Security Signal Weekly: October 10-16, 2026

OverviewRemote-support appliances, VPN gateways, firewalls, email security, document collaboration, Windows, backup software, refrigeration controls, and the advertising supply chain all failed in ways that turned trusted infrastructure into an attack path this week. Most of these incidents did not begin on an ordinary user workstation. They began in systems allowed to broker credentials, inspect traffic, deliver updates, or manage physical equipment.That changes the response order. An installed update matters, but it does not answer whether the device was exposed before the fix, whether the attack survived the upgrade, or which secrets and downstream systems the compromised control plane could reach. The refrigeration attacks in France make the consequence unusually visible: weak remote-management boundaries can spoil food and disrupt stores, not merely produce another security alert.Reality check: The product labeled security, backup, or management deserves more scrutiny, not less.…