Kevin Poireault

infosecurity-magazine.comISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AIISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told Infosecurity

ISC2 is taking a more active role in shaping the future of the profession with the launch of its Cyber-AI Workforce Coalition. It will produce toolkits to help employers describe new job roles at the intersection of AI and cybersecurity. www.infosecurity-magazine.com/news/isc2-la...

Cybersecurity professionals will be able to take the first ISC2-approved AI security exam in early 2027. www.infosecurity-magazine.com/news/first-i...

The PHP Foundation has blamed Chainguard for breaking the embargo before patches for the PHP2Shell vulnerabilities were ready to be shipped. PHP blog post: thephp.foundation/blog/2026/10... Chainguard response: lnkd.in/p/eQnxwTqw

Someone tried to exploit the critical PHP2Shell vulnerabilities four days before the vulnerabilities were published, according to Amazon. Other security firms have also observed evidence of exploitation attempts in the wild for both vulnerabilities. www.infosecurity-magazine.com/news/php2she...

🚨 Why was a good part of the web down on 21 October? The answer: PHP2Shell. Two critical PHP vulnerabilities, rated 9.2/10, triggered a wave of precautionary website shutdowns ahead of the release of security patches. 👉 Swipe through to understand what happened, why it mattered and what comes next

🚨 Two PHP vulnerabilities that could affect the servers underlying many websites have been disclosed ahead of the planned security patches, leading major cybersecurity authorities to urge users to prepare for remediation. www.infosecurity-magazine.com/news/critica...

www.wiz.io/blog/php2she...

wiz.ioPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz BlogCore PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

PHP has now published its full security advisory, with patches for CVE-2026-109618 and CVE-2026-109619 as well as mitigation measures to take in order to mitigate the risks. www.php.net

UPDATE: Several websites, including the University of Vienna's and the Dutch NCSC's, have been voluntarily taken down ahead of the patch release.

wired.com‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted AdsResearchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.

Internet-exposed Danfoss refrigeration controllers in France are disappearing from public view at a dramatic rate following a cyber incident targeting supermarket food supplies, according to @censys.bsky.social. www.infosecurity-magazine.com/news/france-...

Kevin Poireault reposted

Ninja Owl

@ninjaowl.ai

‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads #cybersecurity #hacking #news #infosec #security #technology #privacy

While many supermarkets in France are still grappling w/ food stock disruptions recent developments suggest that the cyber incident does not only impact Danfoss refrigeration controllers, but also devices from Dixell, an Italian brand owned by Copeland. www.infosecurity-magazine.com/news/french-...

kevinpoireault.substack.comExclusive: I spoke to the team who saw the French supermarket hack comingBugs that could enable a remote-control attack on refrigeration controllers like the one that targeted French supermarkets were known for over a year…

Exclusive: I spoke to the team who saw the French supermarket hack coming. Bugs that could enable a remote-control attack on refrigeration controllers like the one that targeted French supermarkets were known for over a year… kevinpoireault.substack.com/p/exclusive-...

If you’re interested to catch up with the reactions of the supermarkets, I covered it for Infosecurity Magazine here: www.infosecurity-magazine.com/news/french-...

NEW: Several chains of supermarkets in France have reportedly been hit by a cyber-attack targeting the refrigeration facilities of several stores across the country. One of the affected companies is Coopérative U. www.infosecurity-magazine.com/news/french-...

The fix for the AK-SM800A (firmware R4.3.1) had been available since 2025. CISA had issued an advisory. Claroty had publicly demonstrated the exploitation at DEF CON 34 in Aug 2026. A Shodan scan on Aug 19 still found 3726 of these controllers accessible from the public internet.

UPDATE: Groupe Casino said 5% of Monoprix supermarkets are impacted by the attack.

UPDATE: An Intermarché spokesperson confirmed that 150 of its stores were affected by the cyber-attack, estimated the financial loss at "at least thousands of euros." Meanwhile, a Carrefour spokesperson said the incident "primarily affected 80 out of our 6000 stores.”

