[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNSfn800Ee9J7JC-DSJbXMSzP6o4NA7bHEOHjrWE-DWA":3},{"article":4,"iocs":38,"watch_terms":39,"solutions":40,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"ebdd0c11-7874-42ec-a222-10092b1c8418","France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites","france-blames-iran-for-sabotage-attack-on-refrigeration-controllers-at-about-700-db918b","An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran's Islamic Revolutionary Guard Corps (IRGC), the French government said yesterday. The attackers broke into controllers on the night of October 11 and changed their defrost settings to high temperatures. That caused food losses and, in at least 15 cases, fires. The unit","The French government has attributed an October cyberattack targeting refrigeration controllers at approximately 700 retail locations to a cyber unit of Iran's Islamic Revolutionary Guard Corps (IRGC). The attackers manipulated defrost settings to high temperatures, resulting in food spoilage and, in at least 15 instances, fires.","France blames Iran's IRGC for cyberattack on 700 retail refrigeration controllers.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F11\u002Ffrance-blames-iran-for-sabotage-attack.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhQkt0P-pw4g1CSZvboG35E5WMLU_vea9rR2DLZ4X0lK5NyipbooRyXkRXcRb7X-ddRbVCygF1OkhW6a3j_8sCsBA_GhHAtOF8dISlx4Q2H74fnLJTm5ZOoEBlsbES0hPZutw60wjcAcMZEZcmx4NCLAM-pqVJCfw9yLhoQV2U_QFRX5h1k0zKPzgioICw\u002Fs1600\u002Firan-france.jpg","2026-11-10T09:08:20+00:00","2026-11-10T10:00:39.801017+00:00",7,[17],{"name":18,"type":19},"Islamic Revolutionary Guard Corps (IRGC)","threat_actor","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":20,"icon":22,"name":23,"slug":24},null,"Nation-state","nation-state",[26,28,33],{"category":27},{"id":20,"icon":22,"name":23,"slug":24},{"category":29},{"id":30,"icon":22,"name":31,"slug":32},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[],[],{"controls":41,"vendors":129},[42,71,100],{"slug":43,"name":44,"problem":45,"products":46},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[47,55,63],{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":72,"name":73,"problem":74,"products":75},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"slug":101,"name":102,"problem":103,"products":104},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[105,113,121],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":142},"iran-linked-cyberattack-manipulates-refrigeration-controllers-at-700-french-retail-sites","Iran-Linked Cyberattack Manipulates Refrigeration Controllers at 700 French Retail Sites","Iranian IRGC-affiliated actors remotely accessed and manipulated industrial refrigeration controllers at approximately 700 French retail locations, altering defrost temperature settings to cause food spoilage and fires. The root cause lies in poor configuration management and insufficient network segmentation that left operational technology (OT) devices directly reachable and inadequately hardened against external interference. Operational technology systems controlling physical processes — such as refrigeration — carry real-world consequences when compromised, making their security posture as critical as any IT system. This incident underscores that internet-exposed industrial controllers with weak or default configurations represent a high-value, high-impact target for nation-state adversaries seeking to cause economic and physical disruption.",[135,136,137,138,139,140,141],"NIST SP 800-53 SI-2: Flaw Remediation","CIS Control 17: Incident Response Management","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)","MITRE ATT&CK T1566: Phishing","CIS Control 7: Continuous Vulnerability Management",{"NIS2 Article 21(2)(b)":143,"MITRE ATT&CK T1566: Phishing":144,"NIST SP 800-53 SI-2: Flaw Remediation":145,"CIS Control 17: Incident Response Management":146,"CIS Control 7: Continuous Vulnerability Management":147,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":148,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":149},"NIS2 explicitly requires incident handling and security measures for operators of essential services, including retail food supply chains, mandating the kind of OT security controls that could have prevented or limited this attack.","While the precise initial access vector is unconfirmed, IRGC campaigns frequently use phishing as an entry point; awareness and controls against phishing would address a likely early-stage tactic in this intrusion chain.","Ensuring industrial controllers are patched and free of known vulnerabilities would have reduced the attack surface exploited by IRGC actors to gain remote access to the refrigeration systems.","A tested OT incident response plan would have enabled faster detection and containment of the manipulation, limiting the number of sites that experienced fires and food spoilage across 700 locations.","Continuous scanning of OT network assets for exposed services and misconfigurations would have flagged the vulnerable refrigeration controllers, enabling remediation before attackers could weaponize them.","A structured vulnerability management process covering OT assets would have identified exposed and misconfigured controllers before Iranian threat actors could exploit them at scale.","Enforcing strong authentication and least-privilege access controls on refrigeration controller remote interfaces would have prevented unauthorized actors from issuing destructive configuration commands."]