GoKawiil
Tech News
Carrefour reported that hackers affected refrigeration units in 80 of its roughly 6,000 stores. Monoprix said about 5% of its more than 400 stores were hit, and affected food was pulled from shelves where its safe condition could not be confirmed.
Hackers remotely triggered defrost mode on Danfoss-managed refrigeration systems at roughly 150 Intermarché stores Sunday night, raising cooler temperatures to 50°C and spoiling food before staff noticed six hours later. Fewer than 100 Cooperative U stores and some Leclerc locations were also affected, with electronic pricing labels reportedly disrupted too. Early estimates put losses at around 300,000 euros, a figure that could rise as investigations continue.
A version of the popular Zod validation library, 4.6.6, has surfaced containing obfuscated JavaScript that fetches remote instructions via blockchain RPC calls and downloads a secondary payload to execute. The code queries multiple Ethereum nodes, decodes the response into a domain, then retrieves a loader script that writes and runs an additional file in a temporary directory before cleaning up traces.
Ubuntu's website, ISO downloads and related resources went down on Thursday, with the company confirming the outage was caused by a distributed denial of service attack. Ubuntu posted updates on its Discourse forum saying teams were working to restore services, and its status page later showed all components operational after outages lasting hours across Wednesday and Friday.
Users of Ledger crypto wallets purchased through reseller CryptoBillis have reported drained accounts, with reports citing over $86 million stolen from hundreds of wallets. Photos shared on social media appear to show a hidden circuit board implanted under the wallet's screen that captures the seed passphrase and transmits it via an embedded SIM card. Ledger has asked CryptoBillis to pause all sales while it investigates, and says there is no evidence its own systems or directly purchased wallets were compromised.
Criminal IP by AI SPERA is debuting AITEM (AI-Powered Threat Exposure Management) at GovWare 2026 in Singapore, positioning it as an advancement over conventional Attack Surface Management tools. The system aims to combine external asset data, open-source and dark web intelligence, internal infrastructure, Shadow AI exposure, leaked data, and vulnerability information into a single threat exposure platform. CEO Byungtak Kang said the company wants security teams to move from simply seeing threats to acting on them in real time.
Russian state media TASS reported on October 9 that a drone attack hit Yandex's data center in Kaluga's Grabtsevo industrial park, completely disabling several of its modules. The facility, Yandex's largest in Russia, spans about 130,000 square meters with a planned 63-megawatt capacity and over 3,800 server racks. This comes just two days after satellite imagery showed damage from a separate drone strike on another Yandex data center in Sasovo, Ryazan region.
IDC Frontier, a SoftBank Group subsidiary, reported that its IDCF Cloud service suffered a ransomware attack beginning October 7 at 3:40 AM local time, disrupting its East Japan Region 1 data center cluster. The company said 495 businesses and local government bodies using the cloud platform were affected, and it has disabled management console access across all regions while checking security.
Yandex suspended services at its Sasovo data center in Ryazan following a drone attack that caused a fire, leading to partial service disruptions. The company confirmed no casualties and noted emergency responders are managing the situation. The attack is part of broader Ukrainian efforts targeting Russian infrastructure amid ongoing tensions.
America PAC, associated with Elon Musk, has allocated significant funds toward the most pivotal Senate races in the upcoming midterm elections. The group has spent nearly three times more on attacking Democratic candidates than supporting Republican ones, with notable expenditures in Texas and other battleground states. These efforts aim to influence the balance of power in the Senate amid concerns over a potential Democratic majority.
Advantest Corporation has notified affected individuals that a ransomware attack on February 15 resulted in theft of personally identifiable information, including Social Security numbers, national ID numbers, driver's licenses, passports, medical and financial data. The semiconductor test equipment maker had initially disclosed the breach without confirming data theft, but an October 6, 2026 notification confirms data was extracted from its servers. It remains unclear whether the stolen data belongs to customers, employees, or partners.
Security researcher Abdelhamid Naceri published a proof-of-concept called BigDiskBuster that stops Microsoft Defender from receiving signature updates without exploiting any vulnerability. The roughly 300-line C++ tool monitors the C: drive for Defender update activity and fills nearly all free disk space with a hidden file, causing each update attempt to fail while Defender's service and real-time protection keep running normally. LevelBlue researchers reproduced the technique after the original GitHub page was taken down, confirming it creates what they called a 'silent detection gap.'