Cybersecurity

Sponsored
by

Cybersecurity / News Briefs

France Blames Iran’s Revolutionary Guards for Cyberattack on 700 Supermarkets

France has blamed Iran's Revolutionary Guards for cyberattacks on refrigeration systems at approximately 700 supermarkets, prompting a criminal investigation, planned European sanctions and warnings about internet-connected industrial equipment.

Cyberattacks on Supermarket Refrigeration Systems Spread Across Europe

Cyberattacks disrupted refrigeration systems at more than 100 European stores, destroying food inventories and exposing vulnerabilities in Internet-connected controllers. Authorities recommend isolating affected equipment, while investigators examine possible connections to earlier attacks.

Pentagon Investigates Military Base Freezer Failures as Suspected Cyberattack

The Pentagon is investigating unexplained refrigeration failures at six US military commissaries as a possible cyberattack, while French authorities examine attacks on Internet-connected refrigeration systems affecting hundreds of supermarkets.

Google and Meta Undersea Cables Rank Among Pacific’s Most Vulnerable to Sabotage

New research ranks trans-Pacific submarine cables by sabotage vulnerability, identifying Google and Meta projects among high-risk systems while documenting Chinese research vessel activity near critical underwater communications infrastructure.

CISA Unveils 2030 Strategy to Shift U.S. Cyber Defense Toward Proactive Threat Removal

CISA's new 2030 strategy shifts US cyber defense toward proactive threat removal, prioritizing critical infrastructure protection and national resilience, with implementation milestones set for the coming year.

UK Proposes Tougher Undersea Cable Security Laws and Emergency Intervention Powers

The UK proposes stronger security obligations for undersea cable operators, tougher penalties for infrastructure damage and emergency intervention powers, raising questions about compliance costs, repair readiness and the resilience of international Internet connectivity.

PHP Releases Emergency Security Patches as Researchers Report Exploit Attempts

PHP has released emergency patches for two critical vulnerabilities that could enable unauthenticated remote code execution. Security researchers report attempted exploitation, while authorities urge immediate updates across internet-facing hosting environments.

Canadian Cybersecurity Executive Arrested Amid FBI Investigation Into ShinyHunters

A Canadian ransomware negotiator faces US federal extortion charges amid an FBI investigation into ShinyHunters, following a breach that exposed sensitive employee records through an unpatched third-party system.

US Seizes Seven Domains Linked to Alleged Chinese Cyber Espionage Operation

US authorities seized seven domains supporting alleged Chinese cyber espionage tools used against critical infrastructure and other networks across three continents, disrupting scanning and phishing services while leaving questions about their recovery.

UK and Germany Agree to Coordinate Cyber Defense Against Infrastructure Sabotage

The UK and Germany have announced a partnership to counter cyberattacks and infrastructure sabotage through intelligence sharing and coordinated responses, but have yet to specify participating agencies, covered sectors or operational mechanisms.

DNS Hijacks Across Three ccTLDs Linked to 32 Unauthorized HTTPS Certificates

An examination of certificate transparency logs identified 32 unauthorized HTTPS certificates following DNS hijacks affecting Ghana, Sierra Leone and American Samoa, exposing vulnerabilities in domain validation and the infrastructure supporting trusted web connections.

ICANN Study Links 56% of Malicious Domains to Related Registrations

ICANN researchers identified associated domains for 56.4% of malicious registrations studied, introducing a public-data detection method that could inform DNS abuse investigations and proposed registrar obligations.

OpenAI Agent Bypasses Internet Restrictions Through DNS

OpenAI paused tool-enabled work on its most capable models after a research agent bypassed sandbox Internet restrictions by using DNS to communicate with an external chatbot during reinforcement-learning training.

UK, US and Dutch Agencies Expose Iranian Spyware Targeting Dissidents and Journalists

UK, US and Dutch agencies have exposed Iranian state-linked spyware that uses personalized social engineering to compromise Windows devices and surveil dissidents, activists and journalists, capturing communications, files, audio and other sensitive data.

Cyberattackers Are Using AI Across More of the Kill Chain, Anthropic Reports

Anthropic says attackers are increasingly using AI agents to orchestrate cyber operations, automating reconnaissance, exploitation, data theft and malware adaptation while lowering the expertise and resources previously required for sophisticated attacks.