This posting is here to collect cyber security news in November 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
This posting is here to collect cyber security news in November 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
222 Comments
Tomi Engdahl says:
The contingency plans – secret up until now – have been published on the BBC News website.
https://www.birminghammail.co.uk/news/midlands-news/bbc-confirms-black-sky-attack-34879893?utm_term=Autofeed&utm_medium=Social&utm_source=Facebook#Echobox=1794120967
Tomi Engdahl says:
Nvidia opens investigation after reports CEO Jensen Huang was targeted by Chinese intelligence.
https://www.nbcnews.com/tech/tech-news/nvidia-ceo-jensen-huang-investigation-rcna608148?cid=sm_npd_nn_fb_ma&utm_campaign=trueanthem&utm_medium=social&utm_source=facebook&fbclid=IwdGRjcAVd0j1jbGNrBV3SLGV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfZXVj-8tl-5z_AXdHearynJwhH–c2NLI3PnwPT5wYI9J5bjju3DHj7SnOlI_aem_UDH5jI_SJxXpzl6ksQUCMA
Huang acknowledged being unfaithful to his wife in an employee memo. The board said it has no reason to believe national security or company secrets were compromised.
Tomi Engdahl says:
Surveillance is art
https://futurism.com/future-society/menacing-surveillane-obelisk-madrid-art
Tomi Engdahl says:
https://www.theguardian.com/news/ng-interactive/2026/nov/08/hot-fridges-a-fake-nuclear-alert-and-a-6bn-heist-are-we-in-the-foothills-of-a-hacking-epidemic?CMP=fb_gu&utm_medium=Social_img&utm_source=Facebook#Echobox=1794127366
Tomi Engdahl says:
About https://www.theguardian.com/news/ng-interactive/2026/nov/08/hot-fridges-a-fake-nuclear-alert-and-a-6bn-heist-are-we-in-the-foothills-of-a-hacking-epidemic?CMP=fb_gu&utm_medium=Social_img&utm_source=Facebook#Echobox=1794127366
The Guardian piece groups the refrigeration attacks into a broader narrative about AI accelerating exploit discovery and driving a new wave of physical-digital sabotage.
From a freezer’s point of view, the article essentially highlights the absurd reality of modern IoT engineering:
* A heavy-duty, insulated box meant to hold frozen food for 15 years was given a web server, hooked directly to the public internet without a firewall, and left running default passwords like admin / 12345.
* It didn’t need a super-intelligent AI to ruin its contents—just a basic script reading an open IP address telling it to turn into an oven.
As the article notes, the ultimate fix isn’t complicated: stop gluing internet connections to appliances that just need to stay cold.
Tomi Engdahl says:
The UK’s cybersecurity chief has said the country has gotten away with ‘doing tech on the cheap’ – but those days are over
Hackers have turned supermarket freezers into ovens – here’s how they could hit us in our homes
https://www.independent.co.uk/tech/cyber-attack-uk-fridges-hackers-security-b3078511.html?fbclid=IwdGRjcAVeAC9jbGNrBV4AH2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfvQTpNECwOmBaY8qBcMneA8CV13awHM_E8nMcgW9ti6D6Wi6ONExVlNqRl2A_aem_CRfWsl9Ej2zpN-zbGh2ang
Tomi Engdahl says:
Hakkerit iskivät: Venäjän massiiviset tappiot saattoivat paljastua
https://www.is.fi/ulkomaat/art-2000012397669.html
Tomi Engdahl says:
BRITAIN PREPARES FOR A BLACK SKY EMERGENCY — WHAT HAPPENS IF THE NATIONAL POWER GRID GOES DOWN?
Video
https://www.facebook.com/share/r/19rAs8XCqS/
Tomi Engdahl says:
How the FBI Tracks Burner Laptops and Public WiFi Users
https://www.facebook.com/share/v/1CSRG6U5sX/
Tomi Engdahl says:
https://www.npr.org/2026/11/09/nx-s1-6034057/nvidia-launches-investigation-into-ceos-alleged-relationship-with-chinese-spy?fbclid=IwdGRjcAVemQBjbGNrBV6Y-mV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEf7EJTM2FcapJZdqKUW4Jd4Hcc-RaLPkbA6FCSLX4jLtII7r9NbB6YQ48P4zI_aem_Fv5NZF_XXGJR1jcFO4pOFg
Tomi Engdahl says:
Hyvä muistutus siitä, että kaikki data, joka menee tekoälymallin kontekstiin sisään, voi myös päätyä sen tekemiin työkalu- ja mcp-kutsuihin mukaan.
Tässä tapauksessa käyttäjän sähköpostiosoite päätyi curl-komentojen kautta User-Agent-headeriin.
Juuri tästä syystä ajan agentteja omalla eristetyllä palvelimellaan. Kaikki, mitä sillä koneella on, voi vahingossa päätyä nettiin.
https://news.ycombinator.com/item?id=50388176
Tomi Engdahl says:
Putin reeling as huge leak reveals staggering Russian death toll in Ukraine
In a humiliating blow to Moscow’s tightly guarded wartime secrecy, hackers infiltrated the Russian state statistics agency.
https://www.express.co.uk/news/world/2264494/russia-death-toll-ukraine-huge-leak-putin-reeling?utm_medium=Social&utm_source=Facebook&fbclid=IwdGRjcAVerT5jbGNrBV6tImV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfmhSt7NTLSLwyOljS9X6qGaAfOoRNgQ6tZ41vdFUDoR3aDXs39A28bdK7u5M_aem_-LMEKketMJwdKJ0heBWHPw#Echobox=1794214638
Vladimir Putin’s devastating battlefield losses have been laid bare in a huge cyber attack revealing that as many as 450,000 Russian soldiers have died in Ukraine. In a humiliating blow to Moscow’s tightly guarded wartime secrecy, hackers infiltrated the Russian state statistics agency, Rosstat, and extracted thousands of sensitive records detailing official death certificates logged between February 2022 and August this year. The joint cyber operation was executed by pro-Ukrainian activist group Silent Crow alongside the Belarusian Cyber Partisans, both of which are officially outlawed by the Kremlin as extremist outfits. Silent Crow analysed the compromised registries and calculated the Russian death toll at a staggering 450,100 troops
Tomi Engdahl says:
U.S. agencies warn hackers are targeting industrial refrigeration systems worldwide, potentially causing fire hazards, food spoilage, and service disruptions.
