Last updated
Anomaly: Cybersecurity Incident
Security flaw in OpenCode AI coding agent (by Anomaly) let a malicious or hijacked MCP server execute code on developers' Windows and WSL machines at sign-in. Fixed in version 1.18.33.
Source: Forkast News
- What happened
- Security flaw in OpenCode AI coding agent (by Anomaly) let a malicious or hijacked MCP server execute code on developers' Windows and WSL machines at sign-in. Fixed in version 1.18.33.
- Who
- Anomaly · United Kingdom & Ireland
- When
- 2026-10-22
- Source
- Forkast News
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For Anomaly in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: Against a Talent Market Index of 122.7 (Hot) (up 17.8 month-on-month), EMEA is at easing (-17.7pts) on signal share.
Anomaly: 2 signals in the last 90 days; 0.1% of MitchelLake's EMEA signal flow; 3 tracked across 157 days.
MitchelLake in this thematic
Also at Anomaly →
More signals across EMEA
Cybersecurity Incident · EMEA
Rand Mutual Assurance →Rand Mutual Assurance (RMA), the insurer handling injury claims for mineworkers and metalworkers, is investigating an alleged theft of 1.68 million claim records. A hacker claims to hold 366GB of its data.
Cybersecurity Incident · EMEA
Presidency of South Africa →The South African presidency pulled its website offline two days after the PHP project released fixes for critical flaws, pointing to a security exposure tied to the global PHP vulnerability scramble.
Cybersecurity Incident · EMEA
Bureau of Public Enterprises →Nigeria's Bureau of Public Enterprises (BPE) exposed its website backups online for several days, a data-exposure security failure at a named government agency.
Cybersecurity Incident · EMEA
Netto →Attackers reportedly manipulated refrigeration systems at hundreds of French Netto grocery stores, pushing some temperatures to about 50°C for hours and forcing disposal of food.
Cybersecurity Incident · EMEA
Discover-Tech →Israeli ad company Discover-Tech's advertising platform was reportedly used as a zero-click spyware delivery channel by the Candiru threat actor, enabling device fingerprinting, tracking and targeted infection.
Cybersecurity Incident · EMEA
Les Mousquetaires →Attackers remotely took control of refrigeration controllers at hundreds of French supermarkets on the night of October 11, warming fridges and freezers up to 50°C and forcing stores to discard food. The entry point was a Danfoss store-controller that maintenance firms manage remotely.
Where this lands in our work
- AI Leadership →
AI capability is being built into executive stacks, not bolted on beneath them.
- Executive Search: EMEA →
Our EMEA practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