Walnut Creek Passes Measure T and Sets Nov. 15 Shadelands FallFest

WALNUT CREEK, Calif. — Walnut Creek voters approved a municipal charter change for the city treasurer's office and backed local school board leaders in the 2026 midterm election on Wednesday, November 4, as community organizers announced the November 15 Shadelands FallFest and federal and international cybersecurity agencies issued urgent advisories.

Walnut Creek Voters Approve Measure T and Back School Board Leaders Ahead of Nov. 15 Shadelands FallFest

As reported by Patch Walnut Creek, Walnut Creek voters passed Measure T to convert the city treasurer position from an elected office to an appointed role, while Ronald Cassano ran unopposed for city treasurer. In local education contests, incumbents Heidi Hernandez Gatty, Eryn Holl King, and Geetha Ganti led the Walnut Creek School District governing board race, and Stacey Schweppe led the Acalanes Union High School District Trustee Area 1 contest.

In community news reported by News24-680, Shadelands Walnut Creek will host the free, family-friendly Shadelands FallFest on Sunday, November 15, from 11 a.m. to 2 p.m. on the grounds of the Shadelands SportsMall at 2640 Shadelands Drive. The festival features DJ music, food trucks, craft beer, giveaways, 8 free sports activities (golf, dance, soccer, gymnastics, basketball, volleyball, taekwondo, and batting cages), and special appearances by Project Pink Wheels’ pink fire engine, Walnut Creek PD’s police cruiser and drones, and Joybound People & Pets’ mobile adoption van.

Crédit Mutuel Arkéa $133M Heist, University Cryptomining Indictments, and CISA/SonicWall/mSecure Warnings

Public-sector and enterprise IT teams also tracked 6 major cybersecurity disclosures on Wednesday:

• Crédit Mutuel Arkéa ($133 Million Heist): According to The Record, French banking group Crédit Mutuel Arkéa confirmed that attackers compromised a supplier's platform to steal an estimated $133 million from the bank's own account—first flagged by blockchain investigator ZachXBT—without accessing customer accounts or impacting customer assets.
• U.S. University Cryptomining Indictments: As reported by The Record and BleepingComputer, a federal grand jury indicted Canadian nationals Ryan James Roach, 35 (extradited on October 28, 2026 before appearing in Rochester, New York federal court), and Mathiew James Stubbings, 41 (awaiting Canadian extradition), on charges carrying up to 10 years in prison and a $250,000 fine each for hacking schools across at least 4 states between June 2016 and December 2019 using virtual private servers to mine cryptocurrency.
• CISA, SonicWall, mSecure & APT29 Alerts: According to BleepingComputer, CISA ordered federal agencies to patch actively exploited WordPress Core TOCTOU remote code execution flaw CVE-2026-119977 (reported by Picus Security researcher Umut Bayram) by Friday. Separately, BleepingComputer reported that SonicWall warned of 2 unpatched flaws found by Pentest-Tools in end-of-life Global Management System (GMS) 9.5.2 and earlier (CVE-2026-109593 and SQL injection flaw CVE-2026-109594), BleepingComputer reported that mSeven Software sent a November 3 notice urging mSecure Cloud users to change passwords, reset two-factor authentication, and remove passkeys after an encrypted customer database theft, and BleepingComputer reported that Sekoia attributed zero-click iOS and Android watering-hole attacks across the U.S., Ukraine, the Czech Republic, and Bulgaria to APT29 (Midnight Blizzard).