Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast
Original title: Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast
AI agents, botnets and security updates rounded up for the week.
Last week's cybersecurity news featured repeated refrigeration cyberattacks in European supermarkets that spoiled food. Google disrupted the XCPE botnet tied to Android TV firmware. CISA added two Ivanti Connect Secure vulnerabilities to its KEV catalog.
- Refrigeration units in French supermarkets turned into ovens.
- Google attributed XCPE botnet to Videostrong Technology.
- CISA added CVE-2026-111357 and CVE-2026-118527 to KEV.
- Zyxel GS1900 switches remain vulnerable after patching.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-107441 | Out-of-bounds write in Zyxel GS1900-24E CGI up to 2.90(AAHK.2)C0 | 8.8 | — | ||
| CVE-2026-111357 | Local root privilege escalation in Ivanti Connect Secure 22.8R2.4 | 7.0 | <1% | KEV | KEV |
| CVE-2026-118527 | Predictable identifiers in Ivanti Connect Secure enable file upload | 4.3 | <1% | KEV | KEV |
| CVE-2026-7273 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 8.8 | 3% | KEVPoC | KEV |
From the original article
13 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The first ten lines of a command policy for AI coding agents In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents.
helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.