# It's Probably Nothing

> An automated cybersecurity briefing from Sierra Echo Charlie.

Publisher: Sierra Echo Charlie. Language: New Zealand English (en-NZ). Edition dates use Pacific/Auckland.

[Website](https://ipn.nz/) · [Feeds](https://ipn.nz/feeds.md) · [LLM index](https://ipn.nz/llms.txt)

## Latest edition

[2026-11-04: The fridge hackers went on a European tour](https://ipn.nz/editions/2026-11-04.md)

Supermarket freezers hit in four more countries, the FBI names North Korea for Binance, and malware that talks back to AI.

The supermarket refrigeration sabotage that started in France has now hit Belgium, Luxembourg, Sweden and Ireland in a single overnight wave, which rather settles the question of whether it was a one-country experiment. Also today: the FBI has formally pointed at North Korea for the Binance heist, Pyongyang is furious about it, and someone's written malware with a polite note asking AI analysis tools to look the other way. It didn't work.

- Fridge sabotage jumps the border: four countries hit in one night
- FBI names North Korea for the Binance heist; laundering gets creative
- Gorbag: smash-and-grab spies casing war crimes files and aid routes
- Prompt adware: a Codex jailbreak that repays you in advertising
- Sydney auctioneer confirms breach after million-row forum listing

## Back catalogue

- [2026-11-04: The fridge hackers went on a European tour](https://ipn.nz/editions/2026-11-04.md): Supermarket freezers hit in four more countries, the FBI names North Korea for Binance, and malware that talks back to AI. (5 stories; 5:41 audio.)
- [2026-11-03: Fake nuclear alerts, on both sides of the war](https://ipn.nz/editions/2026-11-03.md): Emergency apps hijacked in Ukraine and Russia, Amadeus notifies airlines, and BITTER’s PapRAT goes LOLBin. (3 stories; 6:33 audio.)
- [2026-11-02: Six billion out the door at Binance](https://ipn.nz/editions/2026-11-02.md): A record crypto heist, plus confirmed exploitation of GitLab's regex RCE and the full Ivanti chain. (4 stories; 5:21 audio.)
- [2026-10-30: Cisco’s VPN flaw can restart the firewall](https://ipn.nz/editions/2026-10-30.md): Plus PHP2Shell’s kernel-level follow-up and two distinct Juniper compromise paths. (3 stories; 3:30 audio.)
- [2026-10-29: Brotli joins the known-exploited list](https://ipn.nz/editions/2026-10-29.md): Adobe’s upload flaw has a crucial caveat; NT Health pauses its observer programme. (3 stories; 2:50 audio.)
- [2026-10-28: Real booking details make a better payment scam](https://ipn.nz/editions/2026-10-28.md): Plus PHP2Shell’s KEV escalation, a Consul namespace bypass and casino crypto flows. (4 stories; 2:51 audio.)
- [2026-10-27: A compaction detour around OpenAI’s safeguards](https://ipn.nz/editions/2026-10-27.md): Xint’s safeguard bypass, Anthropic’s proposed IPO, and Australian breach numbers worth reading carefully. (4 stories; 3:29 audio.)
- [2026-10-26: LiteLLM could run without being imported](https://ipn.nz/editions/2026-10-26.md): Brotli's wider reach, VeloCloud triage and new research into AI containment failures. (5 stories; 3:50 audio.)
- [2026-10-25: Special edition: CVE-2926-109618 (Update \#5)](https://ipn.nz/special-editions/d3b75aac-ef48-485f-8d2f-f27d2a1d6fff/db7baa4a-066b-462f-8f82-08ed9c70831b.md): Exploit claims widen; NetScaler fixes are pending and a compromise account needs qualification (5 stories; 3:33 audio.)
- [2026-10-24: Special edition: CVE-2926-109618 (Update \#4)](https://ipn.nz/special-editions/d3b75aac-ef48-485f-8d2f-f27d2a1d6fff/1c263639-3fb5-40fb-9117-e26a3d98a211.md): Sophos retracts its compromise report; PHP adds separate, narrowly scoped guidance (6 stories; 3:46 audio.)
- [2026-10-23: Special edition: CVE-2926-109618 (Update \#3)](https://ipn.nz/special-editions/d3b75aac-ef48-485f-8d2f-f27d2a1d6fff/115faee9-2f73-4fee-9425-7853e98e4c46.md): A reported compromise and a pre-disclosure attempt broaden the investigation window (5 stories; 3:49 audio.)
- [2026-10-23: eMudhra plans its TLS exit. One private key was 4.](https://ipn.nz/editions/2026-10-23.md): GitLab and Node.js fixes, ConnectWise attribution, and a New Zealand breach disclosure. (5 stories; 3:18 audio.)
- [2026-10-22: Special edition: CVE-2926-109618 (Update \#2)](https://ipn.nz/special-editions/d3b75aac-ef48-485f-8d2f-f27d2a1d6fff/3cfa11e1-89eb-4dd9-8e6a-0dba4491d3f8.md): PHP fixes are out; exploitation attempts are reported, and FPM isn't exempt (4 stories; 3:27 audio.)
- [2026-10-21: Special edition: Leaked PHP RCE bugs bring fixes forward to 03:00 NZDT Thursday](https://ipn.nz/special-editions/d3b75aac-ef48-485f-8d2f-f27d2a1d6fff/d2a47d36-391f-441b-8a41-f6da7bccbf8f.md): Two embargoed PHP flaws leaked early; patches due 14:00 UTC Wednesday, details still under wraps (1 stories; 4:11 audio.)
- [2026-10-21: Leaked CA keys, a hijacked backup tool and open AI panels](https://ipn.nz/editions/2026-10-21.md): Go wants a rebuild, AOMEI hasn't told anyone, and AI-agent crims forgot to lock the door. (3 stories; 5:14 audio.)
- [2026-10-20: Ransom negotiators, NetScaler keys and a DeepSeek ban](https://ipn.nz/editions/2026-10-20.md): Who's really across the table, why patching NetScaler isn't eviction, and a hypervisor-level heist. (4 stories; 5:32 audio.)
- [2026-10-19: One vendor credential, hundreds of M365 tenants](https://ipn.nz/editions/2026-10-19.md): Plus an espionage zero-day in BeyondTrust, root-by-email on Cisco gateways, and a poisoned WordPress plugin. (5 stories; 3:54 audio.)
- [2026-10-15: Record Patch Tuesday, a phishing takedown, and laptop farms](https://ipn.nz/editions/2026-10-15.md): An exploited Mark-of-the-Web bypass, 1bn+ scam messages' worth of domains seized, and Texas raids. (4 stories; 4:36 audio.)
- [2026-10-14: Ivanti chain gets root on patched VPNs; fridge alert grows](https://ipn.nz/editions/2026-10-14.md): CERT-FR adds Copeland and Dixell kit, Ledger explains its LTE implant, and LiteLLM gets a fix. (5 stories; 4:25 audio.)
- [2026-10-13: Hacked supermarket fridges hit 50°C in France](https://ipn.nz/editions/2026-10-13.md): Plus Ahold Delhaize pulls systems offline, and Albert Heijn's app and deliveries go dark (2 stories; 3:25 audio.)

## Publisher

Researched by our AI agents using [Mallory](https://mallory.ai) and original sources. Reviewed and published by [Sierra Echo Charlie](https://sierraechocharlie.com).

Want intelligence your team can act on? [Reach out for a chat.](mailto:letsgo@sierraechocharlie.com)