3 November 2026 · Issue 34

Today's five AI headlines

What matters in AI today, explained for businesses. Every story with its original source.

01Critical Linux TCP flaw lets remote attackers run code; patch now
02Synology warns NAS ransomware attacks exploit already-patched DSM flaw
03Refrigeration cyberattacks force European supermarkets to pull food
04NCSC warns AI-powered ransomware against UK critical infrastructure by 2028

01Lead story1 min read

Critical Linux TCP flaw lets remote attackers run code; patch now

Red Hat and Canonical have disclosed fixes for CVE-2026-98432, a use-after-free bug in the Linux kernel’s IPv4 TCP handling that a remote, unauthenticated attacker can use to execute code. The kernel CVE team rates it 9.8, and Red Hat has moved its severity to critical. The flaw has existed since Linux 4.4. Red Hat has published fixed kernels for RHEL 8, 9 and 10 under specific errata; installing them requires a reboot. Ubuntu’s fixes for 22.04, 24.04 and 26.04 are only in the opt-in -proposed testing channel, so they will not arrive automatically and Canonical has not given a regular-release date. Administrators should install the fixed kernel, reboot, and verify the running version with uname -r. Because any listening IPv4 TCP port may be enough, this is a high-priority patch for internet-facing Linux estates.

thehackernews.com 3 November 2026

021 min read

Synology warns NAS ransomware attacks exploit already-patched DSM flaw

Synology is telling customers to update DiskStation Manager after ransomware attacks hit NAS devices running outdated DSM releases. The company says attackers are exploiting a vulnerability that was fixed in December 2024; although it did not identify the exact flaw, it linked to an advisory covering CVE-2024-10441, a 9.8-rated remote-code-execution issue in the system plugin daemon, plus two lower-rated bugs. Customers report C3RB3R ransomware encrypting files with a .L0CK3D extension. The practical exposure is any internet-reachable Synology NAS left on an old DSM build. Synology lists fixed versions: DSM 7.2.2-72806-1 or later, 7.2.1-69057-6 or later, 7.2-64570-4 or later, 7.1.1-42962-7 or later, and 6.2.4-25556-8 or later. Administrators should upgrade to the matching fixed build and check that backups are isolated.

thehackernews.com 3 November 2026

031 min read

Refrigeration cyberattacks force European supermarkets to pull food

Attackers remotely altered refrigeration settings at supermarkets in Belgium, Sweden, Estonia and other European countries overnight into 2 November, warming chillers and freezers. No chain reported more than several dozen affected stores, but some retailers discarded or withdrew chilled and frozen food. Danfoss, whose controls were involved, also had products in a French incident three weeks earlier that hit hundreds of supermarkets; no one had claimed the new attacks and a link was not established. The affected equipment is internet-connected refrigeration control gear that contractors use for remote monitoring and repair. In Belgium, units were switched to defrost mode; in Sweden and Estonia, setpoints were raised to 50°C, though one Estonian store recovered quickly without product loss. Danfoss had posted no advisory by 3 November; CERT-FR’s October alert still offered the most detailed operator steps. Retailers should treat refrigeration OT as exposed critical infrastructure and use that alert as guidance.

thehackernews.com 3 November 2026

041 min read

NCSC warns AI-powered ransomware against UK critical infrastructure by 2028

The UK’s National Cyber Security Centre has published a State of the Cyber Nation report warning that critical national infrastructure should prepare for a ransomware attack involving AI-powered malware by 2028. The NCSC assesses that such use is highly likely, and its cyber chief says years of choosing cheap technology over secure technology have left organisations exposed. The report calls for significant changes and urgent investment in resilience rather than treating AI as a future-only concern. For business leaders, the message is that AI-enabled attackers may find and exploit longstanding weaknesses at greater speed and scale, so exposure management, patching and incident readiness need board attention. The warning is a forward-looking assessment, not evidence of a specific attack. Firms in and around critical infrastructure should map dependencies, close known gaps and test response plans; all organisations should assume AI will sharpen existing threats.

ncsc.gov.uk 3 November 2026

Newsletter

The five headlines, every morning.

Free. Read in two minutes. Unsubscribe with one click in every issue.

Browse the archive Open the AI Wiki