Hackers pull off $133 million French bank heist via service provider

2026-11-07T19:23:21Z•f4ac20d040ea05cdd2e3d1f1af975b721e39f5ef82e9d4d57ece814f0e777e33
AI securityD-LinkGitHub supply chainNASPlex2ShellQNAPSSL-VPNSonicWallactively exploited vulnerabilityauthentication bypassbank fraudcredential exposurecritical infrastructurecybersecurity newsfinancial servicesindustrial control systemsinfostealermalwarephishingthird-party compromisetoken theftzero-day

What happened

A BleepingComputer security-news feed covering major incidents and vulnerabilities, including a $133 million bank fraud enabled through a service provider, an actively exploited SonicWall SSL-VPN authentication-bypass flaw, attacks against QNAP NAS devices via the Plex2Shell vulnerability chain, D-Link switch zero-days, exposed customer credentials and tokens, phishing campaigns, supply-chain malware, and attacks on industrial refrigeration systems.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
f4ac20d040ea05cdd2e3d1f1af975b721e39f5ef82e9d4d57ece814f0e777e33
Enrichment time
2026-11-07T19:23:21Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.