Cyber Dispatch™️

Microsoft’s Xandr fined €8.6M over Grindr user data exposure.

Yandex confirms service outage as users lose access to cloud files.

Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted.

Chinese Cars in Norway Stored Military Exercise Footage and Access Codes.

The username is admin, and the password automatically changes every day to the current date.

Hundreds of supermarkets in France were hit by cyberattacks on Sunday night that disabled refrigeration systems and forced stores to throw out damaged food, following warnings that hackers are seeking to cause physical damage. Around 150 Intermarché stores were hit, a spokesman for owner Groupement Mousquetaires told Bloomberg. Hackers accessed cooling systems and set them to defrost, with refrigerators and freezers heating to 50C (122F) for around six hours. Meat, frozen items and vegetables had to be tossed out.

French food store attack was not new, used a previously exploited vulnerability.

Google awarded $90,000 for a flaw that let anyone run code on https://developers.google.com without an account. DevSite signed its session cookies with a secret it also handed out inside the cookie, so researcher Simon Köck could forge his own.

Authentication can pass from a compromised real mailbox, so passing SPF/DKIM/DMARC does not prove a legitimate human sent it. Raw headers and tenant telemetry are needed for definitive attribution.

Int Cyber Digest is right about a separate, serious problem: gov.il reportedly publishes SPF and DMARC, but DMARC is p=none, monitor-only, not quarantine or reject. So failed or unaligned mail can still be delivered, making the government domain broadly spoofable. But “no SPF or DMARC” is too strong: the parent gov.il has records, and DMARC can be inherited by subdomains. Correct framing: this email was likely sent from a compromised real account; separately, weak enforcement makes spoofing gov.il-branded mail too easy.

Most likely explanation for this email: a real, compromised mossad.gov.il / Israeli government mailbox sent it. Reporting describes the messages as “seemingly authentic” and says the researcher suspected hacked Mossad accounts. That is different from sender spoofing. If the Received headers, sending infrastructure, and DKIM signature are genuine, weak DMARC does not explain the message’s origin, an abused legitimate mailbox does.

vx-underground says it received bizarre emails from mossad.gov.il, including an offer to sell “47 of Netanyahu’s toenail clippings” for 8,000 shekels. vx says the headers were not spoofed and believes the mail came from compromised Israeli government accounts. A peer then claimed the domain was spoofable because of missing/weak SPF and DMARC.

51 Claude Code agents. 429 WordPress admin panels accessed. 32 web shells deployed in just 61 seconds. SOCRadar links the campaign to CyberXero, which also stole over 628,000 records from four Ukrainian organizations.

No login required. CVSS 10.0. Active exploitation. Attackers are exploiting a Bricksforge WordPress flaw (CVE-2026-85097) that enables arbitrary PHP code execution through crafted file-upload metadata. Patchstack observed attack activity from 63 IPs. Update to version 4.0.1.

SonicWall released patches. Two days later, exploitation attempts began. A critical pre-auth SSRF flaw in SMA 1000 (CVE-2026-102255, CVSS 10.0) has drawn 135 exploitation attempts from just two U.S. IP addresses.

OpenAI and Anthropic prepare for potential AI “loss-of-control” scenarios — The companies are rehearsing responses to AI-related cyberattacks that could disrupt finance, internet access, power, or water infrastructure.

Iran warns regional conflict could destroy over $2 trillion in tech infrastructure — Iran’s Supreme National Security Council secretary said renewed war could devastate regional cables, data centers, and AI facilities. 

Apple supplier Luxshare faces US patent investigation over data-center power technology — The US ITC is probing Luxshare after Vicor alleged infringement; Luxshare says the early-stage case should not materially affect near-term operations.

Ransomware hits Australia’s ForceNet defense communications platform — The attack targeted a contractor-run platform used by defense personnel, with no confirmed breach of core defense systems so far, though some personal data may have been exposed.

China Announces New National AI and Data-Economy Program — Beijing unveiled 19 measures to advance AI, computing capacity, integrated data infrastructure, and a national data market.