[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNaiB32p0guq1SFRnGJZHHDAk4xhi6Om-AuA63KrUWmU":3},{"article":4,"iocs":50,"watch_terms":55,"solutions":56,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"4a635609-fc24-43d7-86f2-f50155b394ea","ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe","enisa-warns-of-cyberattacks-targeting-refrigeration-systems-across-europe-c8fd32","ENISA warns of cyberattacks on European refrigeration systems, exposing risks to supermarkets, food supplies and industrial controls. The European Union has issued a coordinated cybersecurity warning after a series of attacks hit commercial refrigeration systems in several Member States. The incidents, which began in October and continued with a new wave on November 1 and […]","ENISA, the European Commission, Europol, and national cybersecurity bodies have issued a joint warning about cyberattacks targeting commercial refrigeration systems across Europe. The attacks, which began in October and saw a new wave in early November, have led to significant food spoilage in French supermarkets by remotely altering temperature controls. The targeted systems, often older or unsupported industrial control equipment from vendors like Danfoss, highlight a broader vulnerability in operational technology (OT) security.","ENISA warns of cyberattacks on European refrigeration systems, impacting supermarkets and food supplies.","https:\u002F\u002Fsecurityaffairs.com\u002F202528\u002Fsecurity\u002Fenisa-warns-of-cyberattacks-targeting-refrigeration-systems-across-europe.html","https:\u002F\u002Fsecurityaffairs.com\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002Fenisa.png","2026-11-06T09:46:44+00:00","2026-11-06T10:00:31.497093+00:00",8,[17,20,22,25],{"name":18,"type":19},"ENISA","vendor",{"name":21,"type":19},"Danfoss",{"name":23,"type":24},"Industrial Control Systems","technology",{"name":26,"type":24},"Refrigeration Systems","d6f63bb8-0801-486a-be7f-171400700454",{"id":27,"icon":29,"name":30,"slug":31},null,"IoT\u002FOT","iot-ot",[33,38,43,48],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":39},{"id":40,"icon":29,"name":41,"slug":42},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":44},{"id":45,"icon":29,"name":46,"slug":47},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":49},{"id":27,"icon":29,"name":30,"slug":31},[51],{"type":52,"value":53,"context":54},"malware","Danfoss refrigeration controllers","Targeted equipment in French supermarket attacks.",[18,21],{"controls":57,"vendors":144},[58,86,115],{"slug":59,"name":60,"problem":61,"products":62},"patch-management","Automated patch management","Known holes get closed in days, not months.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":59,"product_name":83,"url":84,"description":85},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":87,"name":88,"problem":89,"products":90},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"slug":116,"name":117,"problem":118,"products":119},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[120,128,136],{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",[],{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":157},"cyberattacks-on-european-refrigeration-systems-expose-ot-security-gaps","Cyberattacks on European Refrigeration Systems Expose OT Security Gaps","Attackers remotely altered temperature controls in commercial refrigeration systems across Europe, causing significant food spoilage in French supermarkets by exploiting older, unsupported industrial control equipment from vendors like Danfoss. The root cause lies in unmanaged vulnerabilities in operational technology (OT) environments, where legacy systems frequently lack patches, vendor support, or basic network isolation. This incident illustrates how OT assets — often overlooked in traditional IT security programs — can become direct vectors for real-world physical and economic harm. The convergence of IT and OT networks, without proper segmentation or compensating controls, dramatically expands the attack surface for critical infrastructure.",[150,151,152,153,154,155,156],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIS2 Article 21(2)(b)","OWASP A06:2021 Vulnerable and Outdated Components","CIS Control 17: Incident Response Management",{"NIS2 Article 21(2)(b)":158,"NIST SP 800-53 SI-2: Flaw Remediation":159,"CIS Control 17: Incident Response Management":160,"OWASP A06:2021 Vulnerable and Outdated Components":161,"CIS Control 7: Continuous Vulnerability Management":162,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":163,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":164},"NIS2 explicitly requires operators of essential services — including food supply chain infrastructure — to implement incident handling and risk management measures for OT environments, which would have mandated security controls on these refrigeration systems.","SI-2 requires organizations to identify, report, and correct information system flaws; applying this to OT environments would have mandated patching or compensating controls for the Danfoss and similar legacy systems before attackers could exploit them.","The attacks spanned multiple waves from October into November without apparent containment, suggesting an inadequate incident response plan for OT environments; CIS Control 17 requires defined and tested IR procedures that would have enabled faster detection and isolation of the compromised systems.","The use of older, unsupported industrial control equipment from vendors like Danfoss is a textbook example of relying on vulnerable and outdated components, which OWASP A06 warns is a primary attack vector that organizations must actively inventory and remediate.","The targeted refrigeration systems were older and unsupported, indicating no active vulnerability scanning or remediation process was in place for OT assets — a gap CIS Control 7 directly addresses by requiring continuous identification and remediation of vulnerabilities.","This control requires timely identification and remediation of technical vulnerabilities, including in operational technology; had it been applied to the refrigeration systems, end-of-life and unpatched equipment would have been flagged for upgrade or isolation.","Attackers were able to remotely alter temperature controls, suggesting insufficient authentication on OT interfaces; PR.AA requires that access to such systems be authenticated, authorized, and tightly controlled to prevent unauthorized remote manipulation."]