Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast

This week's roundup covers a fresh round of cyberattacks on refrigeration systems at European supermarkets, just weeks after a similar incident spoiled food in French stores overnight; US agencies including CISA and the FBI have since warned that threat actors are deliberately targeting cold-storage controllers protecting food and medicine. Other major stories include CISA ordering federal agencies to patch two actively exploited Ivanti Connect Secure flaws (CVE-2026-111357 and CVE-2026-118527), an OpenSSH authentication bug (CVE-2026-123158) being exploited within hours of disclosure on Alpine Linux and other musl-based systems, and a mismatched Zyxel GS1900 switch patch (CVE-2026-7273) that left the actually-exploited flaw CVE-2026-107441 unaddressed. The digest also details the FBI's attribution of the roughly $6.3 billion Binance crypto theft to North Korea's TraderTraitor group, a breach at blockchain analytics firm Chainalysis, and the November 2026 Patch Tuesday forecast highlighting lingering risk from October's record 1,400+ Microsoft fixes, including the actively exploited Windows Shell bug CVE-2026-96951.