> ## Content Index
> Fetch the complete content index at: https://www.metacurity.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Hackers drain €100m from French bank as Binance fallout rattles lenders
- URL: https://www.metacurity.com/hackers-drain-eur100m-from-french-bank-as-binance-fallout-rattles-lenders/
- Published: 2026-11-05T14:22:26.000Z
- Updated: 2026-11-05T14:22:26.000Z
- Description: Attackers breached Crédit Mutuel Arkéa through an authorized third party’s computer and moved stolen funds into crypto, as US regulators questioned banks about unusual activity following the Binance heist.
- Author: Cynthia B Brumfield
- Tags: Cybersecurity, News, #no-feature-image

![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/11/1280px-Cr--dit_Mutuel_Ark--a_b--timent_Mirabeau-1.jpg)

Source: [FJaffres](https://commons.wikimedia.org/w/index.php?title=User:FJaffres&action=edit&redlink=1&ref=metacurity.com "User:FJaffres (page does not exist)").

**Spend less time finding cybersecurity news. Get more out of it.**

Metacurity delivers the cybersecurity news, analysis, and insight that would take you hours—and sometimes days—to assemble yourself.

Every weekday, we sift through thousands of news articles, press releases, filings, court documents, and research reports, including details that vendor announcements and PR pitches leave out. We tell you what changed, why it matters, and what deserves your attention. Minimal vendor marketing. No outrage bait. No SEO filler.

**A paid subscription gives you:**

- **The full Metacurity archive:** Every newsletter, searchable and browsable.
- **Our weekly long-reads roundup:** The best cybersecurity writing from across the industry, selected and vetted to make your reading time count.
- **Specialized reports and analysis:** Periodic deep dives that go beyond the daily headlines.
- **A direct role in sustaining independent journalism:** Your subscription helps keep our editorial priorities focused on readers and the cybersecurity community.

If Metacurity saves you time, helps you spot an important development, or gives you a clearer understanding of the industry, please consider becoming a paid subscriber. Your support keeps that work going.

**Subscribe today—and thank you for reading and supporting Metacurity.**

[Upgrade my subscription](#/portal/account/plans)

### Hackers broke into France's Crédit Mutuel Arkéa, stealing more than €100 million from the Brittany-based institution, a figure that has not yet been finalized.

The hackers' break-in closely resembled the attack suffered by the cryptocurrency platform Binance on October 29\. The hackers compromised the computer of a third party who had authorization to carry out transactions, giving them deep access to the system. They reached the bank's equity capital and siphoned off more than €100 million out of the €10 billion it holds. 

The stolen funds were then converted into cryptocurrencies and distributed across several exchange platforms. Among them was the American platform Kraken, which sounded the alarm on Monday, after receiving unusually large transfers for a European bank and blocking the transactions in progress.

Separately, supervisors from the Federal Reserve and the Office of the Comptroller of ​the Currency started reaching out to banks on Monday morning, asking about any unusual activity ​or disruption in their services, according to several sources familiar with the matter.

One source ⁠at a bank that regulators had contacted said there were no disruptions in its services. The source said ​bank employees prepared a list of talking points to discuss with customers, but they have since received ​few inquiries.

Banks have been studying the Binance hack, believed to be the largest financial heist in history, and are also doing diagnostics on their systems to ensure they are prepared to defend against a similar attack, according to two separate people familiar with the ​efforts. ([Lucie Robequain and Martin Untersinger / Le Monde](https://www.lemonde.fr/en/economy/article/2026/11/05/european-banks-wake-up-to-scale-of-vulnerability-after-cyberattack-on-french-bank%5F6772537%5F19.html?ref=metacurity.com) and [Stephen Gandel, Nupur Anand and Tatiana Bautzer / Reuters](https://www.reuters.com/legal/government/binance-hack-prompted-us-regulators-check-bank-systems-sources-say-2026-11-05/?ref=metacurity.com))

**Related:** [*BigGoFinance*](https://finance.biggo.com/news/63c77314-63b9-4da8-b099-926edff5e9fa?ref=metacurity.com)*,* [*Finance Briefs*](https://www.briefs.co/news/cr-dit-mutuel-ark-a-says-hackers-took-money-after-accessing/?ref=metacurity.com)*,* [*BeInsure*](https://beinsure.com/news/credit-mutuel-arkea-cyberattack-bank-details-breach-and-stolen-funds/?ref=metacurity.com)

### Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. 

