National Cyber Security Centre (NCSC)

Stories

U.S. agencies warn of ongoing attacks on industrial refrigeration controllers

Warning operators and contacting exposed organizations

In August 2026, refrigerators failed at U.S. military commissaries. Attacks then hit hundreds of French supermarkets in October and spread in early November to stores in at least eight European countries, including Italy, Sweden and Belgium.

Updated 3 days ago

PHP vulnerabilities exploited as websites worldwide go offline

New Capabilities

Called the response 'unprecedented', said there were no indications of successful breaches, and sent 50,000 alerts to affected organisations

Palo Alto Networks confirmed that attackers chained the PHP2Shell flaws with a Linux kernel bug to take root control of its firewalls, and shipped hotfixes for PAN-OS 12.2, 12.1, 11.2, 11.1 and 10.2. Unit 42, the company's threat research arm, said it independently verified the tooling and results that Dream Security described.

Updated Nov 1