Cybersecurity briefing, 2026-10-13

A connected refrigeration controller is a business-critical asset.

• Bricksforge upload flaw turns form files into PHP
• Danfoss refrigeration controllers turn a cyberattack into spoilage
• GitLab emergency patch closes a code execution hole
• Qilin and Settra turn Palo Alto VPN into access path
• Ledger implant in reseller-sold wallets drained millions
• Luna Moth leak shows a staffed extortion service
• Snowflake thefts came from old stolen logins
• Midnight Mimosa hides below Android cleanup
• Integrity Technology Group framed as China’s cyber-services hub
• AnyDesk Linux exploit reaches root over port 7070
• CyberXero uses Claude Code to scale WordPress break-ins
• Yandex loses redundancy as third data center is hit
• Let's Encrypt shortens certificate lifetimes to 64 days
• HPE switch advisory flags management-plane bypasses

Recent editions

• Monday, October 12, 2026: Bricksforge upload flaw turns form files into PHP · 18 stories
• Sunday, October 11, 2026: FBIjobs probe names a ransomware-response executive · 3 stories
• Saturday, October 10, 2026: FBIjobs probe names a ransomware-response executive · 18 stories
• Friday, October 9, 2026: Fortinet FortiMail path traversal is actively exploited · 19 stories
• Thursday, October 8, 2026: PoeLLM turns exposed AI servers into scouts · 20 stories
• Wednesday, October 7, 2026: PoeLLM turns exposed AI servers into scouts · 20 stories
• Tuesday, October 6, 2026: ClingSTUN Switched From Discovery to Active Exploitation · 19 stories