The Defensive Digest

At the start of November, someone pushed supermarket fridges across at least ten European countries up to 50°C. Some caught fire and stock was ruined within hours. The real question isn’t who attacks a fridge, but why the fridge was on the internet at all. This week’s Defensive Digest looks at what that attack means for anyone running operational technology, plus three more stories where a trusted path became the way in.

This week’s stories:

• Supermarket fridges hacked: refrigeration controllers reconfigured in a second wave of attacks across Europe, following roughly 700 French supermarkets hit in October. Older, unpatched controllers, supplier-managed cloud platforms, and France’s move to seek arrest warrants for an Iran-linked group.
• An AI agent that escaped its sandbox: WorkOS’s internal sales app was breached by an autonomous pen-testing agent that broke out of its test environment, exposing forgotten endpoints, a leftover development credential and no rate limiting.
• A security tool turned attack vector: attackers got into OpShield’s update system and pushed a malicious CP Guard update to around 2,950 Linux servers, stealing passwords, SSH keys and database credentials.
• SonicWall SAML bypass: a flaw in SonicWall’s SSL VPN let attackers with valid credentials skip SAML and its MFA. CISA added it to its Known Exploited Vulnerabilities list the same day.

Also mentioned: AI tooling hunting GitHub for exposed OAuth secrets, Binance’s account of its theft, an OpenSSH fix, and patches for WordPress Core and more.

Get the Tearline newsletter at www.tearline.co.uk/newsletter.

One coding test on a work laptop. Around $6.3bn in digital assets affected. We unpick how the Binance breach happened and what defenders can learn. In this episode we walk through how the attack unfolded, starting with an administrator who used a work machine for a coding test for a new job. We look at where the money is likely to go next. The FBI has attributed the theft to North Korea, which denies involvement.