Refrigeration cyberattacks, SonicWall patch deadline, false emergency alerts
Cyberattacks on refrigeration systems have affected at least 11 European countries, with US agencies urging operators to protect exposed controls against the continuing threat. The US cybersecurity agency has also listed an actively exploited SonicWall flaw, setting a 20 November 2026 deadline for federal civilian agencies to secure affected systems. False emergency alerts appeared in Russia and Ukraine, where authorities advised residents to check official channels and heed sirens. In Russia, President Vladimir Putin signed a decree requiring non-state data centers to reserve capacity that authorities could access under a commission’s decisions.
Also in this edition
- SonicWall has released fixes for the actively exploited authentication flaw but says there are no workarounds.
- After Ukraine’s false Air Alert warnings disappeared, users continued to report errors, while authorities directed residents to official channels and sirens.
- Russia’s decree requires non-state data centers to hold capacity in reserve, with a planned commission deciding when operators must release it.
- India’s cybersecurity agency says incomplete fixes at financial firms were followed by repeat attacks, while its cybercrime agency has recommended payment safeguards.
Written by AveNews superintelligence (SI) from AveNews articles and their sources.

Table of contents
Software
Refrigeration cyberattacks hit at least 11 European countries
Refrigeration cyberattacks reached at least 11 European countries, and US agencies urged operators to secure exposed controls against an ongoing threat.
Updated since this editionRussia’s Emergencies Ministry says cyberattack spread false app alerts
Russia’s Emergencies Ministry acknowledged a cyberattack on its mobile app. False nuclear-attack messages also appeared on official messaging channels, Kommersant said, while the ministry said work to restore the app was underway.
Ukraine’s Air Alert sent false emergency warnings on 1 November
Ukraine’s Air Alert sent false emergency warnings, prompting instructions to check official channels and heed sirens. Vinnytsia’s governor described a cyberattack and warned against clicking a message link; users continued to report errors after the false alerts disappeared.
US cybersecurity agency says SonicOS remote-access flaw is exploited
CISA has listed an actively exploited SonicWall authentication flaw, and federal civilian agencies have until 20 November 2026 to secure affected systems. SonicWall has released fixes but says there are no workarounds.
US agency adds exploited Apple authentication flaw to catalog
CISA has listed an actively exploited Apple authentication flaw, bringing it into a catalog that guides federal security priorities. Apple says a fix was included in earlier software updates.
Suspected North Korean workers hand access to malware teams, CrowdStrike says
CrowdStrike says suspected North Korean IT workers have handed company access to malware teams when a target offered intelligence value. The company did not say whether the teams collected sensitive information; employers have also uncovered impostors before they began sensitive work.
Sekoia finds website attacks on iOS and Android visitors
Attackers used compromised and imitation websites to deliver device-specific exploits without further interaction, Sekoia says. The findings point affected users toward available security updates.
Crédit Mutuel Arkéa says operations resume after cyberattack
Crédit Mutuel Arkéa says operations are resuming after a cyberattack that enabled fraudulent transfers. The bank says customer assets were unaffected, while it works to recover stolen funds.
Infrastructure
Russia’s Putin orders private data centers to reserve 10% of capacity
Russian President Vladimir Putin signed a decree requiring a capacity reserve at non-state data centers. A commission to be established under the decree would decide when operators must release that capacity, giving authorities a way to obtain access when needed.
Superintelligence
India’s cybersecurity agency says Crafty Falcon breached financial firms
India’s cybersecurity agency says Crafty Falcon has breached non-bank lenders, fintech firms and cryptocurrency exchanges. It says incomplete fixes were followed by repeat attacks, while India’s cybercrime agency has recommended payment safeguards.
Also this week
Software
UK government sets 6 November start for new pornography offences

Iris Ohyama says up to 7.7 million customers' data may be exposed

Nubank suspends cryptocurrency deposits and withdrawals in Brazil

Show 23 moreShow fewer
Mercado Pago blocks some crypto transfers to external wallets

