Know what changed.
Trace why it matters.

VulnCheck disclosed 14 vulnerabilities in Copeland-manufactured Dixell refrigeration units; all affect the XWEB EVO supervision system. Lab testing with rebuilt vendor firmware indicated that each flaw could provide an attacker root or administrative access to the affected unit.

In an XBOW honeypot experiment, internet-exposed servers mimicking affected vendors and models were probed within a day, including attempts to alter temperature settings.

The U.S. Department of Justice announced removal of Gootloader from more than 100 servers, seizure of U.S. domains used to deliver and control it, and victim notifications worldwide. According to the cited DoJ announcement, Gootloader had infected at least 25,000 computers worldwide since 2018.

Gootloader spread mainly through compromised WordPress and other websites, where victims were tricked into downloading apparently legitimate files; infected machines were then added to a botnet.

VulnCheck counted 100,222 CVEs by the reported interview time in 2026; the source attributes much of the increase to AI-assisted vulnerability hunting. About 1.4% of CVEs published in 2026—1,363 vulnerabilities—had been added to VulnCheck’s Known Exploited Vulnerabilities catalog.

The reported median time from CVE publication to exploitation fell from 120 days in 2025 to 80 days in the first half of 2026; CrowdStrike observed 88% of exploitation using public proof-of-concept code within 48 hours of release.