Hackers Hijack French Blood Plasma Freezers via Cooling Vendor

💥 BREACHES & INCIDENTS

• Hackers Hijack French Blood Establishment Plasma Freezers via Cooling Vendor Coolworld
  Hackers changed temperature settings on French Blood Establishment (EFS) freezers from −30°C to a 110°C setpoint after compromising its cooling service provider Coolworld.
  • Affects the French Blood Establishment (EFS), including facilities in Bourgogne-Franche-Comté, and its cooling service provider Coolworld, which supplies temperature-controlled medical refrigeration.
  • Attackers altered freezer setpoints from about −30°C to 110°C overnight between November 1 and 2, 2026, targeting donor samples and frozen plasma stored for transfusions (fresh frozen plasma requires storage at −25°C or below).
  • An on-call technician noticed rising temperatures during the night, and France's Health Ministry said the incident caused no operational consequences; no destroyed plasma or patient harm is confirmed.
  • No public technical findings identify the attackers, entry method, controller model, or exploited vulnerability; the 110°C figure is a setpoint, not a confirmed product temperature.
  • The incident follows October 2026 attacks on supermarket refrigeration using internet-exposed Danfoss AK-SM/AK-SC, Copeland, and Dixell XWEB controllers, though no evidence connects those systems to the EFS incident.
  Sources 📄 Source: cyberattaque.org · 📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News, cryptika.com (discovered)

🕵️ RESEARCH & DEEP DIVES

• Hackers brick Chinese EVs in Russia
  Hackers have remotely bricked Chinese electric vehicles in Russia.
  • Owners of Chinese EVs in Russia, including Li Auto models, are targeted.
  • Hackers remotely lock out and disable the vehicles, bricking them.
  • The attacks exploit the cars' internet-connected remote control features; related hacks have also immobilized Porsches via their satellite-linked tracking systems.
  Sources 📎 Coverage: risky.biz · 👁 via Risky Business News

📋 ADVISORIES

• 📄 Source for Philippines Probes Theft of 68GB of Migrant-Worker Database Backups from DMW — newsbytes.ph

🔓 CVEs & KEV

• CVE-2026-121802 — better-auth Better Auth — CVSS 9.1 — @better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g...

• CVE-2026-84730 — ASUS Router firmware — CVSS 8.7 — Stack-based buffer overflow in certain ASUS Router firmware allows an unauthe...

• CVE-2026-84729 — ASUS Router firmware — CVSS 7.2 — Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated ...