IT Security News Roundup: 2026-10-13 Morning

IT Security News: Morning roundup, 2026-10-13

Summary

This morning's security news highlights a sharp increase in critical remote code execution flaws across enterprise software, with urgent patches issued for high-severity vulnerabilities in GitLab, Citrix NetScaler, and MarkLogic database servers. At the same time, physical infrastructure threats are taking center stage, demonstrated by cyberattacks that remotely manipulated industrial refrigeration controllers to destroy food stock across European supermarkets. Emerging risks surrounding autonomous AI agents, browser-hijacking macOS malware, and firmware-level supply chain compromises further demonstrate how modern threats extend beyond simple software bugs. For security teams, these developments underscore the vital need to maintain strict patch management routines and secure physical control systems against remote exploitation.

1. Responding to scam text messages confirms to fraudsters that a phone number is active, increasing its resale value on the dark web. Disregarding these messages prevents further targeted phishing attempts.
2. Threat actors impersonated a Web3 venture capital accelerator, offering free Claude and Gemini credits to infect crypto startups with malware. This campaign leverages AI lures to compromise developers and smart contracts.
3. Citrix patched a critical remote code execution vulnerability (CVE-2026-107406) in NetScaler rated at a 9.5 severity score. Enterprise security teams running vulnerable SAML configurations must update immediately.
4. GitLab released emergency fixes for a maximum-severity integer overflow flaw (CVE-2026-97229) in its CI/CD Regular Expression Compiler. The vulnerability allows unauthenticated attackers to execute remote code on affected servers.
5. Hackers breached Danfoss refrigeration controllers across hundreds of French supermarkets, raising freezer temperatures to 50°C and spoiling massive amounts of stock. The incident highlights critical risks in remote infrastructure management.
6. A report by Socura reveals that 20% of CISOs take time off or call in sick to avoid the stress of Patch Tuesday. This highlights growing operational burnout among cybersecurity leaders managing constant vulnerability cycles.
7. Progress Software disclosed 31 vulnerabilities in MarkLogic Server, including two critical flaws that allow delegated managers to gain full administrator privileges. System administrators should apply the September patches promptly.
8. A vulnerability in npm's Trusted Publishing allowed attackers to take over 1,500 packages by claiming abandoned GitHub repository names. GitHub has patched the flaw, securing packages downloaded millions of times.
9. GitLab patched a CVSS 10.0 vulnerability affecting Community and Enterprise editions that lets unauthenticated users execute arbitrary code via malicious regular expressions. Organizations using self-managed instances should apply the update immediately.
10. Digital marketplace G2A.COM reported a 35% surge in consumer security software orders, outpacing VPN growth. The trend reflects increasing public demand for personal cybersecurity defenses.
11. Cyberattacks targeting automated refrigeration systems caused freezers across European supermarkets to defrost and spoil inventory. The breach demonstrates how industrial control vulnerabilities directly cause physical financial losses.
12. A four-hour distributed denial-of-service attack knocked Canonical's main Ubuntu websites and security information APIs offline. Crucially, core package repositories and installation images remained unaffected.
13. The hacker responsible for leaking Grand Theft Auto 6 details is threatening to release a full, playable build before its official launch. Such breaches expose severe intellectual property risks for gaming studios.
14. A new macOS malware named GhostProfile clones browser profiles to remotely navigate websites using live session cookies without mirroring the victim's screen. This stealth technique allows attackers to bypass multi-factor authentication.
15. Replying to suspicious text messages validates active phone numbers for cybercriminals, making victims targets for escalating fraud. Security experts advise ignoring unrecognized messages entirely.
16. Attackers exploited unpatched Danfoss refrigeration hardware in French retail stores, raising freezer temperatures to 50°C overnight and destroying millions in perishable stock. The attack demonstrates real-world physical impacts from unpatched IoT devices.
17. Recent news highlights physical operational impacts from supermarket freezer hacks, system shutdowns at retail giant Ahold Delhaize, and hardware wallet spy chips. These events emphasize the broadening scope of modern cyber threats.
18. VMware is releasing patches at such a high frequency that admins require new tools to handle the updates. The deluge underscores the operational strain enterprise patch management puts on IT teams.
19. A Thales report warns that agentic AI deployment in manufacturing outpaces current security controls, creating data visibility and credential theft risks. Autonomous decision-making models introduce unprecedented operational exposure.
20. Low-cost MediaTek-based Android smartphones are shipping with preinstalled "Midnight Mimosa" firmware malware that converts devices into residential proxies and conducts ad fraud. Consumers face supply-chain risks before unboxing devices.
21. Russian tech company Yandex halted operations at its Sasovo data center after a drone strike caused a fire. The event illustrates physical conflict risks affecting digital infrastructure.
22. Veria Labs used an AI agent to discover a critical vulnerability in Ripple's XRP Ledger ecosystem. The finding highlights how AI tools can proactively identify complex flaws in blockchain protocols.
23. Emergency security updates addressed a 10.0-rated vulnerability in GitLab's regex compiler that enables unauthenticated remote code execution. Self-hosted instances need immediate updates to mitigate server compromise.
24. A Help Net Security commentary argues that decades of cybersecurity principles must be applied to emerging AI governance today to prevent severe privacy and safety issues later. Proactive safeguards protect future tech adoption.
25. Canonical suffered a second major DDoS attack this year, disrupting main websites and security APIs for over four hours. Essential Linux package repositories remained safe throughout the outage.

Summaries written with AI (Google Gemini) from the linked source articles.

Sources in this roundup

Most-mentioned keywords

Sources

1. Scammers know your name, and they’re counting on you to reply
2. Fake Web3 Accelerator Offers Claude and Gemini Credits to Spread Malware
3. Citrix Patches Critical NetScaler RCE Flaw Rated 9.5: Who's Affected?
4. GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)
5. Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
6. Fifth of CISOs Take Time Off to Avoid Patch Tuesday
7. Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
8. npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover
9. GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
10. G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth
11. Refrigeration Controller Hack Spoils Food Across European Supermarkets
12. DDoS Attack Takes Ubuntu Websites and Security Services Offline for Over 4 Hours
13. GTA 6 leaker threatens to release full playable version of game ahead of official launch
14. New macOS Malware Clones Chrome Profiles and Browses With Victims’ Live Logins
15. Your “Who’s this?” reply is exactly what text scammers want
16. Hackers cranked French supermarkets’ freezers up to 50 degrees, causing hundreds of stores to lose their stock
17. Supermarket freezer hack, Ahold Delhaize offline, spy chip in crypto wallets
18. VMware is pushing so many patches, it thinks users need new tools to manage the flood
19. Agentic AI in Manufacturing: 5 Data Security Risks from the 2026 Thales Data Threat Report
20. Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
21. Yandex Shuts Down Key Data Centre After Drone Strike
22. AI Uncovers Biggest Hack $94 Billion XRP Ledger at Risk
23. Critical GitLab Vulnerability Allows Unauthenticated Attackers to Execute Remote Code
24. Be a good AI ancestor: Cybersecurity already gave us the playbook
25. Massive DDoS Attack Disrupts Ubuntu’s Canonical Websites and Security APIs