Updated 17:04 UTC · 29 October 2026

Subscribe

Photo (cropped, tinted): NASA (Public domain)

OUTPOST. — daily cybersecurity, defence technology, geodata and geopolitics briefing

Cyber, defence tech and geopolitics — daily, every line sourced.

31 sources · 26 stories · 12 exploited CVEs

Top Stories

Cyber, warfare technology and geopolitics, ranked by recency, source weight and how many outlets carry the story.

Hitachi Energy CoreTec Product (opens the original article)

Hitachi Energy says OS command injection and Dirty Frag vulnerabilities affect its CoreTec product.

Cyber CISA Advisories

What to checkCheck whether CoreTec is in your environment and review the relevant advisory for mitigation guidance.

Sources1CISA Advisories

Latest

Image: Defense News

Pentagon treating military base freezer malfunctions as suspected cyberattack, officials say (opens the original article)

Defense News reports that the Pentagon is treating freezer malfunctions that spoiled food at US military bases in August as a suspected hack.

Warfare Defense News

Why it mattersThe report highlights the operational relevance of investigating suspected cyber incidents affecting military-base systems.

Sources1Defense News

Image: BleepingComputer

Chrome extensions with 13.4 million installs caught hijacking searches (opens the original article)

BleepingComputer reports that 319 Chrome extensions with 13.4 million reported installations redirected searches through tracking servers to generate advertising revenue from Bing and Yahoo.

Cyber BleepingComputer

What to checkReview installed extensions, remove untrusted ones, and investigate unexpected search redirects.

Sources1BleepingComputer

Outpost analysis: Cyber Risk Across Browsers, Contractors and Infrastructure

Written by AI from today’s headlines; read the sources.

The top stories span industrial-control advisories, browser extensions, a contractor intrusion and reported attacker use of AI. The snippets provide limited technical detail, but together they show how cyber risk appears across software, services and operational environments.

The extension campaign involved reported installations at scale, while the contractor says its probe found no data extraction. Those reports concern different kinds of exposure: unwanted search redirection and a claimed absence of data theft. Analysts should keep the distinction clear and attribute claims.

The industrial advisories and suspected military-base freezer hack bring operational systems into view, while Microsoft describes varying AI adoption by North Korean threat actors. These reports may make it useful to watch for further technical details, affected systems and evidence that clarifies scope.

Takeaways

  • Audit browser extensions and investigate unexpected search changes.
  • Attribute incident claims and track updates that clarify scope.
  • Watch for technical details in industrial and operational-system reports.
New to this? Key terms for this page
KEV
A list kept by the US agency CISA of flaws that attackers are actively using. US federal civilian agencies must fix them by a set deadline.
Zero-day
A vulnerability that attackers exploit before the vendor has released a fix, leaving defenders with no patch to apply.
Ransomware
Malware that locks or steals a victim's data and demands payment to unlock it, or to stop the stolen data being published.
GNSS
The umbrella term for satellite positioning networks such as the US GPS, Europe's Galileo, Russia's GLONASS and China's BeiDou.
Electronic warfare
Using the radio spectrum to detect, deceive or disrupt an adversary's radars, communications and navigation, and protecting your own.
OSINT
Information gathered from public sources such as news, social media, satellite imagery and ship or flight trackers.

Open the full glossary

More from Cyber

Image: Microsoft Security

IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment (opens the original article)

IDC named Microsoft a Leader in its 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment.

Cyber Microsoft Security

What to checkTreat the assessment as vendor positioning; compare endpoint security claims with your organization’s needs.

Sources1Microsoft Security

More from Warfare

Image: Defense News

Destinus’ monthly output tops Europe’s pre-war annual cruise missile production (opens the original article)

Destinus says it has built more than 1,750 Ruta cruise missiles in Europe and now makes more in a month than Europe did annually before Russia's full-scale invasion of Ukraine.

Warfare Defense News

Why it mattersThe reported production scale is relevant to assessments of European cruise-missile manufacturing capacity.

Sources1Defense News

More from Geopolitics

Today, 26 storiesCyber 38%Warfare 31%Geopolitics 31%50% of 12 newly exploited CVEs score critical · 4 with a CISA fix deadline within 7 days

Keyword index

Counted from this page. Select one to filter.