The short version
Today in 4 stories
- Cyberattack on French supermarket refrigeration triggers food lossesA cyberattack on French supermarket refrigeration controls destroyed stock across hundreds of stores.
- GitLab issues emergency fix for maximum-severity remote code execution flawGitLab patched a maximum-severity flaw letting unauthenticated attackers run code on self-managed servers.
- Anthropic launches free AI scanner for open-source vulnerability discoveryAnthropic's new AI tool scans open-source code for flaws but still needs human review before action.
- ISACA opens cybersecurity staffing and AI governance survey findingsISACA's latest annual report covers cybersecurity staffing, insurance and AI governance trends.
Cyberattack on French supermarket refrigeration triggers food losses
Hackers manipulated refrigeration defrost cycles at hundreds of French supermarket branches operated by groups including Intermarché, Coopérative U, Carrefour and Monoprix, pushing temperatures to 50°C and forcing stock to be discarded. French prosecutors and national cybersecurity agency ANSSI are investigating; the equipment vendor involved, Danfoss, said affected systems used outdated firmware, though no confirmed exploit method has been established.
GitLab issues emergency fix for maximum-severity remote code execution flaw
GitLab released updates for CVE-2026-97229, a CVSS 10.0 integer-overflow vulnerability in CI/CD pipeline configuration processing that could let an unauthenticated attacker execute code on self-managed servers. GitLab.com is already patched; self-managed Community and Enterprise Edition installations on branches earlier than 19.2.8, 19.3.4 and 19.4.2 need immediate upgrading.
Anthropic launches free AI scanner for open-source vulnerability discovery
Anthropic's new OSS Scanner uses its AI models to search open-source projects for security vulnerabilities and send reports directly to maintainers without prior human triage. Anthropic's dashboard shows thousands of candidate findings, with a smaller share reviewed and validated so far, and warns reports may include exaggerated severity or misunderstood threat models.
ISACA opens cybersecurity staffing and AI governance survey findings
ISACA published its State of Cybersecurity 2026 report covering trends in staffing, cyber insurance, the threat landscape, AI incident preparedness and AI governance, aimed at the profession during Cybersecurity Awareness Month.
The takeaway
What to do this week
This week, confirm patch status on any self-managed GitLab instances and review remote-access arrangements for connected operational equipment such as refrigeration, HVAC or building controls. Treat AI-generated vulnerability reports as a starting point requiring human validation, not a finished finding.
Where this comes from
Compiled by Cyentrix from 5 newsletters received 11 to 13 October 2026 (ISACA, "The Cyber Security Hub™ via LinkedIn"). Summaries are drafted with AI assistance from the newsletter text and edited for length; follow the source links for the full reporting. Cyentrix is not the original reporter of these items.