plausible actors.
“The two most plausible attribution scenarios for me are some kind of state-based signalling and demonstration of capability or some kind of lone-wolf hacker that is conducting these attacks for their own personal reasons,” Pilling said.
He added that the state-linked actor scenario was most likely
Tomi Engdahl says:
Europe on alert after supermarket freezers hit by cyber-attacks in 10 countries
https://www.bbc.com/news/articles/cwy8lm1m59mvo
A spate of cyber-attacks that hit supermarket chains across at least 10 European countries on Monday has prompted European Union officials to warn of a deliberate attempt to disrupt the food supply chain.
Supermarkets have reported problems in Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, Germany and Sweden, and the significant increase in freezer temperatures has forced retailers to discard food.
Temperatures in chains across Europe reportedly rose as high as 50C (122F).
The European Union has raised concerns about the attacks, which come three weeks after a cyber-attack disrupted as many as 700 French grocery stores, causing food losses estimated at tens of millions of euros.
The security of refrigeration systems as well as other devices that can be monitored remotely has heightened concerns about government-backed hybrid attacks.
The EU’s food and agriculture commissioner, Christophe Hansen, said the bloc was taking the incidents very seriously and warned of further disruption in the future.
Commission spokesman Thomas Regnier was careful not to attribute blame, but said: “These incidents of course show once again how cyber-attacks can disrupt essential services and affect citizens’ daily lives.”
“These are not isolated incidents and of course we have to be collectively resilient and prepared for such cyber incidents.”
In Italy, Giorgia Meloni’s government called a meeting with intelligence chiefs, but said the impact was “currently very limited” and most of the food distribution chain had up-to-date security systems able to fend off such attacks.
At least four Co-op supermarkets in Sicily and one business in Tuscany were affected, according to the national cybersecurity agency.
Belgian supermarkets were among those hardest-hit, with dozens of stores reporting refrigeration failures. Federal prosecutors have opened an investigation.
In Ireland, 13 SuperValu stores were impacted by what the chain’s owner, Musgrave Group, called a cyber-incident. “Replenishment of chilled and frozen ranges in the affected stores is well under way,” a spokesman said on Monday.
A small number of corner shops in the Netherlands also suffered disruption. Last month, supermarket chain Albert Heijn had to take several services offline because of a separate cyber-attack.
There was disruption to refrigeration systems at the Rewe Büsken supermarket in western Germany after a cyber-attack on system provider Danfoss, the company told the BBC. Its systems have been back in operation since Monday afternoon.
In Portugal, the Mosqueteiros group said that incidents at seven Intermarché stores had been linked to a cyberattack, which “appears to have targeted an external service provider responsible for managing the refrigeration systems”.
Swedish chain ICA also said “a limited number” of its stores had experienced refrigeration problems, without confirming a cyber-attack, and Sweden’s national cyber-security agencies said they were monitoring the incident.
In Finland, irregular temperatures were detected in a few smaller grocery stores belonging to the Kesko group, which said it was investigating the issue.
In Estonia, at least one supermarket was attacked by hackers who raised the temperature in the refrigeration units to 50C, public broadcaster ERR reported.
In the UK, the National Cyber Security Centre (NCSC) has warned British retailers to update the software on fridge temperature controls.
UK meat industry hit by cyber-attack which targeted European supermarket freezers
https://www.bbc.com/news/articles/ckq6ndq8l6v0o
Businesses in the UK’s food supply chain have been impacted by the cyber-attack which hit supermarket fridges and freezers across Europe on Monday.
The National Cyber Security Centre (NCSC) says it is aware of “a couple of instances where vulnerable technology had been exploited in the UK.”
Tomi Engdahl says:
EU urges action as Germany, Romania and UK report supermarket cyberattacks
EU says supermarket hacks in 11 countries are ‘not isolated’, but a Romanian official says he suspects no state actor.
https://www.aljazeera.com/amp/news/2026/11/4/eu-urges-action-as-germany-romania-and-uk-report-supermarket-cyberattacks
Hackers raised the temperatures of refrigeration systems at supermarkets in Germany, Romania and the United Kingdom during Monday’s cyberattacks, officials said, bringing the number of European countries affected in the hacking spree to at least 11.
The announcements on Tuesday came as the European Union promised a collective response, warning that the attacks, which have spoiled tonnes of food across the continent, were “not isolated”.
Tomi Engdahl says:
Cyberattacks hit refrigerators in Bavaria and North Rhine-Westphalia
A wave of cyberattacks on refrigerators spoiled huge amounts of food. The first cases in Germany have now been reported in Bavaria and North Rhine-Westphalia
https://www.heise.de/en/news/Cyberattacks-hit-refrigerators-in-Bavaria-and-North-Rhine-Westphalia-11509173.html
Tomi Engdahl says:
Hackers continue to wreak havoc by targeting essential infrastructure
Blood banks in France hit by cyber attack as bomb hoaxes leave flights grounded across Europe
The incident in France comes soon after cyber attacks on supermarket fridges forced them to throw away food
https://www.independent.co.uk/news/world/europe/blood-banks-hacked-france-cyberattack-b3079117.html?fbclid=IwdGRjcAVYUatjbGNrBVhRmmV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfu4czn7EZY8kVRRJgaVLValQ30nNi2QuN20dejEKD-528huO3ZY3URWq4Eog_aem_UTdNMBN-Zi7XYPQ4XbJafA
Blood banks in France were hit by a cyberattack, the French health ministry has said, the latest in a series of online hoaxes and cyberattacks across Europe.
