On the night of Oct. 11, an unidentified attacker compromised refrigeration control systems used by hundreds of French supermarkets, forcing freezers and refrigerators into extended defrost cycles. The incident reportedly caused millions of euros in losses across about 700 stores, spoiling food, damaging equipment and sparking some fires. The affected gear included Danfoss controllers with Internet-facing web servers, many still using default admin credentials, alongside Dixell and Copeland XWEB systems.
darkreading.com
· 2026-11-06
Apple COO Sabih Khan told investors on a Nov. 2 earnings call that the company cannot forecast when iPhone Duo supply will catch up to demand. The foldable, Apple's most expensive phone yet, sold out quickly after its Oct. 23 launch, and some buyers now face shipping delays stretching into 2027. Apple also said it is deepening its partnership with titanium supplier Perryman to help address production constraints.
zdnet.com
· 2026-11-03
The National Cyber Security Centre confirmed a small number of UK organisations were hit by a cyber-attack that also disrupted supermarket fridges and freezers across Ireland, Sweden, Estonia and Belgium. The British Association of Independent Meat Suppliers said some of its 300-plus members were unintentionally caught up as "collateral", though none reported losing meat stock. NCSC chief Richard Horne said it worked overnight to alert affected organisations and that it remains too early to identify who was responsible.
bbc.co.uk
· 2026-11-03
Attackers tried to exploit CVE-2026-97229, a maximum-severity remote code execution flaw in GitLab's CI/CD regex compiler, against Alpine Linux's development infrastructure on October 20-21, repeatedly crashing GitLab processes. Alpine found no direct evidence code was executed or packages tampered with, but due to missing logs it could not rule out compromise, so it rebuilt its GitLab instance and reset all passwords.
bleepingcomputer.com
· 2026-11-01
Tom's Hardware's Premium subscription service published a weekly digest covering Anthropic's pre-IPO filings, Cadence's new LLM suite for EDA tools, Nvidia's AI supply chain moves, Vera CPUs in the cloud, and a TP-Link update. The issue also features CPU expert Jake Roach's early work on defining agentic AI CPU benchmarks, plus a new primer explaining AI terms like inference, quantization, context, and KV cache for locally-run models.
tomshardware.com
· 2026-10-31
Anthropic's official Claude VS Code extension on Cursor's marketplace was replaced with a backdoored version, 2.1.313, that could have reached up to 5,000 users before being superseded by version 2.1.314 hours later. Researchers say the malicious version installed a persistent SSH backdoor across Windows, macOS and Linux systems, and neither Cursor nor Anthropic has explained how the attacker accessed Anthropic's official distribution account.
arstechnica.com
· 2026-10-30
Cursor, the SpaceX-owned AI coding platform, found a backdoored version of Anthropic's Claude Code extension in its marketplace for about 11 hours on Thursday, downloaded by up to 5,000 users across Windows, macOS and Linux. Cursor temporarily closed the marketplace, said no other extensions were affected, and published remediation steps. Anthropic confirmed its own systems and official distribution channels were not compromised, saying an attacker used access to Cursor's marketplace to publish a tampered copy.
wired.com
· 2026-10-30
Security researchers identified a trojanized version of a Claude Code extension distributed for the Cursor IDE, putting developers who installed it at risk. The discovery coincided with a second, separate security issue affecting Cursor on the same day.
darkreading.com
· 2026-10-30
Security firm Phorion identified that version 2.1.313 of the official Claude Code extension for VS Code, distributed via the Cursor Marketplace, contained a hidden SSH backdoor targeting macOS, Linux, and Windows systems. Cursor has since removed the affected release from its marketplace and pulled the corresponding NPM and VS Code packages from their registries.
phorion.io
· 2026-10-30
HP and Asus have reportedly moved portions of their PC manufacturing back to China after previously diversifying to countries like Thailand, Vietnam, and India, according to Nikkei Asia. Dell is said to be considering a similar move, as these companies look to curb rising component costs that have squeezed profit margins.
techspot.com
· 2026-10-29
A hacking campaign known as GhostAction, which targeted software supply chains through GitHub, has slowed down but has not disappeared, according to security researchers. The attackers appear to be shifting focus toward compromising developer endpoints and cloud access credentials rather than continuing their original method of attack.
darkreading.com
· 2026-10-28
SK Hynix has told customers that RAM and flash memory shortages, driven largely by AI demand, are likely to continue through at least 2030. Apple is reportedly among 14 major tech companies with long-term priority supply agreements, but these contracts include clauses allowing SK Hynix to raise prices in line with market conditions.
9to5mac.com
· 2026-10-28
GoKawiil