Last Week's Security Incidents
-

European Supermarket Refrigeration System Cyberattacks
OT Security Retail Infrastructure Forced Defrost Abuse Credential Risk Food-Safety Impact
Coordinated attacks reportedly manipulated refrigeration controls across multiple European supermarket chains, causing temperature spikes and operational disruption.
-

Google Disrupts a Botnet Affecting More Than 1.3 Million Android TV Devices
XCPE Botnet Android TV Firmware Backdoor MQTT C2 Supply-Chain Risk
Google and partners reported disruption of a large Android TV botnet tied to persistent firmware-level backdoor behavior and downstream criminal abuse.
-

Telegram Android Voice Call Vulnerability - Remote Code Execution (RCE).
Telegram Android Voice Calls Potential RCE No CVE Assigned Patched in 12.10.4
A Telegram Android call-handling flaw in MediaState processing may allow code execution after a victim answers a maliciously crafted voice call.
-

Android SMS of Death - CVE-2026-58882
Android WAP Push CVE-2026-58882 Zero-Click Telephony DoS
A crafted invisible WAP Push SMS can crash Android telephony services with no user interaction, causing call disruption and potential emergency-call impact.