Cyber Security News

Hacking Editorial Brief — November 10, 2026

CISA Adds Four Vulnerabilities to Known Exploited Catalog, N-able Takes N-central Offline Following Zero-Day Disclosure

CISA added four security flaws affecting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation, according to The Hacker News. The agency did not disclose the scale of exploitation, specific victim organizations, or whether the active exploitation represents coordinated campaigns. Separately, N-able took its hosted N-central remote monitoring and management environments offline globally on November 9 after an independent researcher published details of 33 alleged zero-day vulnerabilities and exploit code. The company has not confirmed which vulnerabilities are valid, whether exploitation occurred prior to disclosure, or when services will be restored. Google also patched CVE-2026-125350, a high-severity use-after-free vulnerability in Chrome's XML component being actively exploited—marking the eighth Chrome zero-day this year, researchers report.

France Attributes Supermarket Refrigeration Cyberattacks to Iranian Revolutionary Guards Unit

France's Foreign Ministry officially attributed October's supermarket refrigeration cyberattacks to Iran's Revolutionary Guards, summoning Tehran's envoy and warning of a forthcoming response, according to Reuters. Foreign Minister Jean-Noel Barrot stated the attacks affected 700 commercial sites, raised freezer temperatures to 50°C, and caused at least 15 fires requiring mass food disposal. France reports the campaign used Persian-language tooling and Iranian IP addresses consistent with IRGC tradecraft, though Tehran has not responded to the attribution. French authorities also disclosed that hackers reached cold storage systems at three blood banks, requiring emergency relocation of blood supplies. The attacks represent a shift from data theft to direct infrastructure sabotage, though France has not detailed the initial compromise vector or disclosed whether other European nations experienced similar intrusions.

Additional Reported Activity: Hackers compromised Ethersphere's bee-js npm package and Swarm Desktop, injecting wallet-stealing malware into version 13.3.0 before it was removed from the registry. The n0n hacking group claims to have stolen hundreds of millions of traveler records from Expedia, though the claim has not been independently verified. Fireworks AI disclosed that attackers accessed development machines through a third-party cloud provider breach, exposing customer billing information and model weights. The BYOD ransomware group claimed responsibility for an attack on Vanderbilt University that encrypted databases and affected multiple campus services.

Sources: The Hacker News · Cybersecurity News · Reuters · Iran International · Bleeping Computer · Bleeping Computer