Four cyber stories circulating as current this weekend are between five days and six months old

The Israeli National Cyber Directorate warning is real, official and dated roughly 3 November: it told retail chains, food companies and logistics centres to secure internet-connected refrigeration and freezer controllers after a wave of attacks on European stores, as reported by the Jerusalem Post, i24NEWS and Israel National News. It re-entered circulation on 5 November via the Azerbaijani aggregator jnews.az and in a 4 November trend piece on egov.eletsonline.com. Two things get lost in the relay. The date, and the fact that a directorate issued a warning — no Israeli retailer has been reported compromised. Separately, the “DarkBlinders” campaign, published around 3–4 November, is a vendor disclosure by CybelAngel: the claim of an Iran-linked actor taking more than one gigabyte from a government cloud environment in Iraqi Kurdistan and from an unnamed high-profile Israeli individual is the vendor’s, with no KRG acknowledgement located.

The Iranian connectivity file is the one most exposed to laundering. Iran International, an opposition-aligned outlet, reported internet disruptions around 3 November against the prospect of renewed US strikes; the Azerbaijani agency APA carried a secondhand version off Iranian media. The Files found no NetBlocks or IODA measurement for 5–8 November confirming a current degradation. The figures that travel with these stories — a 68-day blackout, 1,608 hours, the Iranian public cut off from the global internet for roughly 70 per cent of 2026 — come from a NetBlocks post of about May 2026, roughly 185 days old, with a denominator five months out of date. The CISA and FBI advisory AA26-097A on Iranian-affiliated actors and programmable logic controllers carries an IC3 document number indicating 7 April. It ranks high and is months old.

Assessment: This is what the desk exists for. None of these items is fabricated; each is being moved forward in time by aggregation, and the error compounds because the next writer cites the aggregator rather than the original. The tell is the missing denominator: a percentage of a year, published in May, cannot describe November. The honest position on Iranian connectivity today is that we do not know, because no one took a measurement we could find — which is a different statement from saying the network is fine. One primary document sits unread: a security alert dated 7 November on the US virtual embassy’s Iran page. We have not retrieved its text and will not characterise it.