{"id":3994,"date":"2026-11-06T06:25:58","date_gmt":"2026-11-06T14:25:58","guid":{"rendered":"https:\/\/cyber.mag212.com\/the-cold-chain-is-now-a-target-mag212-cyber-daily-november-6-2026\/"},"modified":"2026-11-06T09:31:20","modified_gmt":"2026-11-06T17:31:20","slug":"the-cold-chain-is-now-a-target-mag212-cyber-daily-november-6-2026","status":"publish","type":"post","link":"https:\/\/cyber.mag212.com\/fr\/the-cold-chain-is-now-a-target-mag212-cyber-daily-november-6-2026\/","title":{"rendered":"La cha\u00eene du froid est d\u00e9sormais une cible\u00a0: OpenSSH exploit\u00e9, WordPress KEV Deadline et Zyxel\u00a0: MAG212 CYBER Daily, 6 novembre 2026"},"content":{"rendered":"
Read the full edition (PDF, 16 pages, 0.3 MB) \u2192<\/a><\/div><\/div>\n\n

Today’s lead is the cold chain. After weeks of remotely triggered defrost cycles in European supermarkets and an attempt on three French plasma stores, five US agencies told operators on November 5 to harden refrigeration and cold-chain monitoring systems. Around it, two flaws moved from “patched” to “exploited”: OpenSSH’s password bypass on Alpine and other musl systems was used to gain root on a research honeypot, with the first attempt less than nine hours after disclosure, and today is the federal deadline for the WordPress core flaw CISA added to its exploited list. Every story was checked against vendor, government and original research sources.<\/p>\n\n

Qu'est-ce qui requiert notre attention aujourd'hui ?<\/h2>\n\n
Histoire<\/th>Statut<\/th>Faites ceci<\/th><\/tr><\/thead>
Refrigeration & cold chain<\/td>US joint warning Nov 5 (CISA, FBI, HHS, USDA, DOT); EU warning Nov 4; EFS plasma sites hit Nov 2<\/td>Take controllers off the internet, isolate them on their own VLAN, alert on setpoints outside safe ranges<\/td><\/tr>
OpenSSH “sshole” (CVE-2026-123158)<\/td>Root on an Alpine honeypot reported by Previdian; first attempt within 9 hours of disclosure<\/td>Install your Alpine branch’s fixed openssh and restart sshd, or set PasswordAuthentication no now<\/td><\/tr>
WordPress core (CVE-2026-119977)<\/td>In CISA KEV since Nov 3; federal deadline today<\/td>Confirm 7.1.4 or your branch’s back-port; run wp core verify-checksums<\/td><\/tr>
Zyxel GS1900 (CVE-2026-107441)<\/td>Zero-day per Binarly; ThaiCERT alert Nov 6<\/td>Install Patch 3 firmware; restrict web management to an admin VLAN<\/td><\/tr>
Apache OFBiz 24.09.08<\/td>46 CVEs, several unauthenticated RCE; no exploitation reported<\/td>Upgrade, then rotate secrets (hard-coded JWT key fixed)<\/td><\/tr>
DreamHost File Manager<\/td>Credentials exposed for logins ~Aug to Oct 23<\/td>Customers: check mail rules, FTP users and site files<\/td><\/tr><\/tbody><\/table><\/figure>\n\n

Corrig\u00e9 depuis le premier rapport<\/h2>\n\n