Industrial Cyberattacks, Bank Heists, and Critical Vulnerabilities Dominate Cybersecurity News

Critical Vulnerabilities Under Active Exploitation:

• U.S. Agencies Issue Urgent Warning on Industrial Refrigeration Cyberattacks: Coordinated cyberattacks in Europe exploited Danfoss controllers, manipulating temperatures and causing significant spoilage. Research indicates a planned operation preceded by extensive reconnaissance.
• CISA Adds Actively Exploited SonicWall MFA Bypass Flaw to KEV Catalog: SonicWall has released emergency patches for an authentication bypass vulnerability (CVE-2026-19868) that affects specific SonicOS versions and bypasses SAML and MFA.
• Microsoft Patches Paint RCE Flaw via Microsoft Store Update: Microsoft has addressed an important-rated remote code execution vulnerability (CVE-2026-83844) in the Windows 11 Paint application, delivered via a Microsoft Store update.

Data Breaches and Financial Sector Threats:

• French Bank Crédit Mutuel Arkéa Hit by Cyberattack Enabling $133M+ Crypto Theft: Crédit Mutuel Arkéa confirmed a data breach resulting from a compromised third-party service provider, in addition to a cryptocurrency theft.
• York University Discloses Breach of Data from Online Forms: York University is investigating a cybersecurity incident that led to the theft of personal data submitted through online forms between 2007 and October 2026.
• AI Hacking Framework 'ARTEX' Linked to South Korean Bank Heists: An AI-powered hacking framework named ARTEX has been linked to recent cyberattacks against South Korean banks, demonstrating the automation of attack stages.
• Who Gives A Crap Data Exposed in Marketing Vendor Breach: The eco-friendly toilet paper company Who Gives A Crap reported a data breach originating from a compromised US-based marketing software provider, exposing customer personal information.

Industry Investment and Defense:

• VC Firms Raise $750M for Cybersecurity to Fight AI Threats: Venture capital firms are investing nearly $750 million into new cybersecurity funds, indicating strong investor confidence in startups focused on countering AI-powered cyberattacks.