Cyber news for UK businesses, Tuesday 10 November 2026
Six stories for UK businesses today, each with one thing to do. Top story: a supplier breach that reached shoppers.
Top story
A supplier’s breach reached UK shoppers. Who Gives A Crap says an intruder got into an unnamed US marketing software provider. Names, emails, phone numbers, addresses and total spend were involved. Payment details and passwords were not. The company does not know if the data was copied, and the ICO confirmed it has been told. Ask your suppliers who holds your customer data, and warn customers to expect scam messages using real details. Our full guide to the supplier data breach has a checklist. (The Register)
Old AWS integrations let attackers in. Wiz reports attackers used compromised credentials tied to Qubole’s AWS account to reach customer environments. They took secrets and storage data. Many customers had left the trust setting active after dropping the platform. List the third-party access in your cloud account and remove what you no longer use. (The Register)
DigiCert’s server move left an archive open for 16 months. The company says a 2025 migration exposed an internal system to the internet. A sign-up feature without MFA let an outsider view archived customer records. Review security after every infrastructure change, and switch off features you do not need. (The Register)
More stories
A fake Microsoft sign-in that runs in the attacker’s browser. ZeroBEC describes a campaign using a SharePoint-themed PDF, then a Microsoft login shown inside an attacker-controlled remote browser. It looks right because it is the real page, relayed. Tell staff a familiar login page is not proof, and treat unexpected PDFs asking for sign-in with suspicion. See phishing-resistant MFA and our phishing simulation software for staff testing. (The Hacker News)
Fridge controllers online are a target. France attributes attacks on refrigeration controllers at more than 700 grocery stores to an Iranian unit, citing food losses and fires. Separately, SecurityScorecard found exposed fridge controllers used to send spam. If you run cold storage, ask your supplier whether the controller is reachable from the internet. (The Register)
About 15,500 websites carry malicious scripts. Researcher Scott Helme reports card skimmers and fake prompts on sites that get more than 135 million visits a month. Update your CMS and plugins, remove scripts you do not recognise, and check your site with our free web vulnerability scan. (The Hacker News)
Check your exposure
Worried your staff or suppliers have leaked logins? Check what is already exposed with Breachy: https://wolfcore.co.uk/breachy/