
Tech reporter @InfosecurityMag • @coupecircuit_ | 🌍⚽🥊
London, United Kingdom
Joined October 2011
- Tweets5.8K
- Following2K
- Followers1.6K
- Likes6K
Kevin Poireault retweeted
HOLY WTF. Reuters is reporting that a Chinese-speaking hacker used AI agents to compromise websites belonging to more than 100 companies, including Deere, SharkNinja and Cummins, after attempting intrusions against over 1,200 sites.
The estimated cost: roughly $5,000 in AI tokens, or $50 per successful breach. Successful intrusions took around 23 hours on average.
The attackers used the open-source Cairn agent framework, apparently combining DeepSeek models with a Claude Code harness. One campaign gave its agents instructions in fewer than 100 Chinese characters.
NorForge researcher Snorre Fagerland: 'It's a new world now.'
Kevin Poireault retweeted
Congélateurs piratés : les assureurs cyber pourraient refuser d’indemniser les marchandises…
Selon des courtiers interrogés, les polices cyber classiques excluent souvent les dommages physiques, dont la destruction de denrées réfrigérées. Après les attaques contre environ 350 supermarchés français, la facture pourrait atteindre des dizaines de millions d’euros.
reuters.com/legal/litigation…
Kevin Poireault retweeted
⚡ India orders telecoms to show registered caller names for unsaved domestic numbers starting November 1, 2026.
The CNAP mandate targets 4G and newer networks, aiming to help identify unknown callers and tackle spam and fraudulent calls.
Read: thehackernews.com/2026/10/in…
Kevin Poireault retweeted
Thread 🧵
1/ NEW REPORT: Billions of advertising auctions determine in real time which ads we see on websites and in apps every day. Our latest research shows how the same data fueling this advertising ecosystem is being used to profile millions of users and silently infect targets with zero-click mercenary spyware, a novel attack technique we call "Adfection.”
Read the report: citizenlab.ca/research/how-d…
Kevin Poireault retweeted
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads.
A normal-looking ad loads. If you're a target, you're infected. No click needed.
To protect yourself, block ads now.
First time it's been confirmed in the wild. We call it #AdFection.
Candiru spyware infections at @AJEnglish. 45+ devices infected.
Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse.
Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC.
Investigation ongoing 1/
READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : citizenlab.ca/research/how-d…
Confiant's blog: blog.confiant.com/p/adint-we…
Kevin Poireault retweeted
Invité de CNews ce 14 octobre, le patron des centres E.Leclerc est revenu sur la cyberattaque qui a visé les systèmes de froid des supermarchés. Et son propos est un poil inquiétant.
👉 l.numerama.com/Eaz
Kevin Poireault retweeted
A major step forward in disrupting North Korea’s illicit IT worker operations.
CrowdStrike is proud to have partnered with the FBI in identifying and disrupting U.S.-based laptop farms used by FAMOUS CHOLLIMA to infiltrate organizations, conceal operatives’ identities, and generate revenue for the regime.
Through threat intelligence and technical analysis, our Counter Adversary Operations team helped expose the infrastructure enabling these schemes.
This is the power of public-private collaboration in action. Together, we're raising the cost of adversary operations and turning intelligence into disruption.
Learn more about CrowdStrike's role: crowdstrike.com/en-us/blog/f…
🚨 Today, the @FBI and @TheJusticeDept announced a series of coordinated actions against the North Korean IT Worker threat – securing charges against 14 individuals, making two arrests, seizing nearly 190 devices, and conducting operations at more than 40 suspected “laptop farms” across Texas.
These actions were taken in response to North Korea’s ongoing deployment of thousands of remote IT workers to infiltrate Western companies, earn revenue for the regime, and gain access to sensitive information. These workers are often supported by domestic enablers and laptop farms.
Disrupting these schemes remains a top priority for the FBI. In 2026 alone, 8 individuals have been sentenced to prison for their roles in this activity.
Coordination between the private sector and federal law enforcement was central to the latest effort. CrowdStrike’s Counter Adversary Operations team provided vital support to the FBI’s effort to identify and disrupt these laptop farms.
justice.gov/opa/pr/justice-d…
Kevin Poireault retweeted
🇫🇷 UPDATE: SECOND REFRIGERATION SYSTEM MANUFACTURER TARGETED IN FRENCH CYBERATTACKS
Following the attacks on Danfoss-controlled refrigeration systems at hundreds of French supermarkets, Le Monde reports that systems using Dixell equipment were also targeted overnight.