“Several regional facilities of the French Blood Establishment (EFS) were affected by a cybersecurity incident that impacted certain cold storage room monitoring and control systems,” the ministry said.
The incident follows attacks that forced stores in eight European countries to throw away vast quantities of food after hackers tampered with their fridges on Monday, mirroring hacks that swept dozens of supermarkets in France three weeks ago.
But there was no damage to blood products in the centres following the attack, which took place on Monday but was publicised on Wednesday.
On Wednesday, French cooperative bank Credit Mutuel Arkea said it had been hit by a cyberattack which “enabled fraudulent transactions to be carried out” – but that no money belonging to clients had been affected.
The attacks come after British meat suppliers and supermarkets in seven European countries were forced to throw out their supplies after a suspected cyberattack.
Fridges and freezers have been hacked, with thermostats remotely cranked up in some cases to 50C (122F), while others have been set to “defrost” mode, putting the heat to 15C rather than minus 22C.
Hundreds of shops were targeted by the overnight cyberattack, which caused millions of Euros worth of fresh and frozen food to be spoiled.
The UK National Cyber Security Centre warned British retailers to urgently update the software on fridge temperature controllers, adding that the attack is a “wake-up call” and that our “digital infrastructure remains outdated and vulnerable”.
It also followed a series of bomb hoaxes across Europe on Tuesday, which caused significant flight disruption and the closure of an airport in Poland.
Tomi Engdahl says:
Hackers want control. Read more: https://cnews.link/attackers-exploit-few-disclosed-vulnerabilities/
Attackers exploit just 0.5% of disclosed vulnerabilities, but they know which ones to pick
Hackers want control.
Key takeaways
01
Microsoft says only about 2,000 of nearly 383,000 disclosed vulnerabilities have been used in real attacks.
02
Attackers favor flaws that let them take over systems, increase access, or run commands remotely.
03
Bugs that mainly crash apps or affect websites account for a smaller share of real-world attacks.
04
Microsoft says teams should fix the most dangerous flaws quickly, because attackers can weaponize them within days.
Of the nearly 383,000 software vulnerabilities disclosed since 1999, only around 2,000 have been linked to real-world attacks, according to Microsoft. But attackers aren’t picking those flaws at random. They overwhelmingly favor vulnerabilities that let them take control of systems, escalate privileges, and expand their access.
Tomi Engdahl says:
https://www.facebook.com/share/p/1F3knCi13J/
First the Warnings. Now Hackers Have Hit a Major European Bank.
€118 MILLION reportedly stolen.
After weeks of cyberattack warnings and security breaches across Europe, a major French bank has confirmed hackers accessed its own financial accounts and transferred millions.
How many more systems are vulnerable?
Full article in comments.
#Cyberattack #Europe #BankingCrisis #Cybersecurity
Details: https://www.abovethenormnews.com/2026/11/04/credit-mutuel-arkea-hack/
Tomi Engdahl says:
LLMjacking attacks are driving cloud charges as high as $1 MILLION at some enterprises.
Google says attackers are hijacking LLM access using stolen cloud credentials, then abusing AI resources and reselling access through underground marketplaces.
Read
https://thehackernews.com/2026/11/google-warns-llmjacking-attacks-are.html
Tomi Engdahl says:
Hackers Hit French Blood Plasma Freezers in Latest Attack on Cooling Companies
Updated Nov 04, 2026
Attackers set the freezers to 110° Celsius (versus -30° Celsius), but staff caught it before any blood plasma supply was damaged.
https://uk.pcmag.com/security/168239/hackers-hit-french-blood-plasma-freezers-in-latest-attack-on-cooling-companies?fbclid=IwVERDUAVYlmRleHRuA2FlbQIxMABwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABH0aiga0RLbpfVHKdVqF5I53Az-2pQzqyqtnzzHKh88BMzGyX6eg6XkutgUm5_aem_zYfxTSaB8K-IlMEDzOsf5g
Hackers changed the temperature settings on freezer units used by the French Blood Establishment to store blood plasma for operations, Cyber Security News reports. The cyberattack targeted the cooling service provider CoolWorld and set the blood freezer units to run at 110° Celsius, rather than their normal operating temperature of -30° Celsius.
Facilities in Bourgogne-Franche-Comté that housed donor blood samples and blood intended for transfusions were targeted overnight on Nov. 1. However, France’s Health Ministry says staff noticed the abnormal temperature changes and reacted in time to prevent any loss of service.
The 110° figure is reportedly the hackers’ target temperature, not what the freezers actually reached. It doesn’t appear that the hack caused major direct damage. “No blood products were lost,” the French Blood Establishment told AP News.
