[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQ0Blh1dSZBZaWD5F1DunXX5LinllDh4-J_Ze9GBnzpg":3},{"article":4,"iocs":46,"watch_terms":56,"solutions":57,"lesson":147},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"cbbd9557-5600-4f71-9f88-e35ea5b3b8de","Hackers Hijack Swedish Supermarket Fridges and Raise Freezer Temperatures to 55°C","hackers-hijack-swedish-supermarket-fridges-and-raise-freezer-temperatures-to-55-2fb663","Hackers have reportedly targeted refrigeration systems at Swedish supermarkets, leaving stores with spoiled food after freezers reached temperatures as high as 55°C. Several ICA locations and six Coop stores were affected overnight into November 2, forcing staff to clear damaged stock and restore cooling systems. The incidents follow similar attacks against French supermarkets in October, […] The post Hackers Hijack Swedish Supermarket Fridges and Raise Freezer Temperatures to 55°C appeared first on Cyber Security News.","Hackers have targeted refrigeration systems in Swedish supermarkets, including several ICA and Coop locations, causing freezers to reach temperatures as high as 55°C and leading to significant food spoilage. These incidents follow similar attacks in French supermarkets in October. While the exact entry point and attackers remain unconfirmed for the Swedish incidents, French authorities identified compromised Danfoss and Copeland controllers, warning against exposing management interfaces directly to the internet.","Hackers exploit refrigeration systems in Swedish supermarkets, causing food spoilage.","https:\u002F\u002Fcybersecuritynews.com\u002Fsupermarkets-fridges-hacked\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FSupermarkets-Fridges-Hacked.webp","2026-11-02T10:25:14+00:00","2026-11-02T11:00:29.342257+00:00",7,[17,20,22,24,26],{"name":18,"type":19},"ICA","vendor",{"name":21,"type":19},"Coop",{"name":23,"type":19},"Danfoss",{"name":25,"type":19},"Copeland",{"name":27,"type":19},"Dixell","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":28,"icon":30,"name":31,"slug":32},null,"Malware","malware",[34,36,41],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},{"category":37},{"id":38,"icon":30,"name":39,"slug":40},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[47,50,52,54],{"type":32,"value":48,"context":49},"Danfoss AK-SM","Compromised controller brand in French supermarket