‼️ UPDATE: France's supermarket fridge hack is bigger than first reported.

Carrefour says 80 of its stores were hit, on top of 300+ at Intermarché and Netto. France's cyber agency ANSSI found a flaw in Danfoss software, a PM aide says.

France fears other EU states may be hit.

Regarding the Danfoss refrigeration systems hacked in France:

The username is admin, and the password automatically changes every day to... the current date.

Yes, today's date.

The French supermarkets affected in today's attacks had exposed all its refrigeration controllers directly to the internet.

Every single device reportedly used the same password: today's date...

There's also a documented authentication bypass: sending a POST request to /xml.cgi can bypass the login entirely.

Via: GossiTheDog

‼️ UPDATE regarding the Danfoss refrigerators hack: More than half of the world's internet-facing systems are in France.

Of 4,980 hosts with Danfoss on their web pages, 2,911 are French. South Africa is second with 517.

Roughly 8 in 10 are in Europe, from Portugal to Sweden.

‼️ BREAKING: Chinese rental cars filmed Norwegian military exercises and stored access codes to open gates and doors.

At least two were Deepal EVs from Hertz Norway, owned by China's Geely via Volvo.

Whether the data ever left the cars is unkown.

https://militarnyi.com/en/news/chinese-cars-in-norway-stored-military-exercise-footage-and-access-codes/

‼️ BREAKING: MediaMarkt has pulled every Ledger product from its stores and website.

A buyer says two Ledger Nano X wallets from different MediaMarkt stores had hidden LTE modules inside.

It seems like anyone holding a Ledger device should be worried, a lot. Implants keep turning up across countries and sellers.

Ledger has confirmed implants only in wallets from reseller CryptoBilis in Southeast Asia, and these wallets sent seed phrases over LTE.

‼️ China-linked hackers spent several days inside the network of a regional organisation in Suva, Fiji, the US Embassy says.

Google is routing subsea cables to Guam, Australia and the US through Suva. The US warns such hackers also target Pacific telecoms.

https://hongkongfp.com/2026/10/13/china-linked-hackers-hit-fiji-us-embassy/

‼️ Pegasus maker NSO Group had access to the data Poland harvested with its spyware, PM Donald Tusk calls it "a crime against the state."

Experts found NSO kept sole control of the server that infects phones, and the data ran through its network abroad

https://notesfrompoland.com/2026/10/12/israeli-producer-had-access-to-data-harvested-by-poland-using-pegasus-spyware-say-prosecutors/

‼️ The owner of Hobbs, Whistles and Phase Eight was hit by a cyberattack. This comes a week after the Asos hack.

TFG London says the attack, found on Sunday, disrupted some IT systems and website features and is delaying orders.

It is unkown whether customer data was leaked.

Source: https://www.bbc.co.uk/news/articles/cwly38gjkejko

‼️ Meta, Google and OpenAI joined the UK's NCA and the FBI in a crackdown on West African scam centres.

Meta removed 3.7M+ Facebook and IG accounts, pages and groups and police made 28 arrests.

They freed 117 malnourished trafficking victims from a scam center in Ghana.

https://about.fb.com/news/2026/10/meta-tech-companies-law-enforcement-crackdown-global-scam-networks/

🚨 BREAKING: Hackers broke into Meta’s private GitHub repo and stole their source code.

They got in with an employee's stolen credentials and took personal data on ~1,500 people, mostly US employees, stored there against Meta policy…

Read the article on our site:
https://www.internationalcyberdigest.com/meta-github-breach-source-code-employee-data/