European retail operations are facing a renewed wave of cyberattacks targeting refrigeration infrastructure, leading to significant food spoilage across the continent. This latest incident follows a series of similar attacks three weeks ago that specifically impacted French supermarkets by forcing temperature controls to malfunction, effectively turning refrigeration units into ovens. In a related development, the French Blood Establishment (EFS) reported that three of its blood banks identified and successfully reversed unauthorized temperature spikes in their cold storage facilities. This breach was traced to a cyberattack targeting a third-party refrigeration equipment provider serving the organization.
In the realm of enterprise software, the security firm OPSShield confirmed a supply chain compromise involving its cPGuard security suite. Attackers managed to infiltrate the company’s update infrastructure, distributing a malicious update to approximately 3,000 Linux web hosting servers. OPSShield further confirmed that the unauthorized access extended to its billing and licensing server, resulting in the theft of customer contact information and hashed passwords.
Meanwhile, the cybersecurity landscape for network hardware remains precarious. Researchers at Binarly discovered that Zyxel GS1900 series switches remain vulnerable to active exploitation despite previous remediation efforts. The investigation revealed that a patch previously issued for these devices addressed an unrelated flaw, CVE-2026-7273, while leaving the actual exploited vulnerability, CVE-2026-111357, unaddressed. Additionally, CISA has issued an urgent directive for federal agencies to remediate two Ivanti Connect Secure vulnerabilities, CVE-2026-111357 and CVE-2026-118527, following reports of active exploitation.
Google’s Threat Intelligence Group has taken action against the XCPE botnet, a backdoor embedded within the firmware of Android TV set-top boxes. Google successfully dismantled the servers supporting the botnet, which had enrolled over 1.3 million devices. The company attributed the operation with high confidence to Videostrong Technology, the manufacturer of the affected hardware. In a separate incident, the blockchain analytics firm Chainalysis confirmed it suffered a data breach resulting from what it described as offensive agentic techniques, noting that the event is distinct from recent attacks on Binance.
Emerging threats involving artificial intelligence continue to evolve. CrowdStrike reported that a China-nexus espionage group utilized AI agents to facilitate attacks against more than 200 organizations within an 11-day window. Simultaneously, Kaspersky identified a separate campaign by Chinese-speaking operators targeting educational institutions across Africa and Latin America. Research also suggests that AI coding agents are inadvertently introducing risks by recommending packages from archived, unmaintained repositories, creating potential long-term security debt.
On the mobile security front, researchers at Bitdefender Labs identified a critical flaw in Android, dubbed GhostMap. The vulnerability, which stems from how the operating system processes ZIP structures within APK files, allows a specially crafted app to force a Pixel 10 device into a persistent crash loop that may require a full factory reset to resolve. The researchers noted that the malicious sample requires no specific permissions or executable code to trigger the failure.
Industry responses to these shifting threats are varied. Vercel has introduced Device Bound Session Credentials to tie login sessions to specific hardware, alongside a new AI-driven security review platform. Meanwhile, the security community continues to debate the governance of AI agents, with recent industry events highlighting the necessity of assigning clear ownership and defined permissions to automated systems. These discussions emphasize that while AI can accelerate vulnerability discovery, human oversight remains essential for assessing business impact and managing complex security logic.