• At a supermarket near Bordeaux, attackers reportedly changed freezer settings from −22°C to 150°C.
• A technician observed 2–3 settings being altered per second, suggesting automation.
• An E Leclerc store in Tarn was forced to discard refrigerated products.
• France’s cybersecurity agency ANSSI has acknowledged compromises affecting Dixell software.
The 150°C figure refers to a manipulated setting, not a measured freezer temperature.
The perpetrators remain unidentified. It is not yet established whether the same actors are responsible for both waves.
Kevin Poireault retweeted
UK Housing Ombudsman Service investigates 'security incident'
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Kevin Poireault retweeted
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
Kevin Poireault retweeted
🚨 BREAKING: Microsoft's October 2026 Patch Tuesday is MASSIVE!
Microsoft has fixed a record-breaking 1,411 security vulnerabilities, including 70 critical flaws and 3 zero-days, one of which is actively exploited in attacks.
🔥 317 remote code execution flaws
⚠️ 677 privilege escalation flaws
🛡️ 40 security feature bypass flaws
💻 Time to get patching!
Kevin Poireault retweeted
Cyberattaque J+1
Au lendemain de la cyberattaque qui a touché les installations frigorifiques de plusieurs enseignes de la grande distribution, je souhaite revenir sur les faits et faire un premier point de situation concernant nos magasins @cooperativeu.
80 magasins de notre réseau ont été touchés, sur près de 2 000 points de vente. Dans la grande majorité des cas, la réactivité de nos équipes a permis de contrer l'attaque et d'éviter toute rupture de la chaîne du froid.
Dans les magasins où cela n'a pas été possible, les produits concernés, ayant subi une rupture du froid, ont été immédiatement retirés de la vente et détruits. Notre priorité absolue reste la sécurité alimentaire de nos clients.
Je tiens à saluer l'engagement exceptionnel de nos associés U, de nos collaborateurs et des professionnels du froid, mobilisés depuis les premières heures pour protéger nos clients et rétablir la situation.
Je souhaite également rappeler un point important : nos installations frigorifiques sont connectées à Internet pour permettre une surveillance des températures à distance, de jour comme de nuit, et une intervention rapide en cas d'anomalie. C'est un dispositif essentiel à la bonne conservation des produits alimentaires.
Une enquête devra permettre de faire toute la lumière sur les circonstances de cette cyberattaque.
S'attaquer à des équipements essentiels à la conservation des produits frais, c'est s'attaquer à la chaîne d'approvisionnement alimentaire des Français. C'est inédit, gravissime et inacceptable.
Nous restons pleinement mobilisés.
Kevin Poireault retweeted
On a une explication de pourquoi ça semble ne concerner que la France alors que la Danfoss vend ses appareils dans le monde entier ?
International Cyber Digest@IntCyberDigestOct 12Europe!
EuropeConnected via Europe App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
‼️ BREAKING: Fires broke out after hackers hacked fridges of hundreds of French supermarkets and forced Danfoss controllers to defrost at up to 50°C.
Intermarché counts up to 200 stores, Coopérative U fewer than 100. Paris prosecutors opened a probe.
Kevin Poireault retweeted

@onyphe.io@onypheOct 12
France
FranceConnected via France Android AppAccount-level information, not a live location or per-post device.
👀 La cyberattaque ayant privé de systèmes de réfrigération @CooperativeU et @intermarche était-elle une attaque ciblée sur la France ?
💥 Sur plus de 6 000 instances @Danfoss exposées, près de 50% sont situées en France.
👉 Notre analyse complète :
blog.onyphe.io/frigo-dimport…
⚠️ Incident de sécurité ciblant les Danfoss série AK-SM et AK-SC
📢 Le CERT-FR publie un bulletin d'alerte concernant de nombreuses compromissions de Danfoss série AK-SM et AK-SC.
➡️ Plus d'informations sur le site du CERT-FR :
cert.ssi.gouv.fr/alerte/CERT…
Kevin Poireault retweeted
UPDATE | More retailers have confirmed they were affected by the cyberattack on supermarket refrigeration systems in France.
