Global Cyber Threats: Critical Infrastructure, Data Breaches, and New Vulnerabilities

Global Industrial Control System Threats:

• French Supermarket Refrigeration Controllers Exposed Online: Five U.S. federal agencies issued a joint advisory on November 5, 2026, warning of a global cyber threat targeting industrial refrigeration and cold chain systems. Attacks in France, Belgium, and Sweden compromised internet-exposed Danfoss AK-SM 800A and Copeland XWEB Pro controllers, leading to food spoilage and equipment damage. U.S. critical infrastructure operators are urged to secure OT environments by removing devices from the public internet, changing default credentials, and applying patches.

Emerging Threats and Advisories:

• UK NCSC: AI-Powered Ransomware on Critical Infrastructure Likely by 2028: The NCSC's 2026 annual review predicts a 75-95% probability of AI-powered ransomware targeting critical national infrastructure by 2028. AI is seen as a 'force multiplier' for social engineering, vulnerability discovery, and malware development, with nation-states expected to leverage it. The report also highlighted 337 incidents handled by the NCSC in the past year and criticized 'tech on the cheap,' urging organizations to address security debt.

New Vulnerabilities and Incidents:

• Cisco Patches High-Severity RCE Flaw in UCS Central Software: Cisco has released a security update for CVE-2026-76506, a high-severity vulnerability in its UCS Central Software. The flaw, with a CVSS score of 7.6, could allow an authenticated, remote attacker to achieve remote code execution, write arbitrary files, and disclose information. No workarounds are available, and administrators are urged to apply the patch immediately.
• NTT Docomo Confirms Data Breach Potentially Affecting 300,000 Customers: Japanese telecommunications giant NTT Docomo confirmed a data breach resulting from unauthorized external access, detected on November 4, 2026. The incident may have compromised the personal information of up to 300,000 customers, including names, addresses, dates of birth, phone numbers, and some bank account details. The company has suspended its 'My docomo' customer portal during the investigation.
• Qilin Ransomware Gang Leaks Burnaby School District Data on Dark Web: The Qilin ransomware group has published sensitive data stolen from the Burnaby School District in British Columbia, Canada, following a September 2026 ransomware attack. The leaked data includes personal information of students, parents, and staff, such as medical records, learning assessments, and disciplinary files. The district is offering credit monitoring to affected individuals.
• French Bank Crédit Mutuel Arkéa Hit by Cyberattack Enabling $133M+ Crypto Theft: French banking group Crédit Mutuel Arkéa confirmed a cyberattack that facilitated fraudulent transactions, leading to a significant cryptocurrency theft. On-chain investigators traced the incident, alleging over $133 million in crypto was stolen from the bank's accounts. The bank stated attackers gained access via a service provider's platform, with approximately €100 million reported missing.