UPDATE: Danfoss has confirmed that the models targeted by the hackers were either obsolete (AK-SM800 and AK-SC355) or not updated (AK-SM800A).

Danfoss products have been found to contain critical cybersecurity vulnerabilities in the past, such as CVE-2023-25915, CVE-2025-41450, CVE-2025-41451 and CVE-2025-41452, some of which could allow attackers to gain privileged access to refrigeration control systems and manipulate physical equipment.

Research presented by @claroty.bsky.social's Team82 at @defcon.bsky.social 34 in August 2026 demonstrated how a compromised Danfoss AK-SM 800A controller could disable cooling while falsifying temperature readings, potentially concealing failures in the cold chain.

The media outlet reported the attackers targeted outdated versions of the manufacturer’s refrigeration control software.

“Hackers reportedly managed to remotely trigger forced defrost cycles in refrigeration systems at numerous supermarkets, with temperatures programmed to reach as high as 50 °C,” @bfmtv.com reported.

Other reportedly affected supermarket networks include Intermarché, E. Leclerc, Carrefour and Monoprix. @bfmtv.com reported that the compromised systems are administered by Danish refrigeration systems provider Danfoss.

infosecurity-magazine.comMajor AI Firms Pledge Data Protection Changes Following ICO PushTen leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Commissioner's Office

In the UK, the Information Commissioner's Office claims 10 leading AI companies will make data protection improvements. These include Amazon, Anthropic, Apple, Cohere, DeepSeek, Google, Meta, Microsoft, OpenAI and Stability AI. www.infosecurity-magazine.com/news/ai-firm...

NEW: New findings from Group-IB show that the Telegram account linked to the alleged ASOS hack used to be active in a forum for gaming-item trading. www.infosecurity-magazine.com/news/telegra...

Kevin Poireault@leekthehack.bsky.social

Today, customers of online fashion retailer ASOS received a strange mobile notification claiming the company has been hacked via a Snowflake compromise. Neither ASOS nor Snowflake have confirmed any compromise yet. www.infosecurity-magazine.com/news/asos-cu...

infosecurity-magazine.comASOS Confirms Data Breach Linked to Stolen Employee CredentialsThe ASOS hack comes from the compromise of agentic marketing platform Simon AI, said the attackers

ASOS has discovered that the attacker had gained access to an employee account “by impersonating a trusted contact to obtain log in credentials.” These were then used to “access information on certain third-party platforms used by ASOS.” www.infosecurity-magazine.com/news/asos-da...

🚨UPDATE from Snowflake: "We can confirm this issue did not in any way result from a vuln, weakness, flaw or misconfiguration with the Snowflake service, platform or internal environments, and was not caused by Snowflake. No remediation is required for Snowflake customers."

A critical vulnerability affecting eight @atlassian.bsky.social products is reportedly being exploited in the wild. www.infosecurity-magazine.com/news/critica...

NEW: New findings from Group-IB show that the Telegram account linked to the alleged ASOS hack used to be active in a forum for gaming-item trading. www.infosecurity-magazine.com/news/telegra...

Kevin Poireault@leekthehack.bsky.social

🚨 UPDATE from ASOS: The UK fashion retailer emailed customers this morning, confirming the hack, stating that the threat actor had accessed personal and account data. However, the company confirmed that payment information was not compromised.

Customer trust is incredibly important to us, and if the situation changes an update will be provided as appropriate. The Company has cyber security insurance with a large global provider, including business continuity insurance. It is too early to quantify any potential impact on trading." 4/4

🚨 UPDATE from Snowflake: "As soon as we became aware of the notification that is currently being reported, we began an investigation. At this time, we can report that we have found no compromise of the Snowflake platform."