The affected locations include:
• At least 300 Intermarché and Netto stores
• Around 100 Coopérative U outlets
• 80 Carrefour supermarkets
• Around 30 Monoprix stores
• Several E. Leclerc stores
Paris prosecutors opened an investigation on their own initiative. It aims to identify victims and link the attack to the reported food losses. Equipment fires have also been reported in some stores.
BREAKING: 🇫🇷 A major cyberattack has hit supermarket refrigeration systems across France, reportedly causing fresh and frozen food to spoil after hackers remotely manipulated temperature controls.
According to BFMTV, the attack began overnight from Sunday into Monday, targeting older versions of refrigeration-control software supplied by Danish company Danfoss.
The attackers allegedly exploited the systems’ defrosting function, forcing refrigeration equipment to heat continuously instead of keeping products cold. Temperatures were reportedly set as high as 50°C, destroying entire stocks of food within hours.
Several major supermarket chains have been affected, including Intermarché, Super U and E.Leclerc. Metro stores and independent businesses, including butcher shops also have been impacted.
Around 150 Intermarché stores are reportedly affected, according to industry sources cited by BFMTV. The full number of affected locations remains unclear.
The financial damage is already significant. In Haguenau, Alsace, an Intermarché store reportedly lost its entire frozen-food stock, worth approximately €50,000. A nearby Super U allegedly had to discard both fresh and frozen products, with losses estimated at €220,000. An E.Leclerc store in the same town was also affected, although its losses had not yet been calculated.
The combined losses reported at the Intermarché and Super U stores in Haguenau alone amount to around €270,000. Nationwide damage could reach several million euros.
Intermarché reportedly confirmed the incident in an internal communication, warning that several stores had suffered losses of frozen products. Coopérative U also acknowledged the attack and established crisis teams to assist affected stores and coordinate with refrigeration specialists.
Technical investigations are ongoing, and the full extent of the damage has yet to be established.
Authorities and companies are still working to determine the full circumstances of the attack. The identity of the perpetrators has not been confirmed.
Kevin Poireault retweeted
Replying to @VirgoWhallala @ebothorel
Pas que les mises à jour. Ces interfaces d'admin n'ont pas à être exposées directement sur Internet. On le répète depuis combien de temps maintenant ? Et pas qu'en IT ! Le message a été répété à l'envi pour les systèmes OT.
Kevin Poireault retweeted
🚨 Mise à jour
Cyberattaque sur les systèmes de froid Danfoss
• L’ANSSI a été saisie par le Premier ministre. L’agence alerte d’autres entreprises françaises potentiellement concernées.
• Danfoss confirme que la majorité des équipements touchés sont des modèles obsolètes (AK-SM800, AK-SC355…) en fin de vie, sans mises à jour de sécurité depuis longtemps.
• Impact : jusqu’à 300 magasins Intermarché/Netto + moins d’une centaine de Coopérative U. E. Leclerc également touché selon les distributeurs
• Toujours aucune revendication
Les magasins jettent les produits frais et surgelés (consigne forcée à 50 °C)
#Cyberattaque #Danfoss
🚨 🇫🇷 Cyberattaque massive sur les systèmes de froid de certains supermarchés
Une attaque vise depuis cette nuit les régulateurs frigorifiques Danfoss (AK-SM, versions anciennes < 4) dans de nombreux magasins français.
• Coopérative U (Schelcher) confirme : plusieurs magasins touchés
• 150 Intermarché + Super U et autres selon BFMTV / TF1
• Températures poussées jusqu’à 50 °C → dégivrage forcé, stocks frais et surgelés détruits
• Pertes déjà à plusieurs centaines de milliers d’€ localement (ex. Haguenau), potentiellement des millions au niveau national
Les équipements sont souvent exposés avec des interfaces web. Les failles (bypass auth, RCE…) avaient été publiées par Claroty en août, correctifs disponibles depuis.
Aucune revendication pour le moment.
Enquête en cours.
#Cyberattaque #Danfoss
L'un des plus grands Leclerc de France touché lui aussi par la cyberattaque des frigos : tous les surgelés indisponibles pour une durée indéterminée
l.bfmtv.com/TeXA






