France and other European countries have been hit by a number of freezer-related hacking incidents in recent weeks. First, French supermarkets were attacked. Then, retailers in Estonia, the Netherlands, Ireland, and Sweden were targeted in similar attacks that resulted in millions of Euros’ worth of spoiled food being thrown away.
Tomi Engdahl says:
https://www.facebook.com/share/p/19n9Qxf4b2/
Cyberattacks are no longer just about stolen data. Now they can spoil the food on store shelves.
On November 2, refrigeration systems at supermarkets in Sweden, Belgium, Luxembourg and Estonia went haywire in what the chains describe as cyberattacks.
At an ICA Kvantum store in southern Sweden, fridges and freezers were reportedly set to 50°C (122°F), and staff had to empty the freezers and throw the food away. Coop reported problems at six Swedish stores, Delhaize said an IT incident hit several dozen stores in Belgium and Luxembourg, and Carrefour pointed to a cyberattack on refrigeration at 15 Belgian stores.
In Estonia, attackers got into a computer controlling one store’s cooling, though the equipment maker said it caught the attack within minutes.
This comes just weeks after a much bigger attack in France, where refrigeration systems at about 700 supermarkets were hit. France’s finance minister said it “touches the heart of our food security,” and the refrigeration software maker said most affected systems were older products that no longer got security updates.
To be clear, the chains say the damage this time was limited, with no threat to the wider food supply, and no group has claimed responsibility.
Still, it’s a stark reminder that the internet-connected machines keeping our food cold are now part of the battlefield, and they need the same protection as our computers.
source: Reuters. (2026, November 2). Temperature soars in Swedish grocery store freezers, one store blames hackers. Reuters.
Tomi Engdahl says:
Hackers crack French blood banks, attempt to boil blood at 230 degrees in sick attack
https://nypost.com/2026/11/04/world-news/hackers-crack-french-blood-banks-attempt-to-boil-blood/?sr_share=facebook&utm_campaign=nypost&utm_medium=social&utm_source=facebook&fbclid=IwdGRjcAVZBmJjbGNrBVkGNWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfpWqzgA1u33bjHQT_Q5sjin6y_2X4yLKL9lntlYwWpS6WM2uoy7cwG522524_aem_hL-UkdQrMK0vBP5rz4rGrw
Three French blood banks were attacked by hackers, who were able to crank up the temperatures in freezers from -22 degrees to 230 Fahrenheit in an attempt to ruin the life-saving supplies.
It’s the second time in a week that internet-connected cold storage units in Europe have been corrupted — with thousands of dollars in meat and diary spoiled.
The attack directly targeted “cold storage room monitoring and control systems” at three regional blood banks, France’s health ministry confirmed on Wednesday.
Tomi Engdahl says:
Paradoxically, the wound inflicted on the food distribution chain serves as a necessary immune shock. As long as risks remain abstract or confined to the manuals of cybersecurity experts, they are systematically ignored for convenience or to cut costs. Only when the damage becomes tangible, visible, and unsustainable (with tons of wasted food and operational paralysis across store locations) does the system accumulate that “meta-layer” of awareness that drives the entire industry to turn the page, enforcing security standards that should have been implemented from day one. It is the bitter price society pays whenever the speed of technological innovation far outpaces the maturity of those managing it.
Tomi Engdahl says:
‘It does demonstrate something that’s quite interesting.’
https://www.thesun.co.uk/news/40914759/russian-hackers-launch-europe-fridge-cyber-attack/?utm_medium=Social&utm_campaign=sunmainfacebook&utm_source=Facebook#Echobox=1793812202
CHILLING THREAT Fears Russian hackers behind Europe-wide fridge cyber attack after supermarkets left default ‘12345’ passwords
HACKERS who took out fridges across Europe causing millions of pounds worth of damage appear to be acting from Russia, a top cyber security expert has said.
Officials are yet to confirm who is behind the hack which targeted networks which had not changed their passwords from ‘12345’.
It is understood that hackers were able to crank up the heat of the freezers after gaining access by using the username ‘Supervisor’ and the password ‘12345’.
The affected freezers are believed to have been stuck using the default factory setting.
The known flaw had been publicly documented and widely circulated.
Tech experts working in the water industry, and gas and electricity grids, are believed to be on high alert for any attempt to disable their key systems.
British cyber security authorities believe that at this stage it is too early to give a definitive answer on who might be behind the attacks or their motivations.
Dr Xavier Bellekens from Lupovis, a cyber-security venture set up by the University of Strathclyde, said his team had set fake traps for the hackers.
Lupovis’s traps were activated between 20 and 30 October, in the run-up to the massive outage that hit supermarkets across 10 countries this week.
Dr Xavier said the secret servers used by the hackers to block their location – known as bulletproof hosting – have previously been used by Russian threat groups, pointing towards their possible involvement.
Tomi Engdahl says:
He said: “The coordination across all of the European countries, the fact that all of these devices were probed essentially end days for 10 days before the attack means that not only there is coordination, but it’s a planned attack.
