On the night of October 11, someone got into the refrigeration controllers at French supermarkets and put them into forced defrost with the target set to 50°C. A store manager in Gradignan, quoted by [ITPro](https://www.itpro.com/security/cyber-attacks/french-fridges-hacked-in-country-wide-supermarket-attack), said it started around 11pm and staff found out at 4am, after the cold room hit 50°C and set off the sprinklers.

The store counts don't match yet. [BleepingComputer](https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/) cites French outlets putting it at 250 to 350 stores. AFP's per-chain figures, [via CBS](https://www.cbsnews.com/news/cyberattack-supermarkets-refrigerators-france-fires-food-losses/), have at least 300 Intermarché and Netto stores on their own, plus over 100 Coopérative U. Intermarché's CEO expects the losses to pass tens of millions of euros for that one day.

Danfoss told AFP most of the hit equipment was legacy AK-SM800 and AK-SC355 regulators that "no longer receive software or security updates". How the attackers got in isn't public. But the AK-SM 800A already had a [CISA advisory](https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-03) from May 2025 for CVE-2025-41450, a login bypass built on a password generated from the device's date. [Claroty's Team82](https://claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers) counted 2,765 of those panels exposed on Censys in August. On Monday, Baptiste Robert found 1,590 exposed Danfoss systems in France alone.

So it's an admin panel on the open internet and firmware nobody patches anymore. Those are the same two conditions I'd point to behind most WordPress takeovers, where it's a default login URL and a plugin its author walked away from.

Intermarché blamed an attack on a service provider that manages its store refrigeration, and Leclerc said one of its refrigeration suppliers was hit. Once Danfoss stopped shipping updates for those units, whose job was it to take them off the internet?

I was super ecstatic landing this job out of schoo1, but reality just hit me and I realized I can never make the big bucks here. My passion for pentesting also has been fading away after countless engagements and doing the same things over and over. I need new challenges and more pay.

Has anyone successfully gotten out of pentesting, If so, what do you do now ? please drop your knowledge.

background - 1.5 yoe, masters in IT, sec+, CySA+, PJPT, CRTO, pentest+, AWS CCP.

Around 700 supermarkets in France were reportedly affected by a cyberattack on refrigeration systems. In some stores, temperatures reportedly reached 50°C, leaving food spoiled and equipment damaged.

Not payment systems. Not customer databases. Refrigeration systems.

That’s what makes this incident so interesting. A system most people probably never think about ended up causing real-world disruption when it was compromised.

What do you think this incident tells us about cybersecurity today?

Are we paying enough attention to connected devices and the systems running in the background, or do these only get taken seriously after something goes wrong?

Would be interested to hear how people working in cybersecurity, IT and infrastructure see this.

Okay, so about five months ago, I started my journey in IT. However, I started without a clear goal or a proper roadmap. I was just learning random things without any real direction, to be honest.

So far, I’ve learned Python, SQL, and a little bit of C. Looking back, I realise that one of my biggest mistakes was not having a structured learning plan. Having a clear roadmap makes a huge difference.

Recently, I’ve developed an interest in cybersecurity, and I’m willing to give it a serious try. However, I need proper guidance on how to get started and work towards a career in this field.

I want to know which certifications I should pursue, what skills I need to develop, how to gain practical experience, and how to prepare for interviews.

From my research, I’ve found that many people start with IT support roles and then move into SOC analyst positions before progressing further in cybersecurity.

Basically, I need guidance on how to get my first IT job, what skills and certifications I should focus on, and what steps I should take to eventually break into cybersecurity. I’d really appreciate any advice or guidance from people experienced in this field.

Ideally my goal is to get both certifications. But what I am not sure on is which to go for first. Reading over the PenTest exam objectives and some other information it appears you need to have some networking and scripting knowledge in order to be prepared for it but other things I have seen it doesn’t appear that way.

Should I go for CCNA before going for PenTest+ or does it not matter?

Been doing some research on MDE for Linux

I've been in cybersecurity for a while now, changed role from an analyst to CrowdStrike SME. But I've been at this company for 12 years and I want to try something new. Should I go back to being an Analyst? Cloud Engineering which I did for 2 years? Stay with CrowdStrike?

As we all know, AI is now making things even more hectic with vulnerability management and prioritisation.

So I've built a tool that regularly ingests all major feeds (CVE, CISA KEV, EPSS, OSV, GitHub Advisory Database and EoL). Then looks at exploitation risk, rate of change of exploitation risk, EoL and age of CVE to help rank and prioritise which ones to action first.

Either enter a stack (loosely or described in detail)
Or, enter a list of CVEs.

Currently its built as a Cloudflare worker with a D1 database. I have plans to create a docker version of this. There are more tweaks coming, but if you have any questions or feedback let me know!

https://vulnder.com/

https://github.com/fullymiddleaged/vulnder

Basically the title. I work in product security and penetration testing, interviewing for meta. Since I rarely do coding I was wondering if they have heavy coding round and how people tackle this.

