The Global Threat Summary, week ending 18 October 2026

In one line: the connections organisations trust most were where attackers worked this week: the maintenance link into a supermarket fridge, the security product at the network's edge, the backup app inside the email system, and the remote hire nobody had met.

The first is physical. Overnight on 11 October, French time, attackers drove refrigeration in hundreds of French supermarkets as high as 50°C, and stores threw out their fresh and frozen stock. France's Finance Minister put the count at about 700 stores. The controllers were reachable over the internet so maintenance firms could adjust them, and many were past their support date. Nothing was stolen and no ransom was asked. The loss was the stock, and food and grocery is a critical infrastructure sector in Australia.

The second is trust at the edge. Four security products, from Ivanti, Palo Alto Networks, Cisco and BeyondTrust, were confirmed exploited in the same week, one of them for seven weeks before disclosure, and one while Ivanti's own integrity checker reported nothing wrong. Separately, an attacker signed in to at least 162 Microsoft 365 tenants as a backup application those tenants had approved, so multifactor authentication never applied.

The third is people and accountability. Australia's ASD launched the successor to the Essential Eight on 15 October, rating controls on evidence and asking organisations to define board level accountability. The US charged 14 people over North Korean IT workers placed inside as many as 70 companies, and Australia's sanctions office says employing one may be a criminal offence.

Three questions for the executive team.

Which of our physical systems, refrigeration, building controls and plant, can be reached from outside, by which contractors, and which are past their support date?
Which applications and edge devices hold standing access to our systems, who owns each, and where a vendor says exploitation came first, have we looked for compromise from before we patched?
How do we verify that a remote hire or contractor is who they say they are, and who is accountable for cybersecurity at board level, in writing?

Cross sectoral, the items that reach every industry

Operational technology

French supermarket refrigeration attack, about 700 stores. Cross sectoral, OT. [Reported]

Overnight on 11 to 12 October, attackers forced refrigeration controllers in French supermarkets into a continuous defrost, some units reaching 50°C. The Paris prosecutor is investigating a "large-scale" attack, food losses and "the outbreak of fires" (Reuters via iTnews, BleepingComputer).
Divergence on scale. About 700 of 10,000 supermarkets, Finance Minister Roland Lescure to Parliament (AP); at least 350, Reuters; 250 to 350 per French outlets. Carrefour 80; Coopérative U 80; Les Mousquetaires about 150 (Reuters) or 300 Intermarché and Netto (AP). Sekoia's Felix Aime told Reuters Spain, Portugal, Poland, Germany and Belgium were also affected; one analyst.
Products. ANSSI names Danfoss AK-SM and AK-SC and Copeland and Dixell XWEB controllers (Cybersecurity Dive). Danfoss: many units "reached end of life and no longer receive software or security updates". Copeland: a "discontinued, end-of-life generation of controllers". Entry method not confirmed.
Divergence on CVEs. Claroty Team82's August research on the AK-SM 800A is cited as CVE-2025-41450 and 41451 (BleepingComputer) and as 41451 and 41452 (Cybersecurity Dive). EPSS on 18 October: 0.0035, 0.0096, 0.0027. Exposure: Shadowserver's AK-SM 800A count fell from more than 550 to about 350; Shadowserver also counts 1,173 Copeland XWEB instances; Censys more than 2,900 StoreView hosts.
Australia. Claroty's field CTO, Jason Pearce, told Information Age on 15 October "these controllers are used throughout Australia in multiple industries". No Australian exposure count published. No claim, no ransom.

Attribution: the Paris prosecutor, the Finance Minister, Danfoss and Copeland, as reported by Reuters, AP, BleepingComputer and Cybersecurity Dive. ANSSI's own statement was not read.

Exploited at the edge

Ivanti Connect Secure, CVE-2026-104935, chained zero days, third flaw unfixed. Cross sectoral. [Confirmed]

Volexity: an actor it tracks as UTA0576 chained three flaws for root on a "fully patched" appliance on 22.8R2.4 from 3 October, leaving no malware, patching code in memory and wiping logs; of the Integrity Checker Tool, "the tool does not detect any modifications" (iTnews).
Two flaws fixed under CVE-2026-104935 in 22.8R2.5, 25.1.1.2, 25.1.3.0 and 25.1.3.1; the 22.7 branch unaffected. The privilege escalation fix is "still weeks away". Ivanti's CVSS 8.6.
In the exploited catalogue on 13 October, due 16 October. EPSS 0.2598 on 18 October, 98th percentile. One confirmed victim.
Volexity assesses with medium confidence the actor used LLMs to build its tooling. Rapid7 says part of the flaw was fixed internally in 25.1.3.0 in July, before backporting.

