France has publicly accused Iran of orchestrating a series of cyberattacks targeting supermarket refrigerators in October. Investigators suspect the Shahid Kaveh cyber unit, linked to Iran's Revolutionary Guards, was responsible for raising temperatures in 700 commercial sites, resulting in at least 15 fires. France has summoned Iran's ambassador and threatened additional European Union sanctions, though connections to other recent attacks remain unconfirmed.
Binance has dismissed claims of a new data breach after a seller using the ShinyHunters name offered alleged records for 335 million users for $900,000. The exchange disputes the authenticity of the data, citing inconsistencies in how it stores customer information. This incident is believed to be separate from Binance's recently confirmed crypto heist.
Ukrainian authorities have arrested four individuals suspected of operating scam call centers that defrauded 135 German victims out of 4.3 million euros. The suspects posed as financial advisers, used fake investment platforms, and redirected funds into wallets they controlled. Some also accessed victims' online banking accounts, and all face up to 12 years in prison if convicted.
Security researchers have confirmed attacks exploiting SSHole, a flaw in OpenSSH affecting certain musl-based Linux systems. The vulnerability allows oversized passwords to match an asterisk used to disable password logins, leading to credential theft and root access in some cases. Administrators are advised to update to OpenSSH 10.6p2 or disable SSH password authentication on affected systems.