Cyber Security News

Hacking Editorial Brief — November 3, 2026

Coordinated Supermarket Refrigeration Attacks Expand Across European Union

A second wave of cyberattacks targeting supermarket refrigeration systems spread across at least seven European Union countries on Monday, with hackers remotely altering temperature controls to spoil perishable inventory, according to multiple security researchers and media outlets. Stores in Sweden, Estonia, Belgium, and other EU nations reported refrigerators and freezers heated to 50–55°C, forcing mass food withdrawals and equipment shutdowns, The Register and United24Media report. The campaign follows similar attacks on French grocery stores in October and incidents at U.S. military commissaries in August, Fortune reports, though technical attribution and access methodology remain under investigation. The Pentagon has launched an investigation into potential links between the U.S. military incidents and the European compromises, according to Fortune, though no confirmed connection has been established. Security analysts told Euronews that the attacks appear to exploit remote management capabilities in commercial refrigeration systems, though specific vulnerabilities and initial access vectors have not been disclosed. Some researchers observed propaganda videos released following the Israeli grocery store compromise in October, NPR reports, though operational objectives across the broader campaign remain unclear.

North Korea Denies Binance Attribution as Laundering Analysis Projects Extended Timeline

North Korean officials denied U.S. government attribution of the $6.3 billion Binance compromise, with Kim Yo Jong calling the allegations "absurd rhetoric" and "a grave political provocation," The Japan Times reports. The denial follows FBI attribution to North Korean state actors and blockchain intelligence analysis by multiple firms linking the theft to known North Korean cryptocurrency theft operations. Financial Times reporting indicates the stolen tokens remain visible on public blockchains as the attackers begin a complex laundering process expected to take months, according to law enforcement and blockchain intelligence sources. Separate analysis by Bitquery estimates the attackers lost approximately $119 million through inefficient execution during initial token liquidation attempts, Bloomberg reports. Meanwhile, blockchain researchers documented ongoing attacks leveraging fake Cloudflare verification pages to trick users into granting remote access, Mashable reports, though no confirmed link to the Binance compromise has been established.

Additional Breach Disclosures and Vulnerability Analysis

Cloud application platform Northflank disclosed a security breach leading to unauthorized usage of customers' AI API keys, first detected by Wiz security researchers, CISOseries reports, urging customers to rotate credentials though compromise methodology and attacker objectives have not been disclosed. Check Point Research published technical analysis of HTTP2Shell (CVE-2026-111497), an actively exploited remote code execution vulnerability affecting Brotli decompression implementations, according to the firm's threat intelligence report, though exploitation scope and attacker attribution remain under investigation. Separately, hackers claimed responsibility for stealing 23 terabytes of data from Russia's Rosstat statistics agency, including alleged Ukraine war casualty figures, Tom's Hardware reports, though the claim has not been independently verified and Rosstat's website remained inaccessible at time of reporting.

Sources: The Register · United24Media · Fortune · NPR · Euronews · The Japan Times · [Financial Times](https://www.ft.com/content/a6212e33-2175-4957-91d1-8f8f