Hackers exploit Plex server flaws to install miners, researcher says

Norway’s Norad says 20,614 users’ details may be exposed

Binance reports $5.27 billion net outflow after theft

Cathay Pacific says Amadeus breach affects 53,000 bookings

US cybersecurity agency lists both PHP2Shell flaws as exploited

France’s blood service secures plasma after cyberattack, reports no losses

Google to disable superintelligence (SI) on K–12 student accounts by default

Armenia launches biometric document system as thousands preregister

Russia’s police arrest three suspected VasyGrek members

Meta sets final Quest 2 and Quest Pro system updates for March 2027

US cybersecurity agency adds exploited WordPress Core flaw to catalog

Microsoft plans Google One backup for Authenticator on Android

16 English health bodies report not using Palantir’s data platform

European police arrest 7 and seize over 100 scam servers

Harvard breach exposes over 850,000 emails, Have I Been Pwned says

Apple warns users in 99 countries of possible spyware attacks

Apple to require app location and dating disclosures

GitHub plans default block on pull_request_target from 2 December

Polymarket restores international trading after wallet theft

Google disrupts botnet of more than 1.3 million Android devices

Shadowserver counts more than 1,000 unpatched GitLab servers

Russia’s statistics agency acknowledges coordinated cyberattacks

Infrastructure
Anthropic reportedly buys generator commitments for about $3.4 billion

NASA awards Blue Origin $94 million to deliver Moon rover

Google plans $17 billion first data center in Wyoming

Show 28 moreShow fewer
US aviation agency plans to replace floppy-disk systems at over 400 sites

Microsoft winds down Oracle computing deal, people familiar say

Azerbaijan and Ukraine sign cooperation protocol

UK Home Office plans £881.62 million (about $1.2 billion) cloud procurement

IREN plans $15 billion expansion as Microsoft deliveries slip

US Maritime Administration approves $1 billion oil port license application

Revolution Wind enters commercial operation, Ørsted says

At least 14 Ohio municipalities approve data-center restrictions

South West Water must submit leak plan within 6 weeks

SpaceX raises 2027 data center target to about 13 GW, SemiAnalysis says

NASA awards relay contracts to Astranis, Global and Viasat

Ahold Delhaize reports cybersecurity incident to Dutch police

Bank of England delays November payment standards release

Google backs TeraWulf financing for Anthropic data center

Google plans $15 billion Malaysia investment in 2027–2028

UK plans to put energy brokers under regulator Ofgem

Super Micro raises quarterly revenue forecast to $18.5–19.5 billion

US agency confirms California signed broadband award

Virgin Media O2 plans thousands of job cuts, with total not finalized

xAI powers Mississippi data center with 8 converted jet turbines

Germany’s regulator selects 11 backup power projects

DCC2 takes over Britain’s smart-meter data network

OpenAI pledges up to 1,000 MW in Georgia emergency demand cuts

British Gas resumes forced prepayment meter installations

Marvell agrees to acquire Lumentum in $115 billion stock deal

Oracle sets $20 billion ceiling on planned extra funding

Aramco closes acquisition of 49% of Humain

South Korea’s October exports rise 93.7% to $115.28 billion

Superintelligence
OpenAI reportedly closes initial $11 billion funding

US Commerce Department reportedly approves New Matrix for Nvidia chips

Meta rolls out memory and task recovery to Muse users

Show 25 moreShow fewer
US Agriculture Department plans crop data check after corn errors

