A Railway engineer admitted testing AI agents on Primcloud, whose founder says they sought customer secrets and scanned…

Hackers altered refrigeration controls at three French blood service sites, but staff protected plasma supplies and prevented damage to blood products.

Hackers changed refrigeration settings at European supermarkets, forcing stores to discard produce, while UK suppliers reported attacks on…

Binance explains how North Korean hackers used fake job interviews, malicious developer tools and an internal AI tool…

Bitdefender details a 3AM ransomware attack on a UK school estate that encrypted 37 systems, with command timing suggesting possible AI-assisted troubleshooting.

Malicious Claude Code extensions targeted Windows and macOS developers through Cursor collecting device details and planting files for persistent remote access.

FortiGuard Labs links BITTER to cyberespionage attacks on South Asian organizations using malicious Windows shortcuts, PowerShell scripts, and PapRAT malware.

Hackers have reportedly targeted refrigeration systems at Swedish supermarkets, leaving stores with spoiled food after freezers reached temperatures as high as 55°C.

Several ICA locations and six Coop stores were affected overnight into November 2, forcing staff to clear damaged stock and restore cooling systems. The incidents follow similar attacks against French supermarkets in October, although no connection has been confirmed.

According to Swedish broadcaster SVT, ICA Nära store manager Mats Olsson found water on the floor when he arrived at his shop in Böda, Öland. He reported a freezer temperature of 55°C, with refrigerators and freezers knocked out and their contents ruined.

Swedish Stores Face Food Losses

Affected ICA stores included locations in Sjöbo, Tomelilla, Brösarp and Sankt Olof in Skåne. Reports also covered Öland, Värmland and Stockholm. Six Coop stores in Gästrikland and Hälsingland were affected, but the full number of Swedish stores involved remained unclear.

The ICA store in Sjöbo temporarily closed after reporting temperatures around 50°C. In Sankt Olof, store manager Dennis Vidal said workers were emptying freezers as cooling began to return, but the food was already ruined. At ICA Baronen in Stockholm, staff reported temperatures rising from 38°C to around 50°C.

ICA press officer Gustaf Nilsson said the company was investigating and helping affected stores. Importantly, ICA said the affected shops had connections outside its central network. That distinction does not establish how attackers gained access, but it means the incident should not automatically be described as a breach of ICA’s central systems.

The Swedish reports have not identified the controller brands, entry point, exploited software flaw or attackers. There is also no confirmed evidence that the same group targeted stores in Sweden and France. Any claim naming a specific vulnerability would therefore be premature.

However, the earlier French incidents show why connected cooling equipment needs close attention. Cybersecurity News previously reported on supermarket refrigerators being remotely manipulated, with attackers reportedly changing settings to keep equipment in defrost mode. This function normally clears ice, but prolonged operation can raise temperatures and destroy stock.

France’s national cyber response team, CERT-FR, confirmed compromises involving Danfoss AK-SM and AK-SC controllers, alongside Copeland xweb and Dixell xweb devices. Its official refrigeration security alert warned against exposing management interfaces directly to the internet. These findings concern the French incidents, not confirmed equipment at Swedish stores.

A related Cybersecurity News report on exposed Danfoss systems highlighted how widely refrigeration management pages could be reached online. Such exposure creates a direct route to equipment that controls physical conditions, rather than only business records or payment systems.

CERT-FR advises operators to remove public internet access, check controller settings, including defrost schedules, and restore remote access through a secure VPN or protected network. It also recommends firmware updates and changing default passwords. Operators should coordinate changes with refrigeration providers, including checking insurance terms before interrupting monitoring connections.

The agency also warns that resetting an unsupported controller is not enough. Without removing exposure and addressing the underlying weakness, the equipment can be compromised again, putting replacement stock at risk once cooling resumes and stores begin restocking their shelves.

Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs.

The post Hackers Hijack Swedish Supermarket Fridges and Raise Freezer Temperatures to 55°C appeared first on Cyber Security News.

Hackers compromised emergency alert applications in Ukraine and Russia, distributing fabricated nuclear and radiation warnings as officials sought to reassure residents that no corresponding emergency existed. Ukraine reported interference late on November 1, followed hours later by Russia’s announcement of a “massive cyberattack” against its emergency ministry’s mobile application. The incidents targeted trusted civilian warning […]

The post Hackers Target Emergency Alert Apps in Ukraine and Russia, Sending Fake Nuclear Attack Warnings appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Chainalysis has confirmed a cybersecurity incident in which an external actor gained unauthorized access to the company’s systems and internal tools through what it described as “offensive agentic techniques.” The company disclosed the incident on October 30, 2026, and its investigation is still ongoing. According to the company’s security disclosure, investigators have found no evidence […]

The post Chainalysis Confirms Cyberattack as Hackers Exploit Vulnerabilities to Access Internal Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Polymarket confirms $2.7 million stolen through the compromised third-party script and pledges $3.9 million in refunds, including compensation for pause losses.

Binance probes a DevOps engineer’s hacked laptop after a $6.3 billion theft linked by researchers to North Korean hackers, and promises to cover all customer losses.

EMBRACE affects AI coding tools Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop, enabling code execution, file theft and browser address-bar spoofing.

Artem Stryzhak gets 70 months for Nefilim and Hive ransomware attacks targeting hospitals, government agencies and businesses in the US and overseas.

A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff…

A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.

OWASP has issued a warning that AI agents and chatbots are reducing the skills required for certain aspects of cyberattacks, particularly in areas like target discovery and vulnerability research. Their latest research indicates that beginners can advance by utilizing AI guidance; however, human expertise remains essential when tools fail or when dealing with complex attacks. […]

The post OWASP Warns AI Agents Are Making Cyberattacks Easier for Less-Skilled Hackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ANY.RUN analyzed 1,258 sandbox submissions showing how fake ChatGPT and Claude downloads and setup guides steal corporate credentials and browser session data.

Fake US court notices target over 100,000 businesses, luring recipients to download LodaRAT malware that steals passwords, records…

Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate computers.