“When we look at our previous data, previous attacks, we can effectively say that we are not talking about an adversary that might be a teenager in a bedroom.
He told The Sun: “From our standpoint, it does demonstrate something that’s quite interesting: a demonstration of capabilities.
“If you were Russia and you wanted to demonstrate capabilities on a critical system, because food is part of our critical national infrastructure, you wanted to demonstrate capabilities at a European scale, the food market is a perfect target.
“Being able to demonstrate that capability is also playing in favour of Russia and instilling fear.”
On Tuesday GCHQ’s cyber security chief revealed meat processing firms in the UK have been hit by the fridge hack.
Hackers disabled temperature alarms before overriding thermostats, so store managers were unaware until it was too late.
Dr Richard Horne, CEO of the National Cyber Security Centre warned it is just “the foothills” of what the country should expect from disruptive cyber attacks in the next two years.
He said the most serious risk we face is a “huge rise in the volume of incidents” as AI allows criminals to hack existing shortcomings in IT security.
Russia is described as the most audacious cyber threat to the UK – with hybrid attacks such as that seen on Poland’s electric grid highly likely.
https://www.thesun.co.uk/news/40914759/russian-hackers-launch-europe-fridge-cyber-attack/?utm_medium=Social&utm_campaign=sunmainfacebook&utm_source=Facebook&fbclid=IwdGRjcAVZD9BjbGNrBVkPHmV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfJ2KlU_e-e1Ylctv8M-L08-GR8Yc8GrdPxLeHdwhK-EE7uV9sgpK-SPckIoE_aem_L_Kiz-C-OgC5zrgPeCk5Lg#Echobox=1793812202
Tomi Engdahl says:
Top military officer says ‘significant, malicious, cumulative’ disruption of civilian targets may force Nato to invoke mutual defence clause
https://www.thetimes.com/world/europe/article/cyberattack-civilian-target-trigger-article-5-nato-sr9j723cn?utm_medium=Social&utm_source=Facebook#Echobox=1793831617
Tomi Engdahl says:
Kaupoissa kylmälaiteiskuja Suomessa – USU: Nyt vahvistui syy
Vastuun useista Euroopassa tehdyistä kyberhyökkäyksistä ovat ottaneet venäläismieliset hakkeriryhmät, kertovat italialaismediat.
Kaupoissa kylmälaiteiskuja Suomessa – USU: Nyt vahvistui syy
https://www.is.fi/digitoday/art-2000012389274.html
Tomi Engdahl says:
Prompt Injection: Why Hackers No Longer Need Code to Steal Your Data
Updated Oct 03, 2026
By tricking AI chatbots into ignoring their own rules, attackers are bypassing enterprise security with plain English. Here is how prompt injection works—and how companies can stop it.
https://uk.pcmag.com/ai/167638/prompt-injection-why-hackers-no-longer-need-code-to-steal-your-data?fbclid=IwVERDUAVZNC9leHRuA2FlbQIxMABwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABH7H4rczQ1iwQMAVrFv1lur1smEKGltPlcqE_nhg6zeJcoip3VuotwZlLahwU_aem_1xIt0zZnI2RlyLT4YxO_JQ
Tomi Engdahl says:
French bank Credit Mutuel Arkea counting losses from cyberattack
https://www.reuters.com/technology/french-bank-credit-mutuel-arkea-hit-by-cyberattack-2026-11-04/
PARIS, Nov 4 (Reuters) – France’s Credit Mutuel Arkea said on Wednesday it was trying to recover funds stolen in “fraudulent transactions” by cyber attackers and told its customers that their money was safe.
The cooperative bank said that the losses were lower than the $133 million reported by crypto news outlet CoinDesk, opens new tab, adding that the amount of money affected was “not of a nature to undermine the Group’s financial strength and soundness”.
The attack follows last week’s theft of $6.3 billion of cryptocurrency from the Binance exchange and a wave of cyberattacks targeting internet-connected fridges in Europe.
Three regional blood banks in France were also hit in an overnight cyberattack between Sunday and Monday, in which refrigerators holding blood products were targeted.
Tomi Engdahl says:
Nobel winner warns the tech could be near to triggering major incident such as power or banking shutdown
https://www.theguardian.com/uk-news/2026/nov/03/ai-godfather-geoffrey-hinton-better-off-without-ai?CMP=fb_gu&utm_medium=Social_img&utm_source=Facebook#Echobox=1793776779
Tomi Engdahl says:
Blood banks in France are the latest target of cybercriminals, with temperature and defrosting thresholds raised to very high levels at facilities stocking vital blood products. #bloodbanks #france
Video
https://www.facebook.com/share/r/19EDXLZphD/
Tomi Engdahl says:
Ilmoitus “poikkeuksellisesta häiriöstä” – Tileillä havaittu luvatonta toimintaa
Mandatum Trader -palvelussa havaittiin tiistaina poikkeuksellisiksi kuvailtuja häiriöitä. Tilanne ei ole vielä palautunut normaaliksi.
https://www.iltalehti.fi/digiuutiset/a/9bf61d3e-aa03-46ef-b5c9-a9f762f7db30
Tomi Engdahl says:
USU: Nyt se on varmaa – Suomalaisten kylmälaitteiden häiriöiden syy selvisi
Suomalaisten ruokakauppojen kylmälaitteissa ilmeni maanantaina kyberhyökkäyksestä johtuneita häiriöitä.
https://www.iltalehti.fi/ulkomaat/a/1ab8fbfb-0efe-4025-9fa2-7027ce68b81a
Kyberturvallisuuskeskuksen erityisasiantuntija Juha Tretjakov vahvistaa suomalaisten ruokakauppojen kylmälaitteissa havaittujen lämpötilahäiriöiden johtuneen kyberhyökkäyksestä, kertoo Uutissuomalainen.