Attribution: Ivanti (BleepingComputer); Volexity as reported by iTnews; CISA KEV.

Palo Alto Networks PAN-OS, CVE-2026-0322, management interface. Cross sectoral. [Confirmed]

Code execution as root through the management interface; needs credentials and network access. CVSS v4 8.6. PA-Series, VM-Series and Panorama; Cloud NGFW and Prisma Access not affected.
Palo Alto: "Very limited exploitation has been observed targeting the Palo Alto Networks management interface" (BleepingComputer, 14 October). No actor named.
Fixes for 10.2, 11.1, 11.2, 12.1 and 12.2. Mitigation: restrict the management interface to trusted internal addresses.
Catalogue 14 October, due 17 October. EPSS 0.0122.

Attribution: Palo Alto Networks as reported by BleepingComputer; CISA KEV.

Cisco Secure Email Gateway, CVE-2026-76519, root through an attachment. Cross sectoral. [Confirmed]

Path traversal in the AMP File Reputation service: a crafted email through an unpatched gateway lets an unauthenticated attacker run commands as root. Affects File Reputation enabled gateways with Content Scanner Tools earlier than 25.3.0.5525.
Cisco: "In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability" (BleepingComputer). No actor named. Shadowserver: nearly 300 exposed.
Follows exploited AsyncOS flaws patched in January and September 2026.
Catalogue 14 October, due 17 October. EPSS 0.0157.

Attribution: Cisco as reported by BleepingComputer; CISA KEV.

BeyondTrust Remote Support, CVE-2026-102764, exploited since late August. Cross sectoral. [Confirmed]

Exploited as a zero day from late August; SaaS patched by 8 October; disclosed 15 October. RS 26.2.3 and earlier. CVSS v4 9.3 per BeyondTrust as reported. Self hosted PRA also patched as a precaution (BleepingComputer).
Attribution, with aliases. Mandiant: ARMORY CASTLE, formerly UNC5221, a suspected PRC nexus espionage actor; CrowdStrike: Warp Panda. Root via SUID, the Sawfly web shell and Bareclaw tunneler, log wiping, lateral movement.
Mandiant: the actor "has conducted widespread and opportunistic exploitation"; treat any internet reachable appliance on a vulnerable version in the window as potentially compromised. Canada's Cyber Centre AL26-025.
Divergence on the flaw type. Authentication bypass (BleepingComputer) against origin validation (BeyondTrust, per search). Shadowserver: more than 1,400 exposed. Catalogue 16 October, due 19 October. EPSS 0.0118.

Attribution: BeyondTrust and Mandiant as reported by BleepingComputer and Dark Reading; Canada's Cyber Centre; CISA KEV.

Supply chain and trusted applications

ConnectWise Cloud Backup application identities abused in Microsoft 365. Cross sectoral. [Reported]

ConnectWise: it "recently identified unauthorized access to application identities within the ConnectWise Cloud Backup environment", formerly SkyKick; application access shut down; service suspended 17 October, 05:01 UTC, no restoration date (BleepingComputer).
The attacker authenticated as the app's service principal with its secret, so MFA did not apply (Todyl). Huntress saw Cloud Management apps assign themselves Exchange Administrator, and in one tenant Global Administrator. Microsoft: an active supply chain attack, likely abusing Directory.ReadWrite.All.
Divergence on count. At least 162 tenants (Huntress via BleepingComputer) against 173 later (The Hacker News, not read directly). Activity from 15 October, scripted attempts 13 and 14 October.
ConnectWise: "We have no indicators to date that Cloud Backup partner backup data has been compromised." Credential source unknown. No actor named.
Disabling the app stops new tokens; existing tokens stay valid until expiry; revoking user sessions does not end application access.

Attribution: ConnectWise, Huntress, Microsoft and Todyl as reported by BleepingComputer. A second outlet was seen in search, not read.

Shopify theme extensions altered to divert shoppers. Cross sectoral. [Reported]

On 13 October, 07:47 to 15:00 UTC, Selleasy (Logbase) and Hulk Product Options (HulkApps) were altered to send shoppers to lookalike payment pages. Logbase: an unauthorised party used an internal tool "to add a malicious script to the Selleasy settings of a number of stores" (iTnews).
An Australian online retailer closed its store; Shopify told it to stay password protected. Logbase says more than 49,000 stores use Selleasy; affected count not given.
Shopify: "Merchants stay in control of the apps on their store." Single outlet, so lighter.

Attribution: Logbase, HulkApps and Shopify as reported by iTnews.