My employer offered to pay for SEC542 and I’m leaning toward it since I’ve always liked web app security. For anyone who’s taken it: how hard was it, and did you actually get something out of it afterward? Was it worth the time?

Also, are there any SANS courses on AI that are aimed at blue teamers? I’d like to know what my options are before I commit.

Solid maturity org. with good EDR and AV dashboards, but also has some grey areas where external entities could access networks (no strict NAC) - how to effectively monitor these shadow networks?

October 12–13 | Cybersecurity | CRITICAL

GitLab released security updates addressing CVE-2026-97229, a vulnerability with the maximum CVSS severity score of 10.0.

The vulnerability affects GitLab's CI/CD regular-expression compiler.

Under certain conditions, an unauthenticated attacker could submit specially crafted configuration data that results in arbitrary code execution on a vulnerable GitLab server.

The issue affects self-managed Community Edition and Enterprise Edition installations.

GitLab released fixes for the affected version branches and strongly recommends immediate upgrades.

GitLab's hosted service has already been patched.

Researchers have not established widespread exploitation of this vulnerability in the wild.

Status: CONFIRMED — Vendor security advisory and published technical reporting.

I’m a recent grad working full-time in a Service Desk Support role earning $45k a year. Wanted to come on here and seek guidance and a realistic timeline on how long it’ll take me to break out of Helpdesk and start earning $75k - $95k in cyber. I started working helpdesk August so 2 months now going onto 3. I graduated May 2026, have a professional internship under my belt alongside an additional part-time job with CodePath as a TechFellow. I also just got my security+ last month. I had a recruiter reach out to me 2 weeks ago about a Security Operations Engineer role and had an interview last week with the companies Senior Director of Cybersecurity it was extremely advanced/far from entry-level for me. It was scenario based and there were multiple answers but unfortunately I didn’t get the role. Needless to say, my experience is helping me land a small amount of interviews, but I’m struggling to get past the interviews. I also just applied and got rejected from the WiCyS Security Training scholarship program because I am “too experienced” in cybersecurity but am clearly entry level as I don’t even have up to 2 years of professional experience in the IT/Cyber Industry.

Anyone know what I should be doing right now? I want to become a SOC Analyst and work for the federal government ideally. I don’t think I like the uncertainty and lack of stability that comes with Corporate. I know this industry is an industry that requires patience and time when it comes to salary progression. I just want tips from experienced professionals and guidance because right now I feel lost. I don’t want to just gain another certification, I want to gain better experience.

I've been in cybersecurity for around 4 years, currently working in an EDR company's IR team, mostly investigating Windows environments.

Lately, I've been feeling a bit overwhelmed about what to learn next. On one hand, I feel like I should start learning cloud IR. On the other, I see companies offering IR, CTI, Threat Hunting, and other services, and I wonder how people actually gain experience in all these areas.

I'm also interested in CTI and thought about starting to produce threat intelligence from our IR investigations, then moving into cloud IR.

Am I trying to learn too much at once? How did you guys decide what to focus on?

Would appreciate any advice.

¡Hola a todos!Estoy terminando Ingeniería en Informática y estoy desarrollando un proyecto académico llamado SecureCode.Es una herramienta que busca automatizar la evaluación de controles de seguridad en repositorios de GitHub, identificando cumplimientos e incumplimientos y generando evidencia para facilitar las revisiones.Para complementar el proyecto, necesito conocer la opinión de estudiantes, desarrolladores y profesionales del área TI sobre la utilidad de este tipo de soluciones.No necesitan ser expertos en ciberseguridad ni haber utilizado SecureCode. La encuesta incluye una explicación del proyecto.⏱️ Duración: 5–7 minutos.

🔒 Anónima y voluntaria.

🎓 Finalidad exclusivamente académica.

💻 Dirigida a estudiantes y profesionales del área informática.Enlace a la encuesta:https://docs.google.com/forms/d/1FFqPfEaixH1SHbwwr31FtYk9xK8HM0-zo4chOwD1iTc/viewformMe ayudarían muchísimo respondiendo. También agradecería cualquier comentario o sugerencia sobre el proyecto.¡Muchas gracias por su tiempo!

First the France refrigeration vendor… now Dutch retailer Ahold Delhaize (parent company to Stop&Shop and other grocery stores) has been hit with a cyber incident. Do we think these are linked in some way? Don’t see that any groups have come forward and claimed responsibility… just curious.

Their main worry is agents being talked into "authorized-looking" actions. The framing that stood out: the main risk isn't the model making a mistake; it's an attacker instructing the agent to do something that looks authorized. Their approach is defense in depth: monitoring, auditing, guardrails, and a kill switch to shut down a misbehaving model.

Also in the piece: TII's CEO says an agent you can't monitor in real time "is malware that got access to your machine," and that non-human agents need clear identities. Kaspersky describes "living off local agents," where attackers use an agent already on the machine to find valuable data.

Source: www.khaleejtimes.com/business/tech/ai-agents-tricked-accessing-sensitive-government-data-cybersecurity

For those running agents in production: do your agents have their own identities and least-privilege scopes, or do they inherit a user's or service account's permissions? And who owns the kill switch?