Kauppojen kylmälaitehäiriö varmistui kyberhyökkäykseksi – ”Tekijästä meillä ei ole tietoa”
https://www.aamuposti.fi/uutissuomalainen/9927353
Kyberturvallisuuskeskuksen erityisasiantuntija Juha Tretjakov kertoo, että Suomesta havaittiin 30 laitetta, jotka ovat olleet julkisessa verkossa näkyvissä.
Tomi Engdahl says:
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.
https://www.securityweek.com/russia-linked-hackers-hit-ios-android-devices-with-exploit-chains-via-watering-holes/
Russian state-sponsored threat actor Midnight Blizzard is believed to have targeted iOS and Android users in Europe and the US with zero-click exploits targeting n-day vulnerabilities, cybersecurity firm Sekoia reports.
Also known as APT29, Cozy Bear, The Dukes, Nobelium, and Yttrium, and believed to be sponsored by the Russian Foreign Intelligence Service (SVR), Midnight Blizzard is known for targeting government organizations, diplomats, IT services providers, and NGOs for intelligence gathering.
The attacks uncovered by Sekoia, mounted as part of a large-scale watering hole campaign, involved compromised or cloned high-profile websites of organizations in the US, Ukraine, the Czech Republic, and Bulgaria.
Midnight Blizzard injected malicious JavaScript code in the websites of a Ukrainian gas production company, a major industry trade association, and a far-right European political party, and modified legitimate files on the site of a Bulgarian military-related website.
The code was designed to fingerprint visitors, harvesting browser and device configuration data and sending it in JSON format before the exploit is delivered.
Tomi Engdahl says:
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.
https://www.securityweek.com/chrome-157-rolls-out-with-213-security-fixes-seven-rated-critical/
Tomi Engdahl says:
pened Path to $6 Billion Binance Heist
Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.
https://www.securityweek.com/rigged-coding-assignment-abused-ai-tool-opened-path-to-6-billion-binance-heist/
Binance says the hackers behind last week’s $6.34 billion theft reached its wallet signing systems after a months-long campaign that compromised three engineers’ computers, one of them through a fake job interview.
The exchange published its initial incident report on November 3. Roughly $2.85 billion of the stolen assets has been frozen or intercepted.
“This should not have happened, and we apologise for the concern, disruption and uncertainty it caused our users, partners and the wider industry,” Binance said.
The FBI has blamed the theft on TraderTraitor, a North Korean state-sponsored hacking group.
Tomi Engdahl says:
https://www.securityweek.com/cyber-insights-2026-the-ongoing-fight-to-secure-industrial-control-systems/
Tomi Engdahl says:
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/?fbclid=IwdGRjcAVZVxpjbGNrBVlXA2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfmVdwS_zXewlP804olwKg8qWUxVR9YEIDtH7d8I_vUtb9oNaAPxOgOtVMUMU_aem_LLSEA1eDF1DKTn-rVMoE5g
Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials.
The vulnerability, tracked as CVE-2026-107441, is an out-of-bounds write flaw in the switches’ web management interface that allows an unauthenticated attacker with network access to execute operating system commands using specially crafted HTTP requests.
Tomi Engdahl says:
Three blood banks in France hit as fridge hack expands across Europe
It is not yet known who is behind the cyber attacks, which have also affected supermarkets.
https://7news.com.au/news/cyber-attack/three-blood-banks-in-france-hit-as-fridge-hack-expands-across-europe-c-23117924?fbclid=IwdGRjcAVZWEdjbGNrBVlYK2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfuuZKO38f9Ui7i4_RAFAWdrZv7nAPHr9JA7Ny1urlF3mbEpFL47brX7tUzg4_aem_WgkMI44J-djX23JHJNO9nw
The refrigerators at three regional blood banks in France were hit by a cyber attack at the same time hackers struck supermarkets from Sweden to Belgium.
“Several regional facilities of the French Blood Establishment (EFS) were affected by a cybersecurity incident that impacted certain cold storage room monitoring and control systems,” the health ministry said in a statement.
Tomi Engdahl says:
Mika Aaltola kommentoi pommiuhkia – mainitsee Venäjän
”Yksi sähköposti maksaa hyökkääjälle nollan, meille hävittäjäsaattueen ja suljetun kiitotien”, Aaltola kirjoittaa.
https://www.is.fi/kotimaa/art-2000012390986.html
Europarlamentaarikko Mika Aaltola (kok) kommentoi Euroopassa lentoihin kohdistuneita pommiuhkauksia.
