ZeroDay Findings
Sign inSign up

Every 24 hours

Tech News

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

  1. Oct 14, 2026

    Microsoft Windows Updates Cause Remote Desktop Connection Issues for Non-Admin Users

    Microsoft has acknowledged a significant issue affecting users of its Windows operating system, particularly those who rely on Remote Desktop Protocol (RDP) for remote access. Following the recent updates rolled out by Microsoft, non-administrative users have reported being unable to connect to devices through RDP when the 'Administrator protection' security feature is enabled. This situation is concerning for organizations that depend on remote connectivity for day-to-day operations, as it can hinder productivity and disrupt workflows.

    What changed

    The impact of this issue is particularly pronounced in enterprise environments where remote access is essential for employees to perform their tasks efficiently. Non-admin users, who typically require RDP access to carry out their duties, may find themselves unable to work remotely, leading to potential delays in project timelines and increased frustration among the workforce. Furthermore, IT departments are likely to face additional pressure to address the connectivity problems, diverting resources from other critical tasks.

    Who is affected

    As organizations navigate this challenge, they must weigh the importance of the 'Administrator protection' feature against the immediate need for remote access. This dilemma could prompt some businesses to temporarily disable the security feature to restore connectivity for their non-admin users, potentially exposing them to increased security risks during this period. Such a decision underscores the delicate balance between maintaining robust security measures and ensuring operational efficiency.

    What it means

    In response to this situation, organizations are encouraged to monitor updates from Microsoft for any patches or solutions that may address the Remote Desktop connectivity issue. Additionally, IT teams should prepare to communicate effectively with users affected by this problem, providing guidance on alternative access methods or workarounds until a permanent fix is implemented. The incident serves as a reminder of the complexities involved in managing software updates, particularly in environments where security and operational needs must coexist.

  2. Oct 14, 2026

    Cyberattack Disrupts French Supermarkets, Targeting Smart Refrigeration Systems

    A recent cyberattack has prompted French supermarkets to take urgent measures to safeguard their refrigeration systems, affecting the stock of chilled food across numerous stores. The French Computer Emergency Response Team (CERT-FR) issued a warning advising supermarkets to disconnect any refrigeration control systems that have a public IP address from the internet. This recommendation comes after a significant cyber incident that primarily impacted the Danfoss AK-SC and AK-SM series refrigeration controllers, which are widely used in the industry. One of the most affected chains, Groupement Mousquetaires, which operates Intermarché and Netto brands, had to remove products from its fresh and frozen food display units due to the attack's consequences.

    What changed

    The CERT-FR's guidance includes updating firmware, adjusting security settings to 'strict,' and changing default passwords to enhance the security of these systems. In a bid to mitigate immediate risks, supermarkets may filter connections to allow only authorized IP addresses from refrigeration suppliers, although this is not seen as a sustainable long-term solution. The incident serves as a stark reminder of the vulnerabilities present in increasingly connected devices within the food retail sector.

    Who is affected

    The attack has raised alarms about the cybersecurity posture of operational technology in retail environments, highlighting the need for robust security measures. The incident not only affects the immediate stock of perishable goods but also poses broader implications for supply chain integrity and consumer trust. As the threat landscape continues to evolve, stakeholders in the food industry are urged to reassess their cybersecurity strategies to prevent similar incidents in the future.

    What it means

    In a statement reflecting on the incident, Dixell, a control systems vendor, emphasized that cybersecurity is a shared responsibility among all players in the industry. The attack underscores the interconnected nature of modern retail operations and the potential ripple effects that can occur when one segment is compromised. As supermarkets work to recover from this incident, the focus will likely shift towards strengthening defenses against future cyber threats.