TFG London's cyberattack has left several of its IT systems offline, impacting brands like Phase Eight, Hobbs, and Whistles, but physical stores remain open for business. The incident, detected on October 11, has prompted the company to activate its incident response and business continuity plans.
A high-severity zero-day vulnerability in Ivanti Connect Secure appliances is being exploited in targeted attacks, allowing remote attackers to execute arbitrary commands without user interaction. This authentication bypass flaw, tracked as CVE-2026-104935, affects several ICS versions and requires immediate patching and mitigation.
Beware of scammers impersonating IT support on Microsoft Teams - a recent study found that 1 in 990 external contacts showed signs of impersonation, with 30% of organizations encountering at least one such contact in the first half of 2026. Attackers are now using Teams as a primary tactic to gain access, marking a shift towards more interactive and deceptive methods.
In just seven minutes, a hacker exploited a vulnerable account lacking multi-factor authentication, gaining access to sensitive data and nearly pulling off a devastating ransomware attack. This alarming incident highlights the critical importance of robust security measures to prevent credential attacks.
Ahold Delhaize took swift action to protect its systems, taking some offline after detecting a security issue that impacted three of its popular brands: Albert Heijn, Etos, and Gall & Gall. The move comes as the company works to contain and resolve the disruption.
A staggering 13.7 million records containing sensitive personal data, including names, passwords, and bank account information, were left vulnerable in an unsecured database, putting millions at risk of identity theft. This massive data breach exposed a treasure trove of stolen credentials and personal info, harvested from earlier breaches, in a single, easily searchable store.
A weak password, astonishingly "123456", was exploited by hackers to breach Denmark's Central Register of Persons, compromising sensitive data of 8.8 million people. This massive breach highlights the alarming vulnerability of even seemingly secure systems to simple yet devastating cyber attacks.
French supermarkets are reeling from a wave of devastating cyberattacks that crippled their refrigeration systems, causing temperatures to soar as high as 122°F and spoiling food across hundreds of stores. The disruption hit major chains like Intermarché, Carrefour, Monoprix, and Coopérative U, with some stores even reporting fires.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Your LG Smart TV may be vulnerable to a local network takeover due to three critical flaws in webOS, allowing hackers to gain root access without needing a PIN or your interaction. This startling exploit begins with a simple connection to the TV's pairing service on port 3001, typically used by the LG ThinQ app.
TFG London is battling to contain a cyberattack that hit its operations, but reassures customers that stores are open as usual. The incident has temporarily affected some website capabilities, including orders and payments, while the company investigates.
A wave of cyberattacks hit French supermarkets on October 11, forcing hundreds of stores to warm fridges and freezers, and ultimately discard thousands of dollars' worth of food. The breach, which Danfoss acknowledged was limited to a number of their refrigeration management systems, caused estimated losses of tens of millions of euros.
The FBI has caught a suspect in the ShinyHunters hacking case, which made headlines in September when the group claimed to have stolen a massive trove of sensitive data about FBI agents, calling it an "intelligence disaster". This brazen breach raised serious concerns about the security of the FBI's internal information.
Malware lurking in the firmware of low-cost Android phones has been found communicating with the same servers as 13 malicious apps on Google Play, putting users at risk of being roped into a massive residential proxy network. This sneaky campaign, tracked as "Midnight Mimosa," has the potential to compromise a wide range of devices.
The software supply chain has just proven to be a weak link in the security chain, as AI agents are exposing vulnerabilities through compromised tools and dependencies. Experts warn that verifying the source and integrity of these components is crucial to preventing such breaches.
As AI continues to advance, a pressing concern has emerged: securing AI data has taken center stage, even if it means slowing down development. The recent Hugging Face sandbox breakout serves as a stark reminder of the risks, highlighting the urgent need for robust AI safety and cybersecurity measures.
Russia's largest tech company, Yandex, is operating in emergency mode after a series of drone attacks damaged three of its data centers, leaving customers struggling to access cloud-stored files. The attacks, which occurred on consecutive days, have resulted in some services being disrupted, with parts of the company still working to stabilize its systems.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
AI systems are capable of unleashing devastating nightmare attacks on our infrastructure, and the alarming truth is that we're woefully unprepared. The threat is real, and it's only a matter of time before we face the consequences.
Hackers sprang into action just two hours after technical details were released, exploiting a critical Atlassian flaw that puts multiple Data Center products at risk. This rapid attack highlights the shrinking window for defence in today's threat environment.
Ledger just confirmed a shocking case of tampering behind recent crypto thefts, tracing the issue to a single reseller, CryptoBilis, and finding an unauthorized hardware implant in one user's device. The company is now working with authorities to catch the culprit and reach out to affected users.
Newly leaked files from an anonymous source reveal the inner workings of the notorious Luna Moth ransomware group, exposing a sophisticated data-extortion business that thrives on manipulating trust. According to Check Point's analysis, this group's tactics are far more complex and sinister than your average ransomware crew.
Ransomware group The Gentlemen claims to have breached financial services giant MoneyGram, which boasts 60 million active customers, but the company has yet to confirm the incident. With no concrete evidence or data samples provided, the extent of the alleged breach remains unclear.
A cyberattack has hit several French supermarkets, forcing refrigerators to undergo emergency defrost cycles and putting fresh food at risk after hackers hijacked Danfoss refrigeration controllers. The attackers exploited older software versions to trigger the automatic defrost function, causing temperatures to rise in stores nationwide.
Ahold Delhaize has taken swift action to protect its customers, employees, and partners after detecting a security issue within its network, taking some systems offline to prevent further damage. The company is working diligently to assess and mitigate the problem.
H&M is investigating claims of a potential data breach after online rumors surfaced, and is working to verify if a cyber attack by the ShinyHunters group has compromised its data. The retailer says it's taking the situation seriously and prioritizing the security of its systems and data.