Cyberattack targets supermarket refrigeration systems across France.

Summary

By the N2K CyberWire staff

Cyberattack targets supermarket refrigeration systems across France.

Hackers compromised refrigeration controllers at hundreds of French supermarkets Sunday night and remotely raised temperatures to more than one hundred degrees Fahrenheit, spoiling food and in some cases causing fires, Reuters reports. The attackers targeted Danfoss refrigeration controllers that were running outdated firmware, gaining control of their automatic defrosting systems. Danfoss told AFP that the attack affected end-of-life AK-SM800 and AK-SC355 systems that no longer receive security updates, and that the company has long advised customers to upgrade from those systems.

BleepingComputer says the incident affected up to 350 stores belonging to Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U. Intermarché CEO Thierry Cotillard said the attack caused losses of “tens of millions of euros nationwide in a single day.”

Prime Minister Sebastien Lecornu has asked France's National Cybersecurity Agency (ANSSI) to investigate the incident. No group has claimed responsibility for the attack, and the motive remains unknown.

Cybersecurity certifications you need. Study guides you can trust.

Earning your Security+, CISSP, CCSP, or SecAI+ opens doors. With Sybex, you get comprehensive objective coverage, expert insight, and the practice tools you need to walk into exam day confident. Find your guide on Amazon and advance your career today.

Ukrainian drones strike Russian data centers.

Ukrainian drone strikes have hit three of Yandex’s six data centers in Russia, disrupting online services across the country, the Record reports. The attacks began October 7th, hitting facilities in Ryazan, Kaluga, and Vladimir. Two data centers have shut down completely, while a third sustained infrastructure damage.

The attacks disrupted Yandex Cloud, causing outages for payment systems, taxi bookings, food deliveries, and many other third-party services across Russia.

Trinity Cyber stops threats before they become incidents

Trinity Cyber is a network security platform built to stop threats before they become incidents. The Trinity Cyber Platform analyzes network sessions in real time, removes malicious content inline, and gives organizations unified control across users, applications, devices, networks, and AI. By combining protection and policy in one platform, Trinity Cyber helps security teams reduce risk, simplify operations, and stop attacks before they become incidents. Learn how at trinitycyber.com

FBI arrests a Canadian ransomware negotiator for alleged ShinyHunters connections.

A well-known Canadian ransomware negotiator was arrested last week on suspicion of involvement with the ShinyHunters extortion group, Reuters reports. The suspect, Edward Dubrovsky, is a cybersecurity executive at CyberSteward, a company that specializes in “threat actor engagement, cyber-extortions, complex negotiations, and settlement facilitation.” Dubrovsky was reportedly arrested as part of the FBI’s crackdown on ShinyHunters following the group’s breach of the Bureau’s personnel database.

The CBC says Dubrovsky is popular and respected within the industry, and the arrest has shocked the Canadian cybersecurity community.

Where cyber leaders come together to turn challenges into action.

The Aspen Cyber Summit brings together leading voices from government, industry, and civil society to address the cybersecurity challenges shaping our future. Join senior leaders and experts in Washington, DC, for consequential conversations focused on moving beyond identifying risks to advancing actionable, cross-sector solutions.

Attacks, Threats, and Vulnerabilities

Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings (Infosecurity Magazine) Leaked documents suggest a multi-pronged operation, with social engineering and more technical attackers working together to manipulate a single target

Anthropic takes risky AI tests offline after models breach govt sites (BleepingComputer) Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels.

Cyberattack Prompts Grocery Giant Ahold Delhaize to Disconnect Systems (SecurityWeek) The company says it took some of its systems offline to contain a security issue within its network.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

AI Security Summit 2026: Runtime Trust (Virtual, Oct 21 - 22, 2026) AI agents no longer just request access. They take action. They plan, negotiate, and execute across your cloud and enterprise systems, often without a human in the loop. Traditional security answers one question: should this user have access? It has no answer for the one that matters now: should this agent be allowed to take this action, right now, in this context? That's the question AARM (Autonomous Action Runtime Management) was built to answer. Originally developed by Vanta and donated to the Cloud Security Alliance as an open, vendor-neutral specification, AARM defines how to intercept an agent's actions before they execute, evaluate them against context and policy, and stop the ones that shouldn't happen. Nearly 100 companies are already building on it, and CSA is now the permanent home stewarding where it goes next. Join CSA, Vanta, and Insecure Agents for the AI Security Summit 2026: Runtime Trust, a free, two-day virtual event on October 21–22, 2026, going deep on AARM alongside STAR for AI Level 2 and the fastest-moving, time-sensitive frontier of AI security shaping the year ahead.

Cyber Innovation Conference (Washington, DC, USA, Oct 26 - 27, 2026) The Cyber Innovation Conference brings together 600+ cybersecurity leaders, founders, investors, and operators shaping what comes next in cyber for two days of high-signal programming, executive roundtables, an Innovation Expo, and curated networking.

[un]prompted II (Virtual and San Francisco, California, USA, Oct 27 - 29, 2026) [un]prompted is back for the second time, this October, in SF. Whether you’re a CISO Excel jockey or a researcher sniffing for the scent of bits, we see you as part of our wider AI security practitioner community. [un]prompted is an intimate, raw, and fun gathering for the professionals actually doing the work, from offense to threat hunting to program building to national policy. No fluff. No filler. Just sharp talks, real demos, and conversations that matter.

CyberSat 2026 Unclassified Program (Reston, Virginia, USA, Nov 2 - 3, 2026) Space systems now form the backbone of critical infrastructure – from energy grids to autonomous transportation. CyberSat is the only forum where the operators, officials, and engineers actively defending those systems meet for four days a year.

CyberSat 2026 Classified Program (Chantilly, Virginia, USA, Nov 4 - 5, 2026) Space systems now form the backbone of critical infrastructure – from energy grids to autonomous transportation. CyberSat is the only forum where the operators, officials, and engineers actively defending those systems meet for four days a year.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry's largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust N2K CyberWire to get the message out. Learn more.

Daily Briefing for 10.13.26

Top stories.

Cyberattack targets supermarket refrigeration systems across France.

Ukrainian drones strike Russian data centers.

FBI arrests a Canadian ransomware negotiator for alleged ShinyHunters connections.

Attacks, Threats, and Vulnerabilities

Events