One of the proxy services is a Russian company whose founder’s web hosting business was ground zero for cyberattacks against election systems in Arizona and Illinois in 2016.

The security firm Layer3 Intel said it detected multiple residential proxy nodes beaconing out from the internet address network reserved for the Executive Office of the President (AS2650). Layer3 said the proxy activity was relatively persistent between October 5 and November 3, and that a review of the proxies available from AS2650 showed they exited from the White House network 236 times during that period.

The proxy tracking company Synthient said on Twitter/X that the activity it saw coming from AS2650 was related to multiple Windows 11 installations of a service called Infatica, a proxy program that is often integrated into “free” mobile and desktop applications. Infatica’s founder Vladimir Fomenko is a Russian man whose hosting firm King Servers was home to six of the eight internet addresses used by Russia’s state security services to compromise databases for election systems in Arizona and Illinois in 2016.

There are dozens of residential proxy providers with varying degrees of legitimacy, many of them based in China or Russia. But at a minimum, they all make it simple for customers to rent someone else’s internet address as a way to anonymize their web traffic or spoof their true location. From a website’s perspective, the traffic from a proxy network user appears to originate from the rented IP address, not from the proxy service customer.

Layer3 Intel said the proxy exit nodes at the White House came from six internet addresses, on 26 of the 30 days, and that most of the activity happens in the evening, between 5 p.m. and midnight.

Incredibly, Infatica was not the only proxy service that reportedly has been reselling access to White House internet addresses: Layer3 Intel said it found 28 separate residential proxy services were able to exit through this network.

“This is public access,” the Layer3 Intel team wrote. “Anybody can obtain it by signing up to a public residential proxy service, paying a few dollars and sending requests through it. We did not selectively target this network or try to make our probes exit from it. We caught this by chance, simply by requesting global rotating access through these services.” ([Brian Krebs / Krebs on Security](https://krebsonsecurity.com/2026/11/want-to-rent-an-internet-address-at-the-white-house/?ref=metacurity.com))

**Related:** [*Layer3 Intel*](https://layer3intel.com/blog/residential-proxies-white-house-network?ref=metacurity.com)*,* [*Runtime Wire*](https://runtimewire.com/article/residential-proxy-traffic-white-house-network-236-exits?ref=metacurity.com)*,* [*Gigazine*](https://gigazine.net/gsc%5Fnews/en/20261105-residential-proxies-detected-white-house?ref=metacurity.com#gsc.tab=0)*,* [*International Business Times*](https://www.ibtimes.co.uk/white-house-network-residential-proxy-activity-1830375?ref=metacurity.com)

![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/11/image-11.png)

Confirmed residential proxy activity observed from the White House network, October 5 to November 3, 2026\. Source: Layer3 Intel.

### An initiative set up by some of crypto’s largest companies to curb illicit activity has quietly been dissolved, at a time when crime involving digital assets continues to surge.

The organization behind the Tron blockchain partnered with stablecoin issuer Tether and analytics firm TRM Labs to establish the T3 Financial Crime Unit in September 2024, pledging to create a “safer and more secure” crypto industry. A year later, digital asset exchange Binance joined its ranks, and the group said it had frozen a total of $250 million in illicit assets globally, working alongside law enforcement agencies.

More recently, however, the alliance had broken down and was subsequently terminated, according to people familiar with the matter, who asked not to be identified because the decision to end T3 had not been made public. Over the past year, the initiative was stymied by slow response times and a lack of coordination among members, said one of the people. Another said T3 was disbanded in late August.

“While the very successful T3 program has concluded, Tron remains committed to working to help stop illicit activities on the blockchain, in partnership with law enforcement,” said a Tron DAO spokesperson. “More on our new initiative will be coming soon.” Tron was founded by crypto billionaire Justin Sun.

Tether will “continue to work with TRM to disrupt and interdict illicit funds,” a company spokesperson said, adding that the company has been participating in the Beacon Network, a real-time intelligence-sharing initiative founded by TRM last year.