Ledger wallets implanted in the reseller channel. Cross sectoral. [Confirmed]

Ledger's Donjon says an implanted microcontroller captures the 24 word recovery phrase at setup and sends it over LTE. The secure element and operating system are untouched, so self checks cannot see it (BleepingComputer, 14 October).
Sales halted in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong. Confirmed losses tie to devices from one Southeast Asian reseller. MediaMarkt pulled stock in Europe.
Divergence on losses. About US$86 million traced by an onchain investigator, not verified by Ledger; up to US$93.4 million elsewhere. Not carried as fact.

Attribution: Ledger as reported by BleepingComputer; loss figures as reported by crypto press.

People and state activity

North Korean IT workers inside as many as 70 US companies. Cross sectoral. [Confirmed]

On 13 October the Justice Department announced charges against 14 people; two Americans arrested on wire fraud, money laundering and identity theft charges. 2019 to July 2025, about US$3 million to sanctioned North Korean groups (BleepingComputer).
More than 40 Texas residences searched 21 to 25 September, about 187 laptops and KVM devices seized, "Lonestar Roundup". Employers in health care, communications, retail, manufacturing and support (iTnews).
CrowdStrike tracks Famous Chollima, also WageMole: fake theft reports for replacement devices, last minute relocations, spoofed device identifiers. "The adversary will almost certainly continue to evolve their methods."
Divergence. Venue reported as Ohio and as Pennsylvania and Texas; one defendant's surname spelt two ways.
Australia. The Australian Sanctions Office advisory, updated February 2026, says payments breach UN and Australian sanctions and employing a DPRK IT worker may be a serious criminal offence (DFAT, read through search extracts).

Attribution: the Justice Department as reported by BleepingComputer, iTnews and Reuters; CrowdStrike's own account. Allegations.

Spyware delivered through targeted advertising, reaching Australian networks. Cross sectoral. [Reported]

Citizen Lab's Adfection report: Israeli firm Discover-Tech bought ad placements whose script let it select devices for Candiru spyware, with no click needed. Al Jazeera evidence covers at least 45 devices in 2024 and 2025 (BleepingComputer, 16 October).
March to June 2026: 3.77 billion bids, about 442 million won, across 75,373 apps and 120,768 sites. Not infection counts.
Australia. The ads reached ANSTO and the Australian Synchrotron, government, energy, university and three media networks. ANSTO has "not identified any impact"; Confiant did not see Australia among nine countries where devices were handed to Candiru (iTnews).
Google and several ad platforms removed Discover-Tech. Citizen Lab recommends mandatory ad blocking and disabled ad tracking IDs on government devices.

Attribution: Citizen Lab and Confiant as reported by BleepingComputer and iTnews.

Policy and frameworks

ASD Essentials, the Essential Eight's successor. Cross sectoral, Australia. [Confirmed]

Launched 15 October in three chapters: enterprise IT, OT and cloud. "Essentials for enterprise IT evolves the existing Essential Eight." AI guidance alongside. Both frameworks stay on cyber.gov.au through the transition (Cyber Daily; ASD, which timed out on a direct read this run).
Effectiveness ratings "backed by evidence, such as independent testing and simulated exercises", area by area, in place of Maturity Levels Zero to Three; formally defined executive and board accountability (iTnews).
ASD: "Organisations should continue meeting their existing regulatory obligations until relevant regulators announce any changes." Agencies assessed against both next year. Mandatory timing "yet to be settled".
Divergence on retirement. In June, the ACSC's Chris Horlyck said ASD would "probably in 12 months, start to deprecate" and "in 24 months" retire the Essential Eight (Cyber Daily, 24 June). The October launch sets no date.

Attribution: ASD as reported by Cyber Daily and iTnews.

AI

Anthropic research on self replicating models on consumer devices. Cross sectoral. [Reported]

Anthropic: "Our experiments suggest that small AI models may be months away from being capable enough to self-replicate" on commercial IoT devices (BleepingComputer, 13 October).
Controlled experiments on off brand Android TV boxes with unauthenticated ADB access. Research, not an observed attack; inference would take days on that hardware.
Anthropic's own paper was not read. Confirmed for what Anthropic says it found; its framing is its own.

Attribution: Anthropic as reported by BleepingComputer. Single outlet read.