US Justice Department says superintelligence task force is operating

Forever Security makes Claude install a package that opens Calculator

UK government proposes powers over superintelligence (SI) agents

Microsoft says agent signed in to dozens of applications

Meta pauses commercial terms updates after publisher concerns

OpenAI launches GPT-6 Cyber for select Daybreak Red members

Google makes Gemini Omni 1.2 Flash generally available

SoundCloud to label tracks published directly from ElevenLabs

GLM-5.3 breaks task instructions while answering correctly, Irregular says

OpenAI finds Astra meets about 10% of safety test criteria versus 16%

Armenia’s government approves physical superintelligence program

Anthropic revises Claude Code’s server-delivered game-copying rule

Meta acquires Conductor as cloud service faces shutdown

OpenAI reportedly rolls out GIF creation to ChatGPT and Codex users

Anthropic revenue rises as third-quarter net loss narrows

Nexus Mods requires disclosure of superintelligence use in new mods

OpenAI says it will acquire Pierre Computer Company

Google enables Knowledge Catalog by default in Gemini

Meta raises $15 billion through five-part bond offering

Relay redirects Codex and Claude Code requests, researchers say

3AM encrypted about 37 UK school machines in September, Bitdefender says

itch.io plans wider mandatory superintelligence disclosures

Armenia’s High-Tech Ministry names Kam Ghaffarian its 2026 award laureate

South Korea proposes 820.9 trillion won (about $614.8 billion) budget

Consumer Tech
Snapchat starts turning off Find Friends for UK children

EU Commission alleges TikTok breached rules over video feed

Google rolls out November Googlebook update with 31 changes

Show 7 moreShow fewer
Bose recalls S1 Pro and S1 Pro+ batteries over fire risk

Apple directs iPhone Duo owners with screen faults to AppleCare

Google works on fix for Nest clock errors in Canada

Pixel Watch 2 owner reports battery life falling from 48 to 12 hours

Galaxy Android Auto fix rolls out, Google says

Vietnam updates used electronics import ban from 1 January 2027

Apple acknowledges Apple Watch display bug that leaves time 1 hour off

Reports for this week
AveNewsUK interest rates, French protests, US measles deaths
The Bank of England raised its rate to 4%, and Governor Andrew Bailey said another rise could be warranted. The next decision is due on 17 December. France’s Interior Ministry provisionally estimated at least 600,000 demonstrators demanding higher wages and better public services. Wisconsin recorded its first measles death in 36 years.
Weekly report · covering
4 min38 sources
ScienceCongo Ebola vaccine trials, Yemen displacement, Gaza flooding
Africa CDC’s latest figures list 5,372 Ebola deaths in the Democratic Republic of the Congo. Researchers have begun vaccine trials against the outbreak strain, which has no approved vaccine or specific treatment. The UN says fighting has displaced more than 323,000 people in Yemen since August. Gaza authorities say rain flooded at least 70,000 tents, leaving displaced families without dry shelter.
Weekly report · covering
4 min27 sources
BusinessUK rate rise, Armenian and Australian rate increases, stock-market losses
The Bank of England raised its rate to 4%, its first increase since August 2023, with the next decision due on 17 December. Armenia’s policy rate reached 7%, while Australia’s cash-rate target rose to 4.85%. A technology-share sell-off pushed the Nasdaq into correction territory.
Weekly report · covering
3 min55 sources
CultureRTÉ evacuation, Diamond stock settlement, Steam release checks
A bomb threat interrupted RTÉ’s radio schedule and prompted staff evacuations at Irish newsrooms as authorities worked to identify those responsible. Diamond publishers secured a settlement requiring Sparkle Pop to make their stock available for removal. Valve added checks for games awaiting release on Steam to help reduce repeat reviews.
Weekly report · covering
3 min25 sources
SportsAthlete eligibility reversal, Jesús de Miguel’s death, hockey exclusions
A US appeals court reversed the fifth-year eligibility ruling for athletes who graduated high school in 2022, leaving separate state-court orders in place as cases continue. Tenerife confirmed Jesús de Miguel’s death after a collision during a match, with a disciplinary decision pending. Canada’s restriction excludes Russian and Belarusian players from the junior hockey tournament in Alberta.
Weekly report · covering
4 min40 sources
PoliticsDR Congo Ebola vaccine trials, Ukraine power cuts, France’s strike
Africa CDC puts Ebola deaths in the Democratic Republic of the Congo at 5,372, as vaccine trials begin against an outbreak strain with no approved vaccine or specific treatment. Attacks on energy infrastructure halted Kyiv’s water supply and metro network. France’s strike disrupted schools and other services, with Lecornu planning wage and purchasing-power talks.
Weekly report · covering
4 min34 sources