“T3 achieved extraordinary things,” said Ari Redbord, TRM’s global head of policy and government affairs. “Beacon Network builds on that work.” ([Ryan Weeks / Bloomberg](https://www.bloomberg.com/news/articles/2026-11-04/crypto-giants-scrap-crime-fighting-alliance-as-hackers-circle?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc5MzgwNzczMCwiZXhwIjoxNzk0NDEyNTMwLCJhcnRpY2xlSWQiOiJUTllZU1ZUOU5KTFMwMCIsImJjb25uZWN0SWQiOiIwNkUyNTg5MjVFMjg0RjZGQjc2MDVENjNDODM0NTE0OCJ9.K%5F%5FMA8RA5Iqc4qDVeq5iRptjzvZMqj3IDkIqUDAk4Jg&leadSource=article-gifting&ref=metacurity.com))

***Related:*** [*PYMNTS.com*](https://www.pymnts.com/cybersecurity/fraud-prevention/2026/tron-tether-and-trm-pivot-to-new-crypto-crime-fighting-alliances-after-t3-shutdown/?ref=metacurity.com)*,* [*Cointelegraph*](https://cointelegraph.com/news/bitmart-hack-security-staffing-crypto-exchange-restructuring?ref=metacurity.com)

### Researchers at Sekoia report that hackers possibly linked to the Kremlin exploited previously patched iOS and Android flaws in an attempt to hack visitors of multiple websites, including one celebrating the 250th anniversary of American independence.

The attackers, which the researchers assessed with “moderate to high confidence” were part of APT29 of Russia’s Foreign Intelligence Service, targeted other sites, many with links to that country’s ongoing war against Ukraine. 

The attacks began when iPhone or Android users visited one of potentially hundreds of different sites. JavaScript injected into the traffic then profiled the device. The final payloads, tailored to the type of platform visiting, attempted to steal browser cookies and, in some cases, Wi-Fi passwords and full mobile device data.

One of the impersonated sites was america250.org, belonging to a non-partisan group of lawmakers, business executives, and at least one former member of the Trump administration. The attackers registered america250\[.\]holiday and used it as a reverse proxy to america250.org. The imposter website delivered content from the real one that added malicious JavaScript into it.

“We assess that the intrusion set may have deliberately selected this website due to its association with a high-profile national celebration, potentially leveraging the event as a pretext for invitation-themed spear-phishing campaigns,” researchers from security firm Sekoia said.

A second website, theowo\[.\]club, proxied the website Raffles of London OWO, a luxury hotel physically close to some of the UK’s most sensitive government institutions, including the Ministry of Defence and 10 Downing Street, the official residence and office of the British Prime Minister. 

Open source reporting indicates that Ukrainian President Volodymyr Zelenskyy stayed there during a visit on October 14.

“By doing this watering hole \[impersonating\] the Raffles London at The OWO, the intrusion set may have sought to target diplomatic delegations and high-profile guests through targeted spear-phishing campaigns,” the researchers said. ([Dan Goodin / Ars Technica](https://arstechnica.com/security/2026/11/hackers-exploited-ios-and-android-flaws-to-infect-phones/?mid=1&ref=metacurity.com#cid=3788879))

**Related:** [*Sekoia*](https://www.sekoia.com/blog/poisoned-source-apt29-watering-holes-targets-mobile-devices-with-n-day-exploits?ref=metacurity.com)*,* [*Cyber Security News*](https://cybersecuritynews.com/russian-apt29-hackers/?ref=metacurity.com)*,* [*Security Affairs*](https://securityaffairs.com/202473/apt/russian-apt29-targets-mobile-users-with-watering-hole-attacks.html?ref=metacurity.com)*,* [*Infosecurity Magazine*](https://www.infosecurity-magazine.com/news/apt29-watering-holes-iphones/?ref=metacurity.com)*,* [*Cyber Press*](https://cyberpress.org/apt29-launches-zero-click-attacks/?ref=metacurity.com)*,* [*RuntimeWire*](https://runtimewire.com/article/sekoia-apt29-watering-holes-mobile-n-day-exploits?mid=1&ref=metacurity.com#cid=3788896)*,* [*SC Magazine*](https://www.scworld.com/brief/russian-state-backed-hackers-launch-mobile-cyberespionage-campaign?mid=1&ref=metacurity.com#cid=3789309)

![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/11/image-12.png)

Overview of APT20 watering hole campaign. Source: Sekoia.

