Hackers pull off $133 million French bank heist via service provider

2026-11-08T07:23:21Z•94a1a426392ccfe27bf1b0b2657cf6c57f89a6c17e4c108cb1123d34872f8bfa
AI securityAPI secretsD-LinkGitHub malwareMFA bypassNAS exploitationOT securityPlex2ShellQNAPSSL-VPNSonicWallbackdoorbanking breachcredential exposurecybersecurity newsfinancial fraudindustrial control systemsinfostealerphishingphishing-as-a-servicerefrigeration systemssupply chain riskthird-party compromisezero-day

What happened

A collection of cybersecurity news reports covering major incidents, vulnerabilities, scams, and defensive initiatives. Highlights include a $133 million French bank fraud enabled through a service provider, exploitation of a SonicWall SSL-VPN authentication bypass, attacks against QNAP NAS devices through the Plex2Shell vulnerability chain, exposed customer credentials and tokens at Chainalysis, D-Link switch zero-days, phishing campaigns targeting Microsoft and Google accounts, malware-laced GitHub security tools, and warnings about attacks on industrial refrigeration systems.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
94a1a426392ccfe27bf1b0b2657cf6c57f89a6c17e4c108cb1123d34872f8bfa
Enrichment time
2026-11-08T07:23:21Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.