This week shows how trusted technology can become a direct route to physical damage and enterprise compromise. Attacks on supermarket refrigeration systems spoiled food, caused fires and drove losses into the millions, bringing operational technology risk into clear business focus. At the same time, attackers gained deep access through Ivanti gateways that were fully patched when intrusions began, proving that updates alone cannot establish whether an edge device is clean. A separate espionage operation used a compromised BeyondTrust support appliance to reach downstream systems, pursue credentials and collect sensitive documents. The wider issue also examines an industrial phishing marketp…

This week's stories:

• Food loss and fires follow attacks on supermarket refrigeration
• Corporate credentials stolen through fully patched Ivanti gateways
• Corporate networks exposed through compromised BeyondTrust support tools
• One billion phishing messages reveal an industrial fraud marketplace
• Live government sites were breached during AI safety tests
• Public exposure of AI and industrial systems keeps rising
• Targeted online ads delivered zero-click spyware to news devices
• Burger King Japan breach exposes 11.18 million app records
• Crypto wallets hide implants that steal recovery secrets
• Fake remote workers use laptop farms to enter major employers
• Record Microsoft patch load includes a Windows flaw under attack
• Retail giant outage disrupts apps, orders and staff access
• Weak password opens population records tied to 8.8 million people
• UK legal aid breach reaches sensitive records dating back to 1978
• Cisco email gateways face active attacks with root-level access

More cybersecurity coverage at BareMetalCyber.com.

This week’s roll-up opens with a cloud ransomware outage that disrupted hundreds of companies and local governments in Japan, showing how one provider incident can spread across many operations. A sweeping FortiGate campaign also shows the danger of stolen privileged credentials, persistent administrator accounts, and ransomware access at the network edge. In Denmark, misuse of a trusted company’s registry access exposed identity data tied to millions of people. The issue also tracks active NetScaler compromises that can outlive patching and attacks against self-hosted Atlassian systems within hours of disclosure. Together, these stories make one theme clear: resilience depends on third-par…

This week's stories:

• Japan cloud ransomware outage disrupts 495 organizations
• Stolen FortiGate access locks out admins and fuels ransomware
• Denmark registry breach exposes data tied to 8.8 million people
• NetScaler attacks disrupt remote access and leave hidden control
• Sensitive Atlassian files face attacks within hours of disclosure
• FBI disrupts China-linked attacks on critical infrastructure
• Pentagon breach creates long-term identity risk for millions
• Old SharePoint gaps drive ransomware into critical services
• Country-code registry breaches enable trusted website impersonation
• South Korean bank breaches expose customer and worker data
• Developer secrets exposed by a compromised Tensorlake package
• Developer access turns into cloud exposure through GitHub workflows
• GitHub users face malware across 17,610 FakeGit repositories
• Helpdesk breach reaches full server control in seconds with AI
• Exposed AI servers become cryptomining and attack launchpads

More cybersecurity coverage at BareMetalCyber.com.

This week’s roll-up opens with ransomware crews exploiting TeamCity servers, putting trusted software build pipelines and downstream customers at risk. It then turns to actively exploited edge and security systems that can hand attackers control over network access and policy. A third major theme is scale: AI-assisted attacks reportedly stole more than 600,000 payment card records while reaching scores of retailers. The issue also examines altered water controls and a phishing service tied to 12,000 compromised Microsoft inboxes. Across the week, defenders face the same pressure: shorten patch windows, protect privileged control planes, and verify identities that ordinary reviews overlook.…

This week's stories:

• Software pipelines face ransomware through exploited TeamCity servers
• Network access and security tools face active edge-system attacks
• Online retailers lose 600,000 payment cards in AI-assisted attacks
• Foreign hackers alter water controls at two Colorado utilities
• Device-code phishing compromises 12,000 Microsoft inboxes
• Gyazo breach exposes 23.62 million users and screenshot metadata
• AI agent crosses Australian government access controls unnoticed
• FBI jobs portal incident puts personnel and applicants at risk
• Forgotten Microsoft 365 accounts expose emails, chats and files
• Fake job interviews infect 30,000 devices across 100 countries
• WordPress attacks begin within hours of a critical security fix
• SharePoint attacks put unpatched and unsupported servers at risk
• Nearly 1,000 Zyxel switches breached across 48 countries
• Roundcube attacks threaten exposed webmail accounts and data
• GitLab email tokens can open private code and software pipelines

More cybersecurity coverage at BareMetalCyber.com.