Hackers Cranked French Blood Plasma Freezers to 110°C in Overnight Attack on Medical Cold Chain
Attackers broke into refrigeration systems tied to France's national blood service, allegedly pushing freezer setpoints from -30°C to 110°C overnight by compromising a third-party cooling vendor. Staff caught...
Google Takes Down a 1.3-Million-Device Botnet Built Into Streaming Boxes Straight From the Factory
Google and a coalition of security partners have dismantled XCPE, a sprawling botnet that Google says was deliberately built into Android TV set-top boxes by their own manufacturer,...
Three TLS Flaws in Widely Embedded GoAhead Web Server Undermine Certificate Trust on Millions of Devices
Researchers have disclosed three flaws in GoAhead, a lightweight web server embedded in routers, printers, industrial controllers, and networking gear from vendors including Palo Alto Networks, Siemens, and...
Nearly 5,000 Danfoss-Linked Systems Found Exposed Online After Supermarket Refrigeration Attacks
A fresh scan has identified 4,980 internet-facing hosts referencing Danfoss equipment, with France alone accounting for more than half, days after attackers remotely triggered defrost cycles at French...
Nine-Day Scanning Surge Targets Unpatched Hikvision Cameras Across Ukraine
GreyNoise logged a sharp nine-day spike in scanning and exploitation attempts against internet-exposed Hikvision cameras in Ukraine, almost all aimed at the four-year-old, maximum-severity CVE-2021-36260 command injection flaw....
Over 14,000 Dahua Cameras Compromised With Backdoors That Survive Factory Resets
Researchers at Hunt.io say a 35-day campaign compromised more than 14,000 internet-connected Dahua cameras, planting hidden administrator accounts and abusing cloud recovery codes that persist even through password...
FBI Dismantles Chinese State-Sponsored Botnet That Powered a Global Hacking Platform
The FBI and Department of Justice have seized the domains behind QScan and QTRouter, a pair of linked platforms that a Chinese state-sponsored group allegedly used to hijack...
Tenda Router Backdoor (CVE-2026-11405) Lets Attackers Skip Login and Seize Full Admin Control
A hardcoded authentication backdoor in Tenda FH1201, W15E, AC10, AC5, and AC6 routers (CVE-2026-11405) lets attackers log in as admin with any username. The undocumented flaw sits in...