Cybersecurity briefing — October 13, 2026.

Booz Allen’s lab tests show frontier AI models completing OT attack scenarios

Booz Allen says frontier AI models met all eight attack objectives in an isolated industrial-control testbed, including mapping networks, writing working exploits and reaching systems used to control production. In one run, a model moved from perimeter access into the control zone in just over 16 minutes; the tests required human sign-off before physical actions. The report says firewalls and segmentation slowed or flagged activity, but models sometimes changed methods or found alternate paths.

Why it matters For industrial defenders, the lab exposed a concentration of risk: one compromised SCADA gateway could provide access to multiple controllers while also enabling deceptive operator displays. This was demonstrated in a testbed, not a production intrusion.

Cyberattacks disrupt supermarket refrigeration in France and retail operations in the Netherlands and Belgium

BFMTV reported that attackers remotely tampered with Danfoss refrigeration controls at hundreds of French stores, leaving chilled and frozen goods spoiled; the affected chains reportedly included Intermarché, Netto, Super U and Leclerc. The cause of the refrigeration-system compromise has not been confirmed, and the report does not establish a link to vulnerabilities disclosed in August. Separately, Ahold Delhaize said it was addressing a network security issue, with disruption reported at distribution centers, stores and online services in the Netherlands and Belgium.

Why it matters For affected French grocers, the compromise translated into inventory losses rather than only IT downtime, with reported damage reaching tens or hundreds of thousands of euros at shops.

What to watch next Whether the attackers exploited the refrigeration-controller flaws disclosed in August remains unresolved; their existence alone does not establish the entry point.

Bitdefender finds malware preinstalled on low-cost Android phones

Bitdefender says its Midnight Mimosa campaign was found on thousands of devices in more than 150 countries, with malware embedded in firmware before affected phones were first switched on. The malware has system-level privileges and, according to the researchers, can install apps, collect device information and support ad fraud and residential-proxy activity. Because it resides in the system partition, Bitdefender says owners generally cannot remove it through ordinary app settings; the point in the supply chain where it is introduced remains unclear.