France attributes refrigeration cyberattacks to Iran.

Summary

By the N2K CyberWire staff

France attributes refrigeration cyberattacks to Iran.

France has blamed a recent spate of cyberattacks against industrial refrigeration systems on Iran, the Wall Street Journal reports. The attacks hit more than 700 supermarkets across France, raising temperatures and spoiling tens of millions of dollars' worth of food. The hackers also attempted to destroy blood supplies at a French blood bank, and similar attacks hit supermarkets in other European countries last week.

French officials attributed the hacks to the Shahid Kaveh offensive cyber unit, which is associated with the Electronic and Cyber Warfare Command of Iran’s Islamic Revolutionary Guard Corps. The Paris prosecutor's office is seeking international arrest warrants for the leaders of Shahid Kaveh.

French Foreign Minister Jean-Noël Barrot said at a G-7 meeting that Tehran would face retribution for the attacks, adding, "This is the first large-scale cyberattack carried out for the purpose of sabotage on national territory, and it constitutes a major threat to the nation’s interests and the security of the French people."

US authorities are also investigating the attack campaign and have said the hacks bear the hallmarks of past Iranian cyberattacks, but the US hasn't made an official attribution.

Privileged Access Management is changing. So is the Gartner® MQ.

Privileged access now extends beyond traditional administrator accounts to vendors, machines, applications, workloads, and AI identities. See how Gartner evaluates the PAM market and where Xage Security is positioned in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management. See the 2026 Gartner® Magic Quadrant™ for PAM.

Trump nominates Palantir’s CISO to lead CISA.

President Trump has nominated Michael LoSapio, Chief Information Security Officer at Palantir Technologies, to lead the US Cybersecurity and Infrastructure Security Agency (CISA), Nextgov reports. LoSapio has been with Palantir since 2017, serving as its CISO since September 2024. He now awaits Senate confirmation.

CISA has been without a permanent director for nearly two years, with Nick Andersen serving as Acting Director since February 2026.

Where cyber leaders come together to turn challenges into action.

The Aspen Cyber Summit brings together leading voices from government, industry, and civil society to address the cybersecurity challenges shaping our future. Join senior leaders and experts in Washington, DC, for consequential conversations focused on moving beyond identifying risks to advancing actionable, cross-sector solutions.

Business news: ShorePoint acquires cybersecurity contracts from Coalfire Federal.

Herndon, Virginia-based cybersecurity provider ShorePoint has acquired a portfolio of cybersecurity contracts from Coalfire Federal, with the teams supporting these contracts joining ShorePoint. ShorePoint stated, “The acquisition adds cybersecurity engineering, automation, and assessment depth, and opens new customer relationships across the federal civilian, defense, and state and local sectors. The acquisition adds a substantial number of prime contracts across new federal agency customers to ShorePoint’s portfolio, significantly broadening ShorePoint’s customer base, technical capabilities, and presence across the federal cybersecurity market. Coalfire Federal will continue to operate independently following the transaction.”

The Builder Exchange: A Day of Research, Data, and Real Stories

When anyone can ship an app, who owns the risk? Join Troy Hunt and Orca’s CEO Gil Geron as they walk through governance for citizen builders and how to frame it for your board. You'll also hear from security leaders on what they found when other teams started building with AI, plus new research from the Orca Research Pod and IDC’s Grace Trinidad. Register Now.

Attacks, Threats, and Vulnerabilities

IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks (SecurityWeek) CISA has added CVE-2026-123218 and CVE-2026-116779 to KEV, urging federal agencies to patch them within three days.

Exchange for breakfast: Turla’s Cereal tricks are not for kids (ESET) ESET Research describes Turla’s Cereal toolset, featuring a novel Exchange email collection module, a unique C&C mechanism, and sophisticated .NET execution tricks.

Hackers now exploit critical Barracuda ESG flaws to gain root access (BleepingComputer) Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges.

Trends

Probably Not Exploitable (ProjectDiscovery) If you've worked in security for any length of time, you've definitely turned to a colleague and said some version of "this probably isn't exploitable" and moved on. Usually late in the day, with a few dozen other findings waiting and a release going out in the morning.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

CyberMarketingCon 2026 (Austin, Texas, USA, Nov 15 - 18, 2026) A conference for cybersecurity GTM leaders and doers. Cybersecurity marketing is specific, often technical, and constantly changing. Stay up-to-date with the latest in marketing in the cybersecurity industry while networking with your peers.

NATO Edge 26 (Fuar İzmir, Turkey, Nov 17 - 19, 2026) In a world where speed, scale, and resilience define defence, NATO Edge 26 brings together NATO, Allies, and industry to deliver the capabilities our Alliance demands. Faster, smarter, and together. This is not just another conference. NATO Edge 26 introduces a new, more interactive and mission-driven format placing industry in the forefront to foster practical cooperation, accelerate delivery, and strengthen readiness across the defence and technology spectrum.

Aspen Cyber Summit (Washington, DC, USA, Nov 18, 2026) The Aspen Cyber Summit is the nation’s premier annual technology and cybersecurity policy gathering, bringing together the top voices from government, industry, and civil society to create a safer world, online and off.

AI Security Summit 2026: Zero Trust (Virtual, Nov 18 - 19, 2026) AI agents are now making decisions, touching sensitive systems, and acting on your organization's behalf, often faster than any human can review. Attackers are moving at that same machine speed, and non-human identities already outnumber your workforce many times over. CSA has been tracking this shift as the AI Vulnerability Storm, a wave of AI-discovered exploits arriving faster than most security teams can patch. The old perimeter was never built to govern any of this, and the next incident is not a matter of if, but when. Implementing Zero Trust principles is essential to deploying AI safely at scale. It replaces implicit trust with continuous verification, which is exactly what autonomous agents and machine identities require. CSA has spent years helping define what that looks like in practice. Our Zero Trust Advancement Center (ZTAC), Certificate of Competence in Zero Trust (CCZT), and research like our AI Vulnerability Storm briefings all contribute to that foundation. That same research and expert network informs the agenda for CSA's FREE two-day virtual AI Security Summit 2026: Zero Trust, where practitioners can learn alongside the people doing this work.

NVIDIA GTC (Washington, DC, USA, Nov 30 - Dec 3, 2026) Connect with developers, researchers, industry partners, public sector professionals, and policymakers to learn how AI is helping drive innovation in the U.S. economy. The conference will feature CEO Jensen Huang’s keynote, expert sessions, live demos, and hands-on workshops covering everything from open models and AI factories to physical AI, high-performance computing, and scientific advancement. GTC takes place at the Ronald Reagan Building and International Trade Center, plus venues across the city.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry's largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust N2K CyberWire to get the message out. Learn more.

Daily Briefing for 11.10.26

Top stories.

France attributes refrigeration cyberattacks to Iran.

Trump nominates Palantir’s CISO to lead CISA.

Business news: ShorePoint acquires cybersecurity contracts from Coalfire Federal.

Attacks, Threats, and Vulnerabilities

Trends

Events