### OpenAI published a post about “an autonomous vulnerability discovery, exploitation, and patching pipeline” that spawns countless agents that hunt down a massive number of software vulnerabilities, prove they’re scary, and create the code that would eliminate them. 

OpenAI says this particular system, designed to scan the Linux kernel—which is the bedrock on which Android phones and much of the internet are built— found 2,308 potential vulnerabilities. After some further paring down, it then sorted out the worst of these potential problems, running them on a virtual machine to prove they can be used to take full control of a system. In 948 cases, OpenAI says the vulnerabilities were proven to be truly dangerous.

Patch-writing agents then wrote the 948 necessary patches, but didn’t actually edit the codebase. The patches were sent for approval from humans first.

For the AI tokens consumed in all the “thinking” that goes into one single, solitary run of this giant AI workflow, OpenAI says if the client were to be billed, the API cost would be $1,213,430.

OpenAI noted that it did something similar on a smaller scale in June as part of an initiative called “Patch the Planet.” ([Mike Pearl / Gizmodo](https://openai.com/index/a-thousand-fewer-paths-to-root/?ref=metacurity.com))

**Related:** [*OpenAI*](https://openai.com/index/a-thousand-fewer-paths-to-root/?ref=metacurity.com)*,* [*Help Net Security*](https://www.helpnetsecurity.com/2026/11/05/openai-linux-kernel-root-exploits/?ref=metacurity.com)*,* [*Cyber Security News*](https://cybersecuritynews.com/openai-uncovers-948-linux-kernel-vulnerabilities/?ref=metacurity.com)*,* [*RuntimeWire*](https://runtimewire.com/article/openai-agents-948-linux-kernel-flaws?ref=metacurity.com)*,* [*Unite.AI*](https://www.unite.ai/openai-pipeline-finds-948-linux-kernel-privilege-escalation-flaws/?ref=metacurity.com)*,* [*Blockchain.News*](https://blockchain.news/news/openai-pipeline-linux-kernel-vulnerabilities?ref=metacurity.com)*,* [*Hacker News*](https://news.ycombinator.com/item?id=50372929&ref=metacurity.com)*,* [*r/singularity*](https://www.reddit.com/r/singularity/comments/1xo3a2k/openai%5Fclaims%5Ftheir%5Fnew%5Fsecurity%5Fmodel%5Fpatched/?ref=metacurity.com)*,* [*Lobsters*](https://lobste.rs/s/yvzq9m/thousand%5Ffewer%5Fpaths%5Froot?ref=metacurity.com)

![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/11/image-13.png)

Source: OpenAI.

### Researchers at Bitdefender say attackers can force Android devices into a continuous boot loop using a specially crafted app that requires no permissions and only needs to be installed.

To cause the persistent denial-of-service (DoS), the app triggers a vulnerability that researchers dubbed 'GhostMap' that makes Android map a file into an unallocated memory region. The affected process crashes when it attempts to read from that region.

Bitdefender discovered the flaw while analyzing an Android banking trojan that kept crashing its emulators when it tried to read an application resource.

The researchers demonstrated the vulnerability by creating an app that contains no executable code, requests no permissions on installation, and does not need to be launched on the device.

Bitdefender reported the issue to Google on August 20, but received a “Won’t Fix (Not Reproducible)” reply, with the issue being out of scope.

The researchers submitted an extended version on August 25, believing Google misclassified the original report. The tech giant still deemed it out of scope for a security update, though it reserved it for consideration in a future update. ([Bill Toulas / Bleeping Computer](https://www.bleepingcomputer.com/news/security/ghostmap-android-flaw-lets-malicious-app-trigger-persistent-boot-loop/?ref=metacurity.com))

**Related:** [*Bitdefender*](https://www.bitdefender.com/en-us/blog/labs/ghostmap-android?ref=metacurity.com)*,* [*Infosecurity Magazine*](https://www.infosecurity-magazine.com/news/ghostmap-bug-android-phones-stuck/?ref=metacurity.com)*,* [*PCMag*](https://www.pcmag.com/news/this-android-flaw-could-reboot-loop-your-phone-before-opening-any-apps?ref=metacurity.com)*,* [*DigitBin*](https://www.digitbin.com/ghostmap-android-boot-loop-flaw/?ref=metacurity.com)*,* [*Help Net Security*](https://www.helpnetsecurity.com/2026/11/05/ghostmap-android-bug-research/?ref=metacurity.com)

### Around 320,000 files taken during a cyber-attack that affected schools in Bristol, England have been published on the dark web by hackers, the council has said. 