We took immediate action to restrict access to the notification platforms and are working with our internal and external specialist advisers, as well as all relevant authorities. Basic personal information including name and contact details may have been accessed... 2/4

We do not believe that payment-card information or account passwords, were impacted. Our website and app are operating as normal, with no current disruption to any aspects of our operations... 3/4

🚨UPDATE from ASOS: "ASOS can confirm that, at around 10am today, an unauthorised customer notification was sent to ASOS customers. We are investigating unauthorised activity involving third-party platforms that we use to communicate with customers... 1/4

Red Hat’s open-source security initiative Lightwell has remediated over 400 novel vulnerabilities across foundational Java libraries since the projects launch in June. www.infosecurity-magazine.com/news/red-hat...

Google has suspended its open-source bug bounty program until 2027 in an effort to stem the flood of AI submissions. www.infosecurity-magazine.com/news/google-...

@coupecircuit.bsky.social

In the US, CISA is set to become a de facto enforcement agency, with new powers to compel organizations across critical infrastructure to report cyber incidents. www.infosecurity-magazine.com/news-feature...

Kevin Poireault reposted

Coupe Circuit 📴

22 Sept

🇲🇲 Le 15 septembre, la Norvège a annoncé l’ouverture d’une enquête visant Telenor pour des faits présumés constitutifs de crimes contre l’humanité et de violations des sanctions liés à son retrait de Birmanie après le coup d’Etat militaire de 2021. www.coupecircuit.org/crimes-contr...

coupecircuit.org🇲🇲 Crimes contre l’humanité : Telenor visé par une enquêteCourts-circuits | 15-21 septembre 2026

4 Sept

The G7 is urging nations to accelerate the post-quantum cryptography transition. Two key priorities for governments: developing national strategies on transitioning to PQC and integrating PQC into cybersecurity requirements. www.infosecurity-magazine.com/news/g7-urge...

2 Sept

As AI finds vulnerabilities faster than ever, who will help open-source maintainers keep up? I explored the major new initiatives tackling this challenge in my latest article. www.infosecurity-magazine.com/news-feature...

26 Aug

You don't just want an AI agent to say: "Don't worry, I followed all the rules." You want proof of what they actually did. @linuxfoundation.org has introduced TRACE, a new open standard acting as a tamper-resistant receipt for an AI agent's activity. www.infosecurity-magazine.com/news/linux-f...

20 Aug

NEW: The Pentagon paused third-party audit mandates for US defense contractors. Now these contractors say they can’t trust their own cybersecurity scores. www.infosecurity-magazine.com/news/us-defe...

19 Aug

NEW: Akrites, an industry initiative hosted by @linuxfoundation.org and set up to defend critical open-source software against AI-enabled cyber threats, is expected to operationalize its vulnerability disclosure and remediation platform in September. www.infosecurity-magazine.com/news/linux-f...

14 Aug

Security researchers from Symantec and Carbon Black have revealed that Jewelbug, a threat group associated with Chinese-sponsored cyber espionage operations, may be a hacker-for-hire group that also runs profitable crypto fraud campaigns. www.infosecurity-magazine.com/news/researc...

infosecurity-magazine.comOpenAI Launches Two-Tier Access Program Alongside GPT 5.6 CyberDaybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models

11 Aug

OpenAI is launching GPT‑5.6‑Cyber, a model purpose-built for cybersecurity, alongside two Daybreak access tiers:🔵Blue for safeguarded defensive work and🔴Red for advanced defense and authorized offensive security tasks. www.infosecurity-magazine.com/news/openai-...

10 Aug

How quickly are countries moving toward post-quantum cryptography? 🌐🔐 This table provides a country-by-country overview of key PQC migration timelines and shows why organizations need to start preparing now. More in my Infosecurity Magazine feature: www.infosecurity-magazine.com/news-feature...

29 July

Just 1.3% of AI-discovered vulnerabilities in 2026 have been exploited in the wild - roughly matching the overall exploitation rate of all vulnerabilities, a new @vulncheck.bsky.social report found. www.infosecurity-magazine.com/news/one-per...