France blames Iranian hackers for supermarket attacks that sparked fires

2026-11-09T19:23:22Z•f5b9468a918d0eab5554f15800d8f1de2367153c09ec0e456ffeee3105436b15
CVE-2026-123158GitHubIranian state-sponsoredLinuxMFA bypassOpenSSHSSHoleSSL-VPNSonicWallactive exploitationbackdoorbanking fraudcloud infrastructurecritical infrastructurecryptocurrency fraudcybercrimedata breachinfostealernation-state activityretailsupply-chain compromisewiper malware

What happened

A BleepingComputer feed highlights active and emerging cyber threats, including Iranian state-linked attacks disrupting supermarket refrigeration systems and causing fires, destructive wiper activity against a Russian cloud provider, active exploitation of the SSHole OpenSSH vulnerability (CVE-2026-123158), exploitation of a SonicWall SSL-VPN MFA bypass flaw, major data exposures, financial theft, cryptocurrency scams, supply-chain compromise, and malicious fake security tools distributed through GitHub. Several reports indicate active exploitation or significant operational, financial, and s

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
f5b9468a918d0eab5554f15800d8f1de2367153c09ec0e456ffeee3105436b15
Enrichment time
2026-11-09T19:23:22Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.