The alert follows attacks on hundreds of European supermarkets, where hackers manipulated cooling systems.
Read – https://thehackernews.com/2026/11/us-agencies-warn-refrigeration.html
Tomi Engdahl says:
A default “admin:admin” password helped researchers unlock and start connected cars remotely.
Two car brands’ identity systems were vulnerable to account takeover. Researchers demonstrated the full attack chain on authorized U.S. vehicles.
Read ↓ https://thehackernews.com/2026/11/default-adminadmin-server-password.html
Tomi Engdahl says:
France blames Iranian hackers for supermarket attacks that sparked fires
https://www.bleepingcomputer.com/news/security/france-blames-iranian-hackers-for-supermarket-attacks-that-sparked-fires/?fbclid=IwdGRjcAVe8zZleHRuA2FlbQIxMQBwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABH7Lbfyadspky7wtyoqS-ZnPKqtFe7_lPVBfF7f4oZ4SD67ERsVevpS3_BptL_aem_x5oafx-LGqAza71SMDyt8w
France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed hackers, saying the attacks caused food losses and sparked at least 15 fires.
In a statement issued Monday, France’s Ministry for Europe and Foreign Affairs blamed the attacks on Shahid Kaveh, a cyber-offensive unit affiliated with the electronic and cyber center of Iran’s Islamic Revolutionary Guard Corps (IRGC).
“France condemns in the strongest possible terms the unacceptable cyberattacks carried out on its territory by the Islamic Republic of Iran against its interests,” reads the statement.
The attacks occurred overnight on October 11–12, when hackers compromised industrial refrigeration controllers and remotely changed defrost settings to high temperatures, disrupting systems used to preserve food.
As BleepingComputer reported, the attacks affected an estimated 250 to 350 French supermarkets, forcing stores to discard fresh and frozen products.
Tomi Engdahl says:
Yhä useamman arkisen asian hoitaminen vaatii oman sovelluksensa. Kaiken piti helpottua, mutta kävikin päinvastoin, kirjoittaa Aamulehden toimittaja Pauliina Karjalainen. Lisää täällä: https://www.aamulehti.fi/kolumnit/art-2000012358852.html?utm_term=Autofeed&utm_campaign=al_echo&utm_medium=Toimitus&utm_source=Facebook#Echobox=1794159548
Tomi Engdahl says:
Finally: the perfect use for meme coins. https://trib.al/Oi1Pgn3
One Man’s Trash
North Korea Is Allegedly Using Elon Musk and Cartoon-Themed Meme Coins to Launder the Billions in Crypto It Stole From Binance
Finally: the perfect use for meme coins.
https://futurism.com/future-society/north-korea-meme-coins-launder-crypto-binance?fbclid=IwdGRjcAVfFONjbGNrBV8Uw2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfK5N87mILo-K4b-JKlYuvkvBkLVcW8iOzHiLmN7HOxSRHHVsHWb4SWXO6OEQ_aem_fRMbjuByvSRewAkfJg9IFw
Tomi Engdahl says:
We were in the “foothills” in October. Now AI discovers a dozen high-impact vulnerabilities each day and there’s not enough humans to review the fixes, let alone write them. And it’s only going to get worse.
Humanity has accumulated half a century’s worth of tech debt, since all these vulnerabilities were there this entire time, often made under time pressure or by people working with no pay.
Now the bill has come due.
Tomi Engdahl says:
https://en.wikipedia.org/wiki/2026_Urda_train_collision?hl=en-US#:~:text=During%20the%20mass%2C%20a%20letter%20from%20Pope,upgrading%20the%20signalling%20system%20on%20the%20line.
Tomi Engdahl says:
https://www.aljazeera.com/news/2026/11/7/eu-prosecutor-office-investigates-fatal-train-crash-in-spain?hl=en-US#:~:text=The%20European%20Public%20Prosecutor's%20Office%20(EPPO)%20said,the%20financing%20of%20the%20%E2%81%A0Madrid%2DSeville%20high%2Dspeed%20line.
Tomi Engdahl says:
A breakthrough research project dubbed Deep-TEMPEST has proven that attackers can now read your PC monitor through walls using AI to decode stray radio signals emitting directly from standard HDMI cables.
Read more here: https://wccftech.com/deep-tempest-ai-intercepts-hdmi-electromagnetic-leak-pc-screen-spying/
Tomi Engdahl says:
https://www.facebook.com/share/p/19GFtY5s2W/
OpenAI says its new AI system has developed working exploits for 948 security flaws in Linux, one of the world’s most widely used operating systems.
During testing, the system found 2,308 possible security problems. It successfully reproduced 1,724 of them and developed working exploits for 948.
These exploits could allow someone with a basic user account to gain full administrator access to a Linux computer.
OpenAI says the research cost around $1.21 million in AI usage. The system also suggested fixes, which human security researchers reviewed before sending them to Linux maintainers.
The same AI system also found 81 previously unknown, high-severity security flaws in Mozilla Firefox.