Aaltola pohtii viestipalvelu X:ssä, pystyisikö Venäjä sulkemaan Euroopan siviili-ilmailun pelkillä pommiuhkauksilla.
– Ei. Mutta se voi tehdä lentämisestä kallista, arvaamatonta ja poliittisesti kuluttavaa, Aaltola kirjoittaa.
Aaltolan mukaan perätön pommiuhka on tehokas tapa tehdä kiusaa.
– Yksi sähköposti maksaa hyökkääjälle nollan, meille hävittäjäsaattueen ja suljetun kiitotien.
Kahdella Finnairin lennolla oli torstaina pommiuhka, Finnairin viestintäpäällikkö Stiina Tuunanen kertoo. Toinen koneista oli matkalla Helsingistä Roomaan, toinen Wieniin.
Italian ilmavoimien hävittäjät saattoivat koneen perille Fiumicinon lentokentälle.
Finnairin mukaan kyseessä oli perätön pommiuhkaus. Italian yleisradioyhtiö RAIn mukaan pommiuhan taustalla oli yksi italiankielinen sähköposti, joka oli lähetetty Rooman lentokentällä toimiville yhtiöille.
Myös toinen pommiuhka tuli RAIn mukaan anonyymistä lähteestä.
Euroopassa on viime päivinä ollut poikkeuksellisen laaja pommiuhkausten sarja. Marraskuun alussa on raportoitu yli kymmenestä uhkauksesta.
Kahdella Finnairin lennolla pommiuhka – kaaos Euroopan taivaalla paisuu
Koneet ovat joutuneet tekemään hätälaskuja ympäri Euroopan.
https://www.is.fi/kotimaa/art-2000012390664.html
Heikki oli lennolla Wieniin, kun pommiuhkasta kuulutettiin – näin matkustajat reagoivat
Lentoliikennettä Euroopassa on piinannut pommiuhkien sarja.
https://www.is.fi/kotimaa/art-2000012390998.html
Tomi Engdahl says:
Ruotsissa turvallisuusuhka – rajatarkastukset käyttöön
Rajatarkastukset kestävät ainakin kuusi kuukautta.
https://www.is.fi/ulkomaat/art-2000012391463.html
Ruotsi sulkee rajat
Ruotsi on huolissaan sisäisestä turvallisuudestaan.
https://www.iltalehti.fi/ulkomaat/a/fdde213d-1047-4b2d-91a5-f70ec24aef0a
Tomi Engdahl says:
Hackers steal 320,000 UK school files and publish them on dark web
Specialist investigators discovered a ‘significant number of files’ posted to the dark web
https://www.independent.co.uk/news/uk/home-news/bristol-school-hack-files-dark-web-b3078972.html?fbclid=IwdGRjcAVZbYdjbGNrBVltb2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfUo2KIUfj5VpAXmzwfqQaq7oVrC3vRExaEt0NuK3gzolMLs3hPA98eH9rMeM_aem_p0jkP75BwIbBTGynzVJCJw
At least 320,000 school files stolen during a cyber attack on Bristol City Council’s servers have been found posted to the dark web.
Hackers targeted the council’s Trading with Schools platform and accessed data from 39 schools across the region in September.
The council said specialist investigations have now identified a “significant number of files” believed to have been taken from the network and made available online.
Tomi Engdahl says:
A reported cyberattack targeted refrigeration used by France’s blood service, following attacks on supermarkets in France and across Europe.
https://www.newsweek.com/cyberattacks-target-french-blood-banks-refrigeration-supermarkets-12661343?utm_medium=Social&utm_source=Facebook#Echobox=1793802771
Tomi Engdahl says:
Paraguay President Santiago Peña resigns following bank collapse
https://apnews.com/article/ueno-bank-collapse-paraguay-banking-crisis-santiago-pena-impeachment-eccea1c9a64808b5cd7e6e1d5542084f
ASUNCIÓN, Paraguay (AP) — Paraguayan President Santiago Peña resigned Thursday, days after the nation’s central bank seized Ueno Bank, a major digital lender with close ties to his government.
Peña announced his resignation in a video posted to X, saying he was stepping down to preserve the country’s stability and democratic institutions as massive protests rocked the capital, Asuncion, for a third day and lawmakers debated the president’s impeachment.
Ueno Bank, a major digital lender, went from an obscure finance company to a household name in less than five years, claimed more than 60% of Paraguay’s adults as customers.
The political upheaval and promises of relief leave a bigger question unanswered: how a bank linked to the president, who until last year had a stake in Ueno’s holding company, could grow so rapidly in size and importance despite repeated warnings about its dubious lending practices.
For many Paraguayans, the answer lies in the uncomfortable proximity of Peña’s long-ruling Colorado Party to the country’s regulators and business elite, a weakness that has endured even as steady economic management and rapid growth made Paraguay a darling of international investors in recent years.
“Santiago Peña and the Colorado Party have stolen all our savings,” said Luis Pineda, one of the protesters marching to Congress on Wednesday. “We are fed up with 70 years of plunder.”
