Cyber Security News

French supermarket chains are dealing with a major cybersecurity incident after attackers reportedly changed refrigeration settings remotely, causing some chilled cabinets and freezers to heat up instead of cool down. The incident began overnight between October 11 and October 12 and affected stores linked to Intermarché, E.Leclerc, and Système U, according to early reports. The The post Attackers Reportedly Hack Supermarket Fridges and Raise Temperatures to 50°C appeared first on Cyber Security News.

IBM patched 22 vulnerabilities in Verify Identity Access and Security Verify Access, including two critical flaws allowing unauthenticated remote code execution across appliance and container deployments. The most severe bugs, CVE-2026-78401 and CVE-2026-78406, each carry a CVSS score of 9.8. Both involve deserializing untrusted data, a process where software rebuilds stored or transmitted data into The post IBM Patches 22 Verify Access Flaws, Including Critical Remote Code Execution Bugs appeared first on Cyber Security News.

Hackers are exploiting two flaws in AhsayCBS backup servers to run commands, plant webshells, and install XMRig cryptocurrency miners disguised as Microsoft Edge. Huntress first observed exploitation on October 7, 2026, at 23:20:15 UTC. By October 8, its researchers had seen five organizations targeted, with attackers checking systems and setting up tools to maintain access. The post Hackers Exploit Critical AhsayCBS Flaws to Deploy Webshells and XMRig Miners appeared first on Cyber Security News.

The FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on October 8, 2026, as part of its investigation into the hacking group ShinyHunters. The arrest links a professional involved in ransomware response to an alleged cyber extortion conspiracy. However, the evidence behind the charges remains largely sealed, and the allegations have not been proven The post FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation appeared first on Cyber Security News.

Security researchers have found new ways to build fake domains that resemble trusted brands while still appearing as readable Unicode in Chromium-based browsers. The issue can make phishing pages look real because users may see a familiar name and no clear browser warning during normal web browsing. Research by Ian Muscat and Leanne Briffa of The post New Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing appeared first on Cyber Security News.

Microsoft is investigating an Exchange admin center access issue that may prevent some administrators from opening the web portal used to manage Exchange Online. Affected admins may encounter an “Internal Server Error” message, according to the Microsoft 365 Status update provided for this report. The company is tracking the incident under EX1500900 and has directed The post Microsoft Exchange Admin Center Issue Blocks Web Portal Access to Admins With “Internal Server Error” appeared first on Cyber Security News.

Nippon Columbia Group disclosed a malware infection on October 8, 2026, that may have exposed millions of Daiichi Kosho customer and employee records after a contractor’s employee computer was infected. Daiichi Kosho says data theft and misuse remain unconfirmed, and it has found no impact on its own systems. The estimated total is 8.724 million The post Nippon Columbia Malware Infection May Have Exposed 8.7 Million Customer Records appeared first on Cyber Security News.

Casbaneiro malware is hiding its main command and control traffic until an infected user visits a targeted banking website. The Windows banking trojan combines phishing messages, location checks, staged downloads, and separate data collection servers to make an active infection appear quiet during routine analysis. The campaign targets users across Latin America, with activity linked The post Casbaneiro Malware Hides C2 Activity Until Victims Visit Banking Websites appeared first on Cyber Security News.

The FBI has arrested another suspected ShinyHunters co-conspirator as investigators pursue the group believed to be behind the FBIJobs.gov breach. Director Kash Patel announced the arrest on October 9, saying the incident affected a third-party-managed platform. The announcement follows several recent actions against suspected members of the hacking network. “Our agents in the field have The post FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach appeared first on Cyber Security News.

A phishing campaign is abusing Microsoft Power BI to deliver rogue ScreenConnect installations and give attackers lasting remote access to Windows systems. The operation uses a fake reference document hosted on Microsoft’s real service, making the opening link appear safe before directing victims to attacker-controlled download pages. The attack does not depend on a reported The post Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access appeared first on Cyber Security News.