Weekly Cybersecurity Digest [October, Week 2]
Posted on October 13, 2026
Dear Valued Clients,
Welcome to this week’s cybersecurity digest from Make Sense. Across Europe, recent developments highlight how the consequences of a cyber incident can extend far beyond the digital environment, affecting physical operations, sensitive information and essential business services.
As organisations become more dependent on connected equipment, external technology providers and increasingly complex digital ecosystems, understanding these relationships is becoming as important as securing individual systems. This week’s developments raise important questions about operational resilience, accountability and whether existing security measures are keeping pace with the environments they are designed to protect.
✅ Top Stories of the Week
i. Cyberattack Disrupts Refrigeration Systems at Hundreds of French Supermarkets
A cyberattack disrupted refrigeration systems at hundreds of French supermarkets, including Intermarché, Coopérative U and E.Leclerc, forcing stores to discard spoiled fresh and frozen products. The attack reportedly exploited older refrigeration-control equipment, with Danish manufacturer Danfoss confirming that some affected systems no longer received security updates. French authorities opened an investigation, while the incident highlighted how vulnerabilities in connected operational technology can create immediate physical and financial consequences. [Read more via AFP]
ii. ASOS Confirms Customer Data Exposure Following Employee Account Compromise
British online fashion retailer ASOS confirmed that attackers gained access to an employee account by impersonating a trusted contact and obtaining login credentials. The stolen credentials were then used to access information on third-party platforms, exposing some customer names, contact details and other account-related information. Attackers also sent an unauthorised notification through the ASOS app. The company said payment-card information and account passwords were unaffected. The incident demonstrates how social engineering can turn legitimate employee access into broader business and customer-data exposure. [Read more via The Record]
iii. Swiss Federal Pension Fund Confirms Data Leak Following Supplier Cyberattack
Swiss authorities confirmed a data leak involving Publica, the federal pension fund, following a cyberattack on an external software provider at the end of September. The supplier notified affected organisations, while federal authorities launched an investigation to determine which information had been compromised. Publica also informed its members about the incident. Although the full extent of the exposure remains under assessment, the case reinforces how a security failure at a technology provider can affect sensitive information held on behalf of public institutions. [Read more via Swiss Federal Authorities]
✅ Industry Trends & Insights
Thousands of European Wind and Solar Energy Systems Found Exposed Online
Research by Dutch cybersecurity company Modat, conducted with the Netherlands’ National Cyber Security Centre, identified 8,547 internet-exposed systems connected to wind farms and solar parks across 35 European countries. The exposed assets included management interfaces and operational control systems, some potentially allowing remote control of energy equipment. The findings highlight a significant visibility and access-control challenge as Europe’s renewable-energy infrastructure becomes more digitally connected. [Read more via Modat]
ClickFix Campaign Uses Over 100 Compromised Ukrainian Websites to Spread Malware
Ukraine’s CERT-UA warned that attackers had compromised more than 100 legitimate websites and inserted malicious code displaying fake Cloudflare verification pages. Visitors were instructed to run commands that installed Lunex Stealer, malware capable of stealing credentials, browser information and other sensitive data. The campaign demonstrates how attackers can exploit users’ familiarity with routine security checks, turning a supposedly protective verification process into a malware-delivery mechanism. [Read more via Ukraine’s Government Portal]
ESET Reveals How Russian-Aligned MATCHBOIL Malware Has Evolved
Slovak cybersecurity company ESET reported that the Russia-aligned UAC-0099 group has continued developing its MATCHBOIL malware, used in cyberespionage operations targeting Ukrainian transportation, manufacturing and energy organisations. Newer versions include stronger code obfuscation and mechanisms for downloading additional malicious components. The research shows how targeted attackers continuously refine their tools to maintain access and complicate detection, particularly in sectors supporting critical operations.[Read more via ESET Research]
✅ Regulatory & Policy Updates
Norway Fines Microsoft-Owned Xandr NOK 92 Million Over Unlawful Data Sharing
Norway’s Data Protection Authority imposed a NOK 92 million fine on Microsoft-owned advertising technology company Xandr for unlawfully processing and sharing sensitive information relating to Grindr users. The case concerned advertising activities between 2018 and 2020, including the sharing of information capable of revealing users’ sexual orientation. The regulator rejected the argument that responsibility rested solely with the original data collector, reinforcing that organisations receiving and processing personal data remain accountable for ensuring a valid legal basis. [Read more via the Norwegian Consumer Council]
UK Expands AI-Powered Cyber Defence Across Government
The UK government announced an expansion of its frontier-AI cybersecurity programme after pilot projects used AI to identify and address 1,352 vulnerabilities across 548 code repositories in 18 departments. Officials also outlined plans to strengthen responses to serious incidents involving autonomous AI agents and consider related risks under the Cyber Security and Resilience Bill. The development reflects growing government investment in practical AI-enabled cyber defence and incident preparedness. [Read more via UK Parliament]
✅ Cyber IQ Challenge + Proactive Security Hacks
Quick Quiz: Your organisation uses internet-connected equipment to monitor and control critical physical operations. What provides the strongest protection against attackers remotely manipulating that equipment?
A) Rely on the equipment manufacturer to manage all security risks
B) Keep the equipment connected to the internet but change administrator passwords annually
C) Restrict external access, segment operational networks, maintain supported software and firmware, and monitor for unauthorised control activity
D) Focus security monitoring exclusively on corporate IT systems because operational equipment is unlikely to be targeted
(Answer below)
Smart Security Moves of the Week:
- Review operational technology exposure: Identify remotely accessible industrial controllers, monitoring systems and connected equipment. Remove unnecessary internet access and restrict authorised connections.
- Prioritise unsupported equipment: Track end-of-life hardware and software, particularly where equipment supports physical operations. Establish replacement plans or compensating controls where updates are unavailable.
- Strengthen employee identity protection: Use phishing-resistant MFA, verify unexpected authentication requests and monitor suspicious access to corporate and third-party platforms.
- Assess supplier data exposure: Understand what sensitive information external technology providers process, how it is protected and how quickly your organisation would be informed of an incident.
- Recognise fake security verification prompts: Train employees never to execute commands or install software merely because a website presents a CAPTCHA or security-check message.
Answer: C) Restrict external access, segment operational networks, maintain supported software and firmware, and monitor for unauthorised control activity.
Connected operational equipment can create consequences far beyond the digital environment. Strong protection therefore requires not only secure technology, but also visibility into who can access it, what actions are permitted and how abnormal behaviour can be detected and contained.
✅ Conclusion
This week’s developments reinforce an important point: the impact of a cyber incident is not determined solely by the system that was compromised, but also by everything that depends on it.
For organisations, this means looking beyond traditional IT security to understand how technology supports business operations, where responsibilities are shared with external providers, and whether critical systems remain adequately protected throughout their lifecycle. Effective resilience requires these dependencies to be visible, their risks to be understood, and the ability to respond before a technical incident becomes a wider operational problem.
Final reflection: Which digital dependency could cause the greatest disruption to your organisation if compromised, and how confident are you that its risks are being actively managed?
At Make Sense, we help organisations translate cyber complexity into practical resilience across Europe’s evolving threat, technology and regulatory landscape.
Stay secure,
The Make Sense SRL Team & CyberTania
