ZeroDay Findings
Sign inSign up

Every 24 hours

Tech News

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

  1. Oct 14, 2026

    Fashion Retailer TFG London Faces Cyberattack Exposing Customer Data Risks

    The fashion retail sector continues to be a target for cybercriminals, with TFG London, the parent company of popular brands Phase Eight, Hobbs, and Whistles, confirming a cyberattack that may have compromised customer data. The incident was detected on October 11, 2026, and has raised concerns regarding the security of personal information for those who have shopped at these retailers. As the company investigates the breach, customers are left uncertain about the extent of the potential data exposure.

    What changed

    In a public statement, TFG London acknowledged that the attack affected certain IT systems, although specific details about the nature of the breach remain undisclosed. This lack of transparency can lead to heightened anxiety among consumers, who are increasingly aware of the risks posed by data breaches in the retail industry. The implications of such incidents are far-reaching, not only affecting customer trust but also potentially leading to financial repercussions for the company.

    Who is affected

    The fashion retail industry has seen a troubling trend of cyberattacks, with TFG London now joining a growing list of brands that have fallen victim to hackers. As retailers increasingly rely on digital platforms for sales and customer engagement, the importance of robust cybersecurity measures has never been more critical. This incident serves as a stark reminder for all businesses in the sector to evaluate their security protocols and ensure they are adequately protecting customer data.

    What it means

    As the investigation unfolds, affected customers are advised to monitor their accounts for any suspicious activity and remain vigilant against potential identity theft. The incident underscores the necessity for consumers to be proactive about their personal information, especially in light of the evolving cyber threat landscape. The fashion retail sector must respond by enhancing their cybersecurity strategies to mitigate future risks and rebuild consumer confidence.

  2. Oct 14, 2026

    Cyberattack Disrupts French Supermarkets, Targeting Smart Refrigeration Systems

    A recent cyberattack has prompted French supermarkets to take urgent measures to safeguard their refrigeration systems, affecting the stock of chilled food across numerous stores. The French Computer Emergency Response Team (CERT-FR) issued a warning advising supermarkets to disconnect any refrigeration control systems that have a public IP address from the internet. This recommendation comes after a significant cyber incident that primarily impacted the Danfoss AK-SC and AK-SM series refrigeration controllers, which are widely used in the industry. One of the most affected chains, Groupement Mousquetaires, which operates Intermarché and Netto brands, had to remove products from its fresh and frozen food display units due to the attack's consequences.

    What changed

    The CERT-FR's guidance includes updating firmware, adjusting security settings to 'strict,' and changing default passwords to enhance the security of these systems. In a bid to mitigate immediate risks, supermarkets may filter connections to allow only authorized IP addresses from refrigeration suppliers, although this is not seen as a sustainable long-term solution. The incident serves as a stark reminder of the vulnerabilities present in increasingly connected devices within the food retail sector.

    Who is affected

    The attack has raised alarms about the cybersecurity posture of operational technology in retail environments, highlighting the need for robust security measures. The incident not only affects the immediate stock of perishable goods but also poses broader implications for supply chain integrity and consumer trust. As the threat landscape continues to evolve, stakeholders in the food industry are urged to reassess their cybersecurity strategies to prevent similar incidents in the future.

    What it means

    In a statement reflecting on the incident, Dixell, a control systems vendor, emphasized that cybersecurity is a shared responsibility among all players in the industry. The attack underscores the interconnected nature of modern retail operations and the potential ripple effects that can occur when one segment is compromised. As supermarkets work to recover from this incident, the focus will likely shift towards strengthening defenses against future cyber threats.