The catalogue

Nine additions to the exploited catalogue in the window. Cross sectoral. [Confirmed]

13 October: Ivanti CVE-2026-104935; Microsoft Windows CVE-2026-96951. 14 October: PAN-OS CVE-2026-0322; Cisco SEG CVE-2026-76519; AhsayCBS CVE-2026-105133 and CVE-2026-105134. 15 October: Atlassian CVE-2026-21589. 16 October: BeyondTrust CVE-2026-102764; Fortinet CVE-2025-61624. Ransomware use "Unknown" for all (KEV feed, version 2026.10.16, 1,748 entries).
Fortinet CVE-2025-61624: path traversal in the FortiOS CLI, needs an authenticated admin; Fortinet 5.4, published April 2026, FG-IR-26-122. EPSS 0.0108.
Microsoft's October Patch Tuesday: 1,411 flaws and three zero days, one exploited, CVE-2026-96951, a Windows Shell Mark of the Web bypass (BleepingComputer). The catalogue names it a command injection flaw. EPSS 0.0151.
AhsayCBS and Atlassian were in last week's Summary as not yet catalogued.

Attribution: CISA KEV; Microsoft as reported by BleepingComputer; FIRST EPSS.

Since last week

IDC Frontier's fifth report: snapshot data retrievable for 194 customers. Cross sectoral. [Reported]

On 14 October IDC Frontier said snapshot data could be retrieved for 194 of the 495 affected customers, an advance on its 8 October view that recovery would be from customers' own backups. Whether systems can be restored from it is still being checked (Impress Watch, through search).
The company found no trace of exfiltration from customer virtual servers in the four zones; separately, 48 customers' registration details in the IDCF Cloud portal were queried without authorisation.
Downstream disclosures of possible email address exposure from 13 and 14 October, per innovaTopia: Mouse Computer about 420,000, Izumi up to about 400,000, JR Central about 15,000. One outlet; lighter.

Attribution: IDC Frontier's fifth report as reported by Japanese outlets, read through search. The notice itself was not read.

Absences, counted rather than assumed

What was looked for and not found. Cross sectoral. [Confirmed]

One SEC 8-K Item 1.05 filing from 11 to 19 October: Park Dental Partners, 13 October, in healthcare below.
No Australian exposure count for the French controllers or for any of the four edge products.
No ACSC alert read: the cyber.gov.au pages timed out. GreyNoise was not checked this run.

Attribution: SEC EDGAR full text search; Shadowserver as reported.

The week for a security leader

Energy and utilities

No in window incident at an energy or water operator met the bar. The refrigeration controllers in the cross sectoral section are the same class of remotely maintained control equipment that sits in pumping stations and substations, and the Candiru advertising item reached Australian energy networks without a confirmed infection. The four edge items are this sector's exposure.

Financial services

No in window incident at a bank, insurer or fund met the bar. The Ledger item in the cross sectoral section is the week's consumer finance story, and the ConnectWise item applies to every institution whose provider installs apps in its tenant. The North Korean IT worker charges touch every firm hiring remote developers.

Healthcare

Park Dental Partners updates its August incident in an 8-K. [Confirmed]

8-K Item 1.05 filed 13 October, updating the August incident; the company now says data was acquired, and reports four lawsuits.
US dental group. Weekly material, not a story.

Attribution: SEC EDGAR, filing listed; the filing text was summarised in last week's Friday check and not reread.

An Australian specialist medical practice investigates a ransomware group's claim. [Claimed]

A new group, n0n, claims more than 15,000 patient images and scans, more than 11,000 letters and reports, and four weekly backups of the practice's records system. No evidence shared.
The practice says it is aware of a claim, believes the incident affected "the environment of a third-party technology provider that hosts and supports our systems", has engaged forensic experts and notified the ACSC.
Name held pending Adam's ruling.

Attribution: Cyber Daily, 15 October. The practice's statement is Confirmed; the group's figures are claims.

The ConnectWise and French refrigeration items in the cross sectoral section are this sector's exposures: hosted systems run by a provider, and medicine kept cold.

Manufacturing and operational technology

An Australian switchboard manufacturer's data published by Qilin. [Claimed]

Listed by Qilin in a leak post of 4 October, dated context; Cyber Daily reported on 16 October that the full dataset has been published, appearing to include accounts and admin data, staff folders and product data, with customer folders including police stations.
The company did not respond to Cyber Daily. Name held pending Adam's ruling.

Attribution: Cyber Daily, 16 October. The group's listing is a claim.

The French refrigeration attack in the cross sectoral section is this sector's most important item this week, and the edge items are its remote access exposure.

Technology and software

SiteGuard Server Edition WAF, CVE-2026-106931, exploited. [Confirmed]

OS command injection as root or SYSTEM through the statistics feature, enabled by default. The vendor and JPCERT/CC say it is "currently being exploited in the wild" (BleepingComputer, 18 October).
Fixed in 8.00 Update 5, or 7.00 Update 6 on FreeBSD. The vendor warns "remediation may erase attack traces": collect diagnostics before patching.
Japanese product; vendor says it protects more than 1.5 million sites.