The cyber-attack happened on September 21 and impacted 39 schools across the city.

The attack targeted the Trading with Schools platform, where malicious software was installed on some devices.

Affected schools were disconnected from the shared network, but investigations since the incident identified a "significant number of files" which were believed to have been taken and made available online.

Bristol City Council said that 320,000 files are believed to have been taken from the network and it is believed to have impacted 39 schools.

It is believed that the data theft only affected the schools that receive "a greater level of service" from the IT network and is unlikely to have directly impacted the other 49 schools that receive internet access only. ([Alex Driscoll / Bristol Live](https://www.bristolpost.co.uk/news/bristol-news/thousands-bristol-school-files-published-11226874?ref=metacurity.com))

**Related:** [*BBC News*](https://bbc.co.uk/news/articles/c6073rl8839vo?ref=metacurity.com)*,* [*Silicon UK*](https://www.silicon.co.uk/cybersecurity/bristol-schools-hack-632176?ref=metacurity.com)*,* [*The Independent*](https://www.independent.co.uk/news/uk/home-news/bristol-school-hack-files-dark-web-b3078972.html?ref=metacurity.com)*,* [*Computing*](https://www.computing.co.uk/news/2026/security/hackers-leak-sensitive-data-stolen-from-39-bristol-schools?ref=metacurity.com)*,* [*TechRadar*](https://www.techradar.com/pro/security/hackers-publish-over-320-000-files-stolen-from-39-bristol-schools-on-the-dark-web?ref=metacurity.com)*,* [*Shattered*](https://shattered.io/bristol-schools-hack-320000-files-published-trading-with-schools-2026/?ref=metacurity.com)

### A shadowy Russian ransomware group that calls itself Qilin has posted screenshots on the dark web from what appears to be a database stolen from the Burnaby School District.

Qilin claims to offer downloads of information allegedly taken during a massive data breach that school officials have said included medical information, detailed learning assessments, and personal information about both staff and students.

The screenshot samples posted on the Qilin website contain school district letterhead and human resources categories attached to what appear to be bulky files of data.

The September attack on the Burnaby School District raised alarms with parents and students who contacted CBC News concerned that children's data may be in the hands of cybercriminals bent on exploiting deeply personal information for profit.

Working with CBC's visual investigations team, CBC News located the database shortly after the school district warned parents in an email Tuesday that "the threat actor claims to have published files and information from this incident on the dark web.

According to the screenshots posted online, the files contain a terabyte worth of data and have allegedly been seen nearly 4,000 times since they were first posted publicly on Oct. 15.

Screenshots of the files include folders labeled "Harassment Investigations," "Discipline," "Payroll," and "Mental health and Wellness." ([Jason Proctor, Jodie Martinson, Jon Hernandez, Ivan Angelovski / CBC News](https://www.cbc.ca/news/canada/british-columbia/qilin-burnaby-school-ransomware-9.7409539?ref=metacurity.com))

### Chainalysis, the blockchain analytics company, said Wednesday night that some information belonging to all its users — which its website says include those in the law enforcement and national security sectors — had been exposed in a cyberattack.

The company initially disclosed a breach on October 30, although at the time it said it had found no evidence that authentication credentials or session tokens had been accessed.

In its latest update, posted Wednesday night, the company said it had discovered “certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor.”

The perpetrator was not identified. Chainalysis previously said it had “detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools.” It has not explained what it meant by “offensive agentic techniques.”

