Cybersecurity · Week of Nov 2, 2026
Botnet takedown and a record cyber settlement: the week in security
A botnet takedown, a record cyber False Claims Act settlement and warnings on retail OT attacks and holiday scams led a varied week.
The week's cybersecurity releases had no single dominant theme, but several dealt with threats to consumer and operational devices. Plume Design announced a coordinated industry takedown of the X.CPE botnet, which it says was hidden in more than 1.3 million TV set-top boxes across 200 countries, in an effort involving Google, TrendAI, Lumen, HUMAN Security, Synthient and Japan's National Police Agency. Secomea pointed to a second wave of suspected cyberattacks on European supermarket refrigeration systems, and Visiting Angels issued holiday-season advice on scams aimed at seniors.
Compliance and government work also featured. Whistleblower Law Collaborative said ILC Dover agreed to pay what it calls a record high $13 million to settle a cybersecurity False Claims Act case, and CACI International said it won a five-year, $108 million U.S. Air Force contract that includes cybersecurity among its delivery practices. On the corporate side, Unisys reported third-quarter results, Above Security joined a Microsoft startup program, and QKS Group named Cleafy a leader in enterprise fraud management.
Unisys Corporation
Unisys Announces 3Q26 Results
Unisys reported third-quarter 2026 revenue of $471.5 million, up 2.5% year over year, and a net loss attributable to the company of $201.0 million, including a non-cash pension settlement loss of $151 million, net of tax. The company raised its 2026 constant currency revenue growth guidance to (3.0)% to (1.5)% and reaffirmed non-GAAP operating profit margin guidance of 9.0% to 11.0%.
CACI International Inc
CACI Advances U.S. Air Force Financial Transparency and Mission Readiness
CACI International says the U.S. Air Force awarded it a five-year, $108 million contract to sustain and modernize the Defense Enterprise Accounting and Management System (DEAMS); the release does not state a start date. CACI says it applies Agile delivery, automated testing, cybersecurity and cloud-enabled operations to the work, and notes that DEAMS recently received an unqualified audit opinion.
Plume Design, Inc.
Industry Takedown of Botnet Hidden in More Than 1.3 Million TV Set-Top Boxes across 200 Countries
Plume Design announced a coordinated effort with Google, TrendAI, Lumen, HUMAN Security, Synthient and Japan's National Police Agency to identify and disrupt the X.CPE botnet. The companies say the botnet was hidden in more than 1.3 million TV set-top boxes across 200 countries.
Whistleblower Law Collaborative LLC
ILC Dover Agrees to Pay Record High $13 Million to Settle Cybersecurity False Claims Act Case Brought by Whistleblower Law Collaborative Client
Whistleblower Law Collaborative says the United States settled a False Claims Act case brought by its client, with ILC Dover agreeing to pay $13 million, which the firm describes as a record high for a cybersecurity case. The settlement involves ILC Dover and ILC Astrospace, which the release describes as manufacturers of spacesuits.
Visiting Angels
Keeping Seniors Safe Online During the Holiday Season: Visiting Angels Shares Cybersecurity Advice for Seniors
Visiting Angels issued cybersecurity advice for seniors during the holiday season, citing threats ranging from gift card scams to AI-driven impersonation. The company says families can help older relatives build safer digital habits during the holidays and beyond.
Secomea A/S
European supermarket cyberattacks highlight the need for secure remote access to refrigeration systems, says Secomea
Secomea says a second wave of suspected cyberattacks on supermarket refrigeration systems across Europe raises questions about how retailers protect operational technology. The company argues the incidents show the need for secure remote access to such systems while maintaining essential remote services.
Above Security
Above Security Joins Microsoft for Startups Pegasus Program to Add Human Context to Microsoft Purview
Above Security, which describes itself as an AI-native managed security provider, says it has joined the Microsoft for Startups Pegasus Program. The company says its service works alongside Microsoft Purview, Microsoft Defender for Endpoint, Microsoft Entra ID and Microsoft 365 Copilot to give security teams more context from existing Microsoft deployments.
QKS Group
Cleafy Named a Leader in QKS Group SPARK Matrix™: Enterprise Fraud Management, 2026
QKS Group named Cleafy a leader in its SPARK Matrix: Enterprise Fraud Management, 2026, which evaluates providers on Technology Excellence and Customer Impact. QKS Group says Cleafy was recognized for its cyber-fraud convergence approach, real-time attack visibility and explainable fraud detection.
This roundup is written with AI assistance from the press releases listed above, using only what they state. The releases are the companies' own announcements, not Nile Web Host reporting.