Attribution: the vendor and JPCERT/CC as reported by BleepingComputer.

Collabora's built in CODE server for Nextcloud, CVE-2026-110447, exploited since September. [Reported]

Unauthenticated command injection through proxy.php; web shells planted to hunt password databases and wallets. Attacks reported from 10 September; fix 26.4.303 released 11 September; CVE and advisory 14 October (BleepingComputer, 15 October).
"Disabling the app is insufficient": update or remove. Nextcloud says it has not seen widespread exploitation; ransomware use reported by users, not confirmed.

Attribution: Collabora and Nextcloud, administrators' reports, as reported by BleepingComputer.

GitLab CVE-2026-97229, CVSS 10.0, unauthenticated code execution. [Confirmed]

Integer overflow in the CI/CD regular expression compiler. Fixed in 19.4.2, 19.3.5 and 19.2.8; GitLab.com already secured. Not known exploited as at 13 October (BleepingComputer, through search).

Attribution: GitLab as reported by BleepingComputer and Cyber Daily.

The four edge items, ConnectWise and the Shopify extensions in the cross sectoral section are this sector's priorities.

Government and defence

A BAE Systems incident takes down the US bankruptcy notice system. [Confirmed]

The Administrative Office of the US Courts said on 15 October that "all access to the BNC systems and websites that BAE operates on behalf of the Judiciary" is unavailable; notice production halted (BleepingComputer).
BAE: "We are aware of a security incident that is isolated to the BNC system and have taken immediate steps to address it." No data theft or ransomware reported.

Attribution: the AOUSC and BAE Systems as reported by BleepingComputer.

UK Legal Aid Agency: stolen records go back to 1978. [Confirmed]

Follow up to the April 2025 breach. About 250,000 records predate 2007; "The earliest record currently verified dates from 1978" (BleepingComputer, 15 October).
Data includes criminal history and national ID numbers. The Ministry of Justice says there is no evidence the data has been published.

Attribution: the Legal Aid Agency and Ministry of Justice as reported by BleepingComputer.

The North Korean IT worker, Candiru and BeyondTrust items in the cross sectoral section are this sector's most significant.

Retail and consumer

Ahold Delhaize takes systems offline. [Reported]

On 12 October the company said it was "experiencing a security issue within its network" and took some systems offline; websites of Stop & Shop, Food Lion, Giant, Hannaford and Albert Heijn were down; stores stayed open (BleepingComputer, through search; AP).
"No evidence" customer or associate data was stolen. Cause not stated, no claim. No link to the French attack found.

Attribution: Ahold Delhaize as reported by AP, read, and by BleepingComputer and Cybersecurity Dive, through search.

Burger King Japan app, about 11.18 million records. [Confirmed]

Unauthorised access to the member system for its app, 2 to 7 October, confirmed 13 October: names, dates of birth, gender, email, phone numbers, order history. No card numbers stored (BleepingComputer, 16 October).
Cause not disclosed. No link to IDC Frontier reported.

Attribution: Burger King Japan's notice as reported by BleepingComputer.

The French refrigeration attack and the Shopify extensions in the cross sectoral section are this sector's main items.

Transport and logistics

No in window transport incident met the bar on its own. JR Central's possible exposure of about 15,000 email addresses through IDC Frontier is in the cross sectoral follow up, single outlet. The edge and refrigeration items apply to cold chain logistics.

Professional services

An Australian accounting firm responds to an incident after a LockBit listing. [Confirmed]

The firm: "responding to a cyber incident that affected part of its IT environment in recent days"; investigation ongoing; the OAIC, the ACSC and the ATO notified.
LockBit lists it with a countdown to 25 October; no data described. [Claimed] for the listing.
Name held pending Adam's ruling.

Attribution: the firm's statement to Cyber Daily, 16 October.

The ConnectWise item in the cross sectoral section is this sector's most relevant: most firms are served by a managed provider. The North Korean IT worker item applies to any firm hiring remote contractors.

Circulating but not carried

ALDI and Woolworths on their own refrigeration. Attributed to Australian trade press in a search summary; no article read.
Claroty's ANZ survey figures on OT attacks and losses. Vendor survey, no methodology seen.
"The Essential Eight is being retired" with fixed dates. The dates trace to an ACSC official's hedged June remarks, not to a published schedule.
Drupal's critical fixes and the D-Link and Ubiquiti proxy story. Seen in listings, not read.
Losses from the French attack in the millions of euros. No figure published.