Daily Digest

Data Breaches & Critical Vulnerabilities Dominate Cybersecurity News

October 13, 2026
7 articles (4 new, 3 updated)
21 min read

Summary

National Security & Critical Infrastructure Threats:

  • Denmark's National Population Register Breached: A third-party supplier compromise has exposed 8.8 million records from Denmark's Central Register of Persons (CPR), including sensitive personal data, increasing the risk of identity theft and fraud.
  • US Seizes Hacking Tools Linked to China: Allied nations have issued advisories on China-based Integrity Technology Group, detailing new tactics used by Flax Typhoon and Red Juliett, targeting critical infrastructure across North America, Southeast Asia, and Africa.
  • Warlock Ransomware Exploits SharePoint Flaws: The Warlock ransomware group is now confirmed to have targeted at least four U.S. critical infrastructure organizations, including water utilities and telecommunications, using old SharePoint vulnerabilities.

New Vulnerabilities & Supply Chain Risks:

  • Cyberattack Disrupts French Refrigeration Systems: A cyberattack on refrigeration systems, linked to Danish provider Danfoss, has caused significant food spoilage across hundreds of supermarkets in France, Belgium, and the Netherlands.
  • Citrix Discloses Critical NetScaler RCE Flaw: Citrix has released a security advisory for CVE-2026-107406, a critical memory overflow vulnerability in NetScaler ADC and Gateway products that could lead to remote code execution or denial of service.
  • Karaoke Giant Daiichi Kosho Supplier Breach: A breach at a third-party supplier for Japanese karaoke giant Daiichi Kosho may have exposed the personal information of approximately 8.7 million customers.
  • Osaka University Hit by Ransomware: Osaka Metropolitan University is experiencing widespread disruption due to a suspected ransomware attack impacting around 500 servers and potentially compromising the personal data of over 130,000 individuals.

Filter by Category

New Articles (4)

Cyberattack on Refrigeration Systems Spoils Food at French Stores

HIGH

Cyberattack Spoils Food at French Supermarkets

A large-scale cyberattack targeting the refrigeration systems of hundreds of supermarkets in France, Belgium, and the Netherlands has resulted in millions of euros in food spoilage. Attackers remotely triggered forced defrost cycles, raising temperatures to 50°C. The incident is linked to compromised systems from Danish provider Danfoss, highlighting vulnerabilities in industrial control systems (ICS) within the food supply chain. French authorities have launched an investigation into the attack.

October 13, 2026
5 min read
ICSOTFood SecuritySupply ChainDanfoss +1 more
Cyberattack on Refrigeration Systems Spoils Food at French Stores

Citrix Discloses Critical RCE Flaw in NetScaler ADC and Gateway

CRITICAL

Citrix Warns of Critical RCE Flaw in NetScaler (CVE-2026-107406)

Citrix has released a security advisory for a new critical vulnerability, CVE-2026-107406, affecting its NetScaler ADC and Gateway products. The flaw is a memory overflow issue with a CVSS score of 9.5 that could lead to remote code execution or denial of service. It impacts appliances configured as a SAML Service Provider or Identity Provider. CISA has urged customers to apply patches immediately, although there is no evidence of active exploitation yet.

October 13, 2026
4 min read
CitrixNetScalerRCEDoSSAML +1 more
Citrix Discloses Critical RCE Flaw in NetScaler ADC and Gateway

Karaoke Giant Daiichi Kosho Supplier Breach Exposes 8.7M Customers

HIGH

Daiichi Kosho Supplier Breach Exposes 8.7M

Japanese karaoke giant Daiichi Kosho has announced a major data breach originating from a third-party supplier, Nippon Columbia Group (NCG). The incident, caused by malware on a supplier employee's PC, may have exposed the personal information of approximately 8.7 million customers. The potentially leaked data includes names, birth dates, and contact information, but not financial details. This event highlights the significant risks posed by supply chain vulnerabilities.

