CISA, the FBI, HHS, USDA and the Department of Transportation issued a joint advisory about attacks against industrial refrigeration controllers and cold-chain monitoring systems used across healthcare, chemical, food and transport organizations. The advisory says malicious actors may target electronic and commercial refrigeration controllers in grocery and cold-storage facilities, including unpatched or internet-accessible devices.
Why it matters
The advisory describes potential equipment hazards, inventory loss, shortened equipment life, fire hazards and consumer safety risks from spoiled products.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Security Daily
Identity · Theregister Security
What happened
Researchers exploited weaknesses in Android apps used by two unnamed automakers to gain remote access to connected cars, including the ability to start engines, flash headlights, and sound horns. The exploit paths used public vehicle-identification information, internal API queries, identity-platform weaknesses, and account takeover to issue commands through the mobile apps.
Why it matters
After reaching the identity servers, the researchers could view or modify user-account data, log into car owners’ accounts, and issue the demonstrated vehicle commands.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Security Daily
Exploitation · Helpnetsecurity
What happened
Attackers siphoned an estimated $133 million from Crédit Mutuel Arkéa by using the bank’s own account to wire money to other banks, where the funds were possibly converted into cryptocurrency. Crédit Mutuel Arkéa confirmed the attack after blockchain investigator ZachXBT tracked more than $100 million in suspected stolen funds moving out of centralized exchange accounts.
Why it matters
The case separates the initial account misuse from subsequent tracing of suspected fund movements.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Evidence is visible. Uncertainty stays visible too.
Baitaphish separates source records from interpretations, labels AI-assisted enrichment, and avoids turning ingestion volume into unsupported claims about threats, prevalence, or risk.
