[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

press report (Le Canard enchaîné, Nov 3) quoting the EFS and France's Health Ministry. Method, attacker and how hot the products actually got are not public

French blood service contractor hacked: cold rooms holding donor samples and transfusion plasma were reprogrammed to reach 110°C; an on-call technician caught it

The 110°C figure is the setpoint the equipment was given, not a measured product temperature; no source says how warm the rooms or plasma actually got, how many sites were involved, or how the attacker got in. Nobody has claimed it. It follows the supermarket refrigeration sabotage across Europe (see our Nov 2 item), but no source has tied the two to the same equipment or attacker.

If you run temperature-controlled storage: find out whether a maintenance contractor can change setpoints remotely, and through what (vendor cloud portal, VPN, remote-access tool). Require MFA on that path, alert on setpoint changes rather than only on temperature thresholds, and keep an independent, offline temperature alarm that a remote attacker can't reconfigure.

Sources: Le Canard enchaîné: Les hackers ont du sang sur les mains (Nov 3) · Anadolu Agency: French blood storage facilities targeted in cyberattack