October 13, 2026
5 min read
Data BreachSupply Chain AttackMalwarePIIJapan
Karaoke Giant Daiichi Kosho Supplier Breach Exposes 8.7M Customers

Osaka University Hit by Ransomware; 500 Servers Affected

HIGH

Osaka University Crippled by Ransomware Attack

Osaka Metropolitan University in Japan has been hit by a major suspected ransomware attack, causing widespread operational disruption. The attack has impacted approximately 500 servers, affecting classes, email, and administrative systems. The university has also warned that the personal data of at least 130,000 students, faculty, and staff may have been compromised in the incident. This event highlights the ongoing trend of ransomware groups targeting the education sector.

October 13, 2026
5 min read
RansomwareCyberattackEducationData BreachJapan
Osaka University Hit by Ransomware; 500 Servers Affected

Updated Articles (3)

US Seizes Hacking Tools Used by China-Linked Group Flax Typhoon

HIGH

DOJ & FBI Seize Hacking Tools Linked to China's Flax Typhoon

Update:

A joint advisory from CISA, FBI, NSA, and allied nations has further highlighted the global threat posed by China-based Integrity Technology Group. The warning expands the identified target regions to include North America, Southeast Asia, and Africa, encompassing critical infrastructure, manufacturing, healthcare, and energy sectors. Additionally, the advisory details new tactics, techniques, and procedures (TTPs) employed by threat actors like Flax Typhoon, including Living-off-the-Land (LotL) techniques and the use of compromised VPN infrastructure for persistence. The advisory also mentions 'Red Juliett' as another threat actor benefiting from Integrity Tech's tools, underscoring the widespread nature of these state-sponsored cyber operations.

October 11, 2026
Updated: October 13, 2026
5 min read
Flax TyphoonAPTChinaDOJFBI +3 more
US Seizes Hacking Tools Used by China-Linked Group Flax Typhoon

Warlock Ransomware Hits Critical Sectors via Old SharePoint Flaws

HIGH

Warlock Ransomware Targets Critical Infrastructure via SharePoint

Update:

The Warlock ransomware group's campaign, exploiting 'ToolShell' SharePoint vulnerabilities, has now been confirmed to include at least four U.S. critical infrastructure organizations among its victims. This expands the previously reported geographical scope from Europe, Africa, and Latin America to include the United States, specifically targeting sectors such as water utilities and telecommunications providers. The focus on U.S. critical infrastructure highlights an increased threat to national security and essential services, even if the overall number of confirmed victims remains consistent.

October 12, 2026
Updated: October 13, 2026
5 min read
BYOVDpatch managementweb shellSYSVOLcritical infrastructure
Warlock Ransomware Hits Critical Sectors via Old SharePoint Flaws

Denmark's National Population Register Breached, 8.8M Records Exposed

HIGH

Denmark CPR Data Breach Exposes 8.8 Million Records via Third Party

Update:

A new report from Check Point Research on October 12, 2026, reconfirms the catastrophic data breach of Denmark's Central Register of Persons (CPR). The incident, which exposed 8.8 million records including names, addresses, and national ID numbers, was caused by a compromise at a private third-party supplier. The report highlights that the number of exposed records exceeds Denmark's total population, likely due to the inclusion of historical data. The breach continues to pose a severe risk of identity theft and fraud, underscoring the critical vulnerability of trusted third-party relationships in national infrastructure.

October 6, 2026
Updated: October 13, 2026
5 min read
data breachthird-party riskcredential abusePIIidentity theft
Denmark's National Population Register Breached, 8.8M Records Exposed

📢 Share This Publication

Help others stay informed about cybersecurity threats

📅 Daily Edition

Curated and deduplicated every day from dozens of trusted sources — giving you one clean, consolidated view of what matters in cybersecurity.

🔢 Deduplication Applied

Related stories are merged into a single evolving article rather than repeated as separate entries — cutting through noise so you only read what's new.

🔗 Full Articles Linked

Every entry links to its full enriched article — complete with MITRE ATT&CK mappings, extracted IOCs, and actionable detection and mitigation guidance.