The company initially told customers the breach came amid what it described as “an industry-wide rise in AI-driven cyberattacks.” Although it initially mentioned agentic techniques, it did not explicitly say an AI agent caused its own breach. ([Alexander Martin / The Record](https://therecord.media/chainalysis-all-users-hit-by-agentic-cyberattack?ref=metacurity.com))

**Related:** [*Chainalysis*](https://www.chainalysis.com/blog/security-incident-october-30/?ref=metacurity.com)

### A Seoul court rejected an injunction lawsuit by e-commerce firm Coupang Corp. filed against a fine of some 423 billion won (US$315 million) levied by a state-run data protection agency over its massive data leak.

The Seoul Administrative Court said there is no need to nullify the fine imposed by the Personal Information Protection Commission in June this year over privacy violations, including a massive data breach that affected more than 37 million users.

It marked the largest fine ever imposed by the regulator on a single company, according to the commission. ([Park Sang-soo / Yohnap News Agency](https://en.yna.co.kr/view/AEN20261105010600320?ref=metacurity.com))

**Related:** [*Korea JoongAng Daily*](https://www.koreajoongangdaily.com/business/court-keeps-coupangs-record-data-breach-fine-in-force/12958722?ref=metacurity.com)*,* [*The Korea Herald*](https://www.koreaherald.com/article/10927677?ref=metacurity.com)*,* [*Seoul Economic Daily*](https://en.sedaily.com/society/2026/11/05/court-keeps-4235-billion-won-fine-on-coupang-over-data?ref=metacurity.com)

### Sentra, a cybersecurity startup that helps companies keep artificial-intelligence agents under control, has raised $150 million to meet booming demand for AI and data security.

The Series C round—which lifts Sentra’s total funding to date to more than $260 million—is led by Capital One Ventures, which joins existing investors Bessemer Venture Partners, Zeev Ventures, Standard Investments, Munich Re Ventures and Key1 Capital. ([Angus Loten / Wall Street Journal](https://www.wsj.com/pro/cybersecurity/ai-security-startup-sentra-raises-150-million-to-police-autonomous-agents-4ab9da29?mod=djemCybersecruityPro%26tpl%3Dcs&ref=metacurity.com))

**Related:** [*CTech*](https://www.calcalistech.com/ctechnews/article/s1jextotml?ref=metacurity.com)*,* [*Globes*](https://en.globes.co.il/en/article-israeli-cybersecurity-co-sentra-raises-150m-1001562026?ref=metacurity.com)*,* [*Axios*](https://www.axios.com/pro/enterprise-software-deals/2026/11/04/sentra-capital-one-cybersecurity?ref=metacurity.com)*,* [*Tech Funding News*](https://techfundingnews.com/sentra-150m-capital-one-ventures-ai-data-security/?ref=metacurity.com)

### Best Thing of the Day: Let the Investigations Begin

Democrats on the House Homeland Security Committee sent a letter to DHS Secretary Markwayne Mullin [warning him](https://democrats-homeland.house.gov/imo/media/doc/2026-11-04%5Ft%5Fdhs%5Ff%5Fthompson%5F-%5Fletter%5Fre%5Fdocument%5Fpreservation.pdf?ref=metacurity.com) to comply with all document preservation requirements ahead of what will no doubt be heavy-duty investigations into the troubled agency's activities during the second Trump administration.

### Bonus Best Thing of the Day: Taking Crypto and AI Out of Campaign Spending, At Least for a While

Crypto and AI companies spent $250 million in the midterms in hopes of picking the lawmakers who will decide how — or whether — their industries will be regulated, and [they got clobbered](https://www.citationneeded.news/2026-election-results/?ref=metacurity.com).

### Extra Bonus Best Thing of the Day: No Place to Run, No Place to Hide

Silicon Valley billionaires, including Elon Musk, Jeff Bezos, and Mark Zuckerberg, [might soon regre](https://www.theguardian.com/technology/2026/nov/05/tech-barons-america-musk-bezos-zuckerberg?ref=metacurity.com)t going all-in on the MAGA movement given the decisive control Democrats will soon have of the US Congress.

### Worst Thing of the Day: Get Your Sh\*t Off the Internet Already

Even after European and other grocery stores had to throw out a fortune of food following attacks on their Danfoss refrigeration units, a significant portion of Danfoss refrigeration units [are still online](https://www.bitsight.com/blog/supermarket-refrigeration-cyberattacks-data?ref=metacurity.com) and therefore exposed to attacks.

### Closing Thought

![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/11/image-14.png)