30 casos · pág. 1/2
A cyber-attack that began on October 11 against refrigeration controllers in French supermarkets is larger than first reported. It now appears to affect Dixell Electronics (a Copeland brand) temperature regulation devices as well as Danfoss controllers. CERT-FR named Danfoss AK-SC and AK-SM series, Dixell xweb and Copeland xweb as affecte…
An actor using the handle ChimeraZ claims to be selling a dataset from LOOF (Livre Officiel des Origines Félines), the French organization that registers pedigree cats and maintains official feline genealogical records. The listing advertises about 654,000 lines, roughly 330,000 animal records, about 40,000 people and 90,555 files totalin…
OVHcloud disclosed a supply-chain attack on its command-line interface (CLI) repository on GitHub. An attacker used a compromised developer's GitHub account to insert a malicious binary designed to retrieve secrets from users' disks. CEO Octave Klaba confirmed the incident on 19 October 2026 after a customer report. The compromised releas…
OVHcloud disclosed that attackers hijacked a developer's GitHub account and used it to modify the open-source OVHcloud CLI repository, publishing trojanized releases 0.11.0 through 0.15.0 that carry information-stealing malware. According to CEO Octave Klaba, the malicious release appeared at 14:47 on October 19 and was detected and block…
On 19 October 2026 an attacker used a hijacked contributor's GitHub account to replace the download archives on five existing releases (v0.11.0 to v0.15.0) of OVHcloud CLI. The swapped files were a build designed to steal secrets stored on the disk of any machine that ran it. They were live from 12:47 to 14:21 UTC (up to 94 minutes) for m…
In September 2024 the French national pension fund Assurance Retraite suffered a data breach affecting approximately 370k assistance beneficiaries. The dataset was added to Have I Been Pwned on 20 Oct 2026 and contains 70.4k unique email addresses. Exposed data includes names, dates of birth, physical addresses, phone numbers, income leve…
In August 2026, French intellectual property software and services company Questel was targeted in a ShinyHunters "pay or leak" extortion campaign. The group published a large corpus of data it claimed to have taken from the company. The data is largely corporate contact information tied to sales leads, support cases and marketing activit…
In May 2026, the French holiday rental network Gîtes de France suffered a data breach affecting some of its departmental branches. The incident exposed hundreds of thousands of customer records, including roughly 118k unique email addresses. Have I Been Pwned added the dataset on 18 Oct 2026, with 117.6k affected addresses. The article do…
An actor using the handle Feel claims to have leaked data tied to IAD France, a French real estate network that supports property buying, selling and rental. The listing references three JSONL files: 8,592 agent records, 112,780 property records and 8,592 user-photo records. A sample archive is advertised, and the full download is gated b…
A threat actor using the handle Alduin claims to be selling a customer dataset from Climb Up, described as the largest network of indoor climbing gyms in France. The listing advertises approximately 151,000 records covering customers across 29 locations, with data spanning January 2016 to March 2026. The seller asks for offers in XMR only…
An actor using the handle Shenron claims to have released a dataset tied to APICRYPT Messaging, a secure healthcare messaging system created in 1996 and managed by the APICEM association. The listing advertises 852,757 rows covering 60,911 users, and marks the breach and release as occurring in 2026. The visible sample contains healthcare…
A threat actor using the handle ChimeraZ claims to have leaked a user dataset linked to ISEP, a French engineering school specializing in digital technology, computer science, electronics and cybersecurity. The listing advertises 5,091 lines covering 5,088 people in a 720 KB JSON dataset, with multiple download mirrors provided. The data,…
Threat actor ChimeraZ claims to be selling a partial dataset from I-CAD, the French national identification registry for dogs, cats and ferrets. The listing advertises 2,948,630 lines in a 643 MB JSONL file, made up of 2,898,001 animal records and 50,629 veterinary records, with the price set to "make offer". The dataset's authenticity, s…
Episode 484 of the Smashing Security podcast, hosted by Graham Cluley with guest Danny Palmer, covers several security stories. The lead item is audio fingerprinting: a user named Matt found that an open AliExpress page, playing silent audio at zero volume, kept his multipoint Bluetooth headphones from switching to his phone. The episode …
Techscaler, the Scottish Government's startup programme run by CodeBase, is funding Scottish founders to attend the Blue Earth Summit in London (14-16 October 2026) and the InvestHer Summit in Paris (27-28 October 2026). The aim is to build investor relationships and support international growth. The article is business and funding news a…
A 40-year-old Nigerian national, Chukwuemeka Victor Amachukwu, was sentenced to eight years in prison by a US federal court for a 2019-2023 scheme that combined hacking of US tax preparation businesses, filing of fraudulent tax returns and fake investment fraud. He used identities stolen from victim organizations to file false returns wit…
A Nigerian national, Chukwuemeka Victor Amachukwu (aliases Chukwuemeka Victor Eletuo and So Kwan Leung), 40, was sentenced to eight years in prison for his role in spearphishing attacks against US tax preparation businesses between 2019 and 2021. He pleaded guilty to conspiracy to commit computer intrusions and wire fraud after being extr…
Nvidia has released Nemotron 3.5 Super VL, a 120-billion-parameter open-weight model aimed at agentic workloads, together with two edge models, Nemotron 3.5 Bolt 74B-A9B 24GB and Nemotron 3.5 Bolt E4B 4GB. Nvidia claims it is 5x faster than the next-best model in its class, based on Artificial Analysis benchmarks that ranked InclusionAI's…
Unknown attackers compromised thousands of internet-exposed refrigeration controllers late on Sunday, raising temperatures to as high as 122°F (50°C), spoiling food and causing fires at nearly 700 French supermarkets. France's ANSSI warned of widespread compromises of Danfoss controllers and a day later added Copeland and its Dixell brand…
A still-unknown actor hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores, spiking temperatures, spoiling food and sparking fires. The incident fits a broader trend of extortionists and other attackers going after physical systems to maximise real-world pressure on victims. Earlier examples…
