orikahmadov.com

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

The Hacker News October 13, 2026

Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that runs all of a store's fridges and freezers, a device made by Danish company Danfoss that maintenance firms can manage remotely. Les Mousquetaires

Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

The Hacker News October 13, 2026

Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0. Affected

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

The Hacker News October 13, 2026

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD

Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

The Hacker News October 13, 2026

Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies. The activity, which targets Android devices built on MediaTek platforms across several brands, is being tracked by Bitdefender under the moniker Midnight Mimosa. The preinstalled

Norway fines Microsoft ad firm $9.6 million over Grindr data sharing

Bleeping Computer October 12, 2026

Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country. [...]

Yandex confirms service outage as users lose access to cloud files

Bleeping Computer October 12, 2026

Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third. [...]

Anthropic takes risky AI tests offline after models breach govt sites

Bleeping Computer October 12, 2026

Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels. [...]

Elon Musk Bragged About His Grok Lego Star Wars Haul. Then X Users Punked Him

Wired AI News October 12, 2026

Musk, we find your lack of security disturbing.

Muse Wonder Puts Meta Back at the AI Frontier

Wired AI News October 12, 2026

Meta’s biggest model rivals the world’s best—and includes new features to keep agents from going off the rails.

Ledger confirms spy chip implant behind wallet crypto thefts

Bleeping Computer October 12, 2026

Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets. [...]

Cyberattack shuts down refrigerators at French supermarkets

Bleeping Computer October 12, 2026

Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers. [...]

⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

The Hacker News October 12, 2026

Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone do something about it. But speed is only part of the problem. A secure connection didn't always mean a safe destination. People offering to fix a ransomware mess had questions to answer themselves.

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

Bleeping Computer October 12, 2026

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based persistence, and remote command execution capabilities. [...]

Retail giant Ahold Delhaize takes systems offline after cyberattack

Bleeping Computer October 12, 2026

Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it had to take some systems offline in response to a "cybersecurity incident" affecting its network. [...]

GitLab warns of max severity code execution vulnerability

Bleeping Computer October 12, 2026

GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...]

Latest Tech News