[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f73-NXNLBsmN66i0fvexYOUfi87meRQvPdTr1G1QAfo4":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"5a0c0825-7e1e-464e-9aef-e877960f6d2f","EU Grocers Pay a Steep Price for Unpatched Fridge Firmware","eu-grocers-pay-a-steep-price-for-unpatched-fridge-firmware-a87219","Hundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their cooling systems.","Hundreds of European grocery stores have suffered significant financial losses due to the exploitation of unpatched firmware in their refrigeration systems. The vulnerabilities were leveraged by third-party managed service providers, highlighting a critical gap in operational technology (OT) security within the retail sector. This incident underscores the need for robust patch management and security oversight for all connected devices, even those seemingly outside traditional IT perimeters.","EU grocers lose millions due to unpatched OT firmware in cooling systems.","https:\u002F\u002Fwww.darkreading.com\u002Fics-ot-security\u002Feu-grocers-unpatched-fridge-firmware","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fbltdcfc831a57f67689\u002F6acfbd4be9c311a2c0cf7674\u002FMelted_ice_cream-cagkansayin-Getty.jpg?width=720&quality=80&disable=upscale","2026-10-15T07:00:00+00:00","2026-10-15T08:00:14.758855+00:00",7,[17],{"name":18,"type":19},"OT firmware","technology","d6f63bb8-0801-486a-be7f-171400700454",{"id":20,"icon":22,"name":23,"slug":24},null,"IoT\u002FOT","iot-ot",[26,31,36,41],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":37},{"id":38,"icon":22,"name":39,"slug":40},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":42},{"id":20,"icon":22,"name":23,"slug":24},[],[],{"controls":46,"vendors":133},[47,76,104],{"slug":48,"name":49,"problem":50,"products":51},"patch-management","Automated patch management","Known holes get closed in days, not months.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":77,"name":78,"problem":79,"products":80},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[81,88,96],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":83,"url":86,"description":87},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"slug":105,"name":106,"problem":107,"products":108},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":150},"unpatched-fridge-firmware-costs-eu-grocers-millions","Unpatched Fridge Firmware Costs EU Grocers Millions","European grocery chains suffered major financial losses after attackers exploited unpatched firmware vulnerabilities in internet-connected refrigeration systems — operational technology (OT) assets that are frequently overlooked in traditional IT security programs. The involvement of third-party managed service providers compounded the risk, as patch accountability fell into a gap between the retailers and their vendors. This incident illustrates that every networked device, regardless of its physical function, represents an attack surface that must be actively managed. Ignoring OT\u002FIoT firmware patching is no longer acceptable in an era where critical infrastructure and retail operations are deeply interconnected.",[139,140,141,142,143,144,145,146,147,148,149],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-82 – Guide to ICS\u002FOT Security","NIST SI-2 – Flaw Remediation","NIST SA-9 – External Information System Services (Supply Chain)","NIST IR-4 – Incident Handling","IEC 62443 – Industrial Automation and Control Systems Security","GDPR Article 32 – Security of Processing (where personal data resides on affected networks)","ITIL Change Management – Emergency Change procedures for critical patches",{}]