From star lender to seized bank
Soon after winning its banking license in 2023, Ueno seemed to be everywhere in Paraguay. The digital lender, a rebranded version of a decades-old finance company, lured customers with generous cash-back offers on groceries, grew to more than 70 locations, sponsored Paraguay’s national soccer team and plastered its name on the country’s main stadium.
Government money poured into Ueno’s coffers under Peña
As of last month, Ueno reported holding roughly $800 million in public deposits, about a quarter of its total, including money from the state pension and health fund and the operators of Paraguay’s giant hydroelectric dams.
Even as retirees’ savings and other public money piled up at Ueno, worries were escalating inside the central bank. In June, its inspectors found a pattern of risky lending to insiders, reported ABC Color, a leading Paraguayan newspaper.
Long lines outside branches but customers are locked out
But on Monday, it all came crashing down. Regulators investigating Ueno’s loans to companies linked to its owners found poorly documented lending, the central bank said, as well as expenses the bank had wrongly counted as assets.
Once the books were corrected, Ueno’s capital, the cushion banks must keep to absorb losses, fell to less than half the legal minimum. The central bank seized the lender Tuesday and announced plans to move customers’ accounts, along with whatever assets still hold value, to other banks before liquidating what’s left.
Ueno’s app, cards and transfers went dark and its branches locked their doors, leaving desperate depositors lined up outside with no way to cash out their savings. On Wednesday, a rush to open new accounts elsewhere crashed other banks’ mobile apps, fueling public panic.
Tomi Engdahl says:
Reports of explosives triggered evacuations and emergency searches
At least 25 planes forced into emergency landings after bomb threats over Europe
https://metro.co.uk/2026/11/05/another-passenger-plane-forced-emergency-landing-bomb-threat-europe-29767435/?ito=facebook%7Csocial%7Cmetroukfacebook&ito=facebook%7Csocial%7Cmetroukfacebook&fbclid=IwdGRjcAVZlv9jbGNrBVmW8WV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfDflRuqx5ZB2lLTcrhlIdY71MUvwU6SjP7E9z3Q7M8akptplnTtqG0bbmjuQ_aem_6yT6JOO3ck1b-SufmDdq-w
At least 25 planes have been affected by bomb threats and forced to make emergency landings in the skies across Europe.
Reports of explosives triggered evacuations and emergency searches of multiple planes heading to Milan, Rome, Sofia, Madrid, Copenhagen, Prague and other European cities.
A group called ‘Fighters of the Male State’ that threatened to ‘turn the sky red’ were behind the threats sent to Rome airport, which saw fighter jets intercept one plane before landing.
Tomi Engdahl says:
Tietomurto: Asiakkaiden tileillä luvatonta toimintaa
Häiriöt paljastuivat tietomurroksi.
https://www.is.fi/digitoday/tietoturva/art-2000012391466.html
Mandatumin Trader-kaupankäyntipalvelun häiriöissä on kyse tietomurrosta.
– Traderin häiriötilanteen taustalla on luvaton pääsy järjestelmään. Jatkamme tilanteen selvittämistä korkeimmalla mahdollisella prioriteetilla ja teemme kaikki vaadittavat toimenpiteet, finanssipalvelujen tarjoaja kertoo tiedotteessaan.
Mandatum kertoo tulleensa tietoiseksi häiriöistä tiistai-iltana, kun kymmenien asiakkaiden tileillä havaittiin luvattomia osto- ja myyntitoimeksiantoja.
Yritys sanoo käyvänsä parhaillaan asiakkaiden kanssa läpi korjaustoimenpiteitä.
Traderiin kirjautuminen estettiin varotoimenpiteenä keskiviikkona.
Mandatum pahoittelee tilanteesta asiakkaille aiheutunutta haittaa ja sanoo pyrkivänsä selvittämään asian mahdollisimman pian.
Luvatonta toimintaa tileillä – kaupankäyntipalvelu esti kirjautumisen
Häiriön syytä ei ole kommentoitu.
https://www.is.fi/digitoday/tietoturva/art-2000012391466.html
Tomi Engdahl says:
https://www.facebook.com/share/r/19rDx16qEj/
Overnight, hackers took control of supermarket fridges in six European countries and pushed some to 50°C. Three weeks ago it was hundreds of stores in France. No one has claimed it.
Our grandparents kept food all winter without a single plug.
Video
https://www.facebook.com/share/r/1Gzhfe7Mzr/
Tomi Engdahl says:
https://www.independent.co.uk/tech/security/blood-hack-fridge-cyber-attack-b3079644.html?reloaded=1-restored&fbclid=IwdGRjcAVZpo1jbGNrBVmmg2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfKH0qS-Uqo65QVuzKJxLIB6EI3qN0lGAtbrkupi9SF4f-hYJJBjZRJStC7gU_aem_GUsMu-zpY18dQYLnFnLvGg
Tomi Engdahl says:
https://www.facebook.com/share/p/1PU6D3Hv1P/
Brace for cyber Att*cks or face empty shelves, businesses warned
Britain’s cyber chief Richard Horne has warned businesses to strengthen their defences now, after hackers hit supermarket freezers across Europe. The National Cyber Security Centre says AI-powered Att*cks on critical infrastructure are highly likely by 2028, and leaders who ignore the warning may one day have to explain empty shelves and darkened shops.
#CyberSecurity #EmptyShelves #photography
References:
Sky News: Prepare for cyber Att*cks or face empty shelves, businesses warned by cyber chief in annual report
Reuters: Supermarket fridge impact is just the start, says UK cybersecurity chief after European supermarket freezer hacks exposed old technology
The National: UK cyber chief warns upgrade your tech defences after supermarket hacks as AI gives hackers new ways to exploit weaknesses
Computer Weekly: UK to face AI-powered cyber Att*cks within two years, warns NCSC with critical infrastructure at risk by 2028
Tomi Engdahl says:
https://www.facebook.com/share/v/19uAoSzEoC/
Foreign cybercriminals are using AI to target Australian superannuation accounts, threatening to drain the retirement savings of everyday workers. #9News
Video
https://www.facebook.com/share/v/14tSTpFB7bZ/
Tomi Engdahl says:
This crew is good. https://trib.al/sBcsVXb
That’ll Sting
It Turns Out Binance’s $6 Billion Hack Happened Because Its Employees Were Vibe Coding
This crew is good.
https://futurism.com/future-society/binance-heist-vibe-code-ai?fbclid=IwdGRjcAVZrnVjbGNrBVmuZGV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEft_rfLSFrQCBl2u2XqVsMHusX3vKvu3lxpSDPK9KAvtBf5ui5ej5ejtVhnIU_aem_9LOu97nvee6M3Hk8eDNsZw
Billions of dollars of crypto stolen — in a hack that we’re now learning involved corporate vibe coding efforts. You couldn’t come up with a more quintessential cautionary tale for an era when employers are embracing AI at every level.
After hackers drained nearly $6.3 billion from the crypto platform, Binance has revealed how the thieves pulled off what might be the heist of the century.
In a detailed report on its investigation published Tuesday, the company described an elaborate scheme that took place over months involving sham job interviews, old-fashioned phishing, and — yes — a hijacked AI tool.
It began in June when an employee on Binance’s wallet developer team thought they’d indulge in some vibe coding by installing a popular AI coding tool. But they ended up downloading a tampered installation of Homebrew, a tool that’s popular with software engineers, after clicking a malicious ad. Binance said it detected the anomaly, replaced the device, and changed relevant credentials.
So far so good, except that the attack exposed the role of the employee and his colleagues on the wallet team to the hackers, giving them the opening they needed. From there, some classic social engineering went into play. A hacker, posing as a project director, reached out to another software engineer through a legitimate job-hunting platform to offer an interview first with an “HR representative” and then the “CEO” of a fake company.
The fraudsters then earned the employee’s trust by sharing a social media account with personal photos and videos, something that Binance said “was more advanced and deceptive than previously seen social engineering approaches.” (It’s unclear from the report, but perhaps these were fabricated with AI, adding another element of AI menace to this story.)
Crucially, the follow-up interview was conducted over text. The engineer was asked to complete and download an “assignment” that contained malicious code that instantly executed once the employee began installing it. Among the things it changed was replacing a real development tool with a malicious version that could communicate with the hackers and execute commands.
That all took place in September. Starting in October, the hacker used the compromised employee machine to leverage an internal AI tool and use it as a “springboard” to seize control of the computer and the computer of a third wallet developer. From there, they used credentials stolen from the first wallet team employee to log into the third employee’s computer and trigger a malicious script that launched the attack.
In all, the attack siphoned 233.46 million XRP, a form of crypto, from five wallets into the hacker’s wallets, and then plundered other forms of crypto including bitcoin, in what may well have been the most lucrative heist of all time.
Tomi Engdahl says:
https://www.city.fi/arki/viranomaiset-jos-kuulet-nama-sanat-katkaise-puhelu-heti/
Tomi Engdahl says:
https://www.facebook.com/share/p/1W24DNzRxZ/
A Russian group called the Male State has claimed responsibility for some of the bomb threats made to passengers jets across Europe
Full story: https://www.lbc.co.uk/article/male-state-bomb-hoax-5Hjdkzh_2/
Tomi Engdahl says:
President of Paraguay resigns amid crisis over bank collapse that left millions unable to access their money
https://edition.cnn.com/2026/11/05/americas/president-paraguay-resigns-latam-intl
Tomi Engdahl says:
Lenovo’s ‘encrypted’ fingerprint USB drive is just an unencrypted SD card in a fancy case — AI-assisted follow-up finds a backdoor and hardcoded keys in other ‘secure’ USB products (updated)
https://www.tomshardware.com/tech-industry/cyber-security/lenovo-fingerprint-usb-stick-sold-as-aes-256-encrypted-had-a-plain-sd-card-inside-ai-assisted-follow-up-finds-a-backdoor-and-hardcoded-keys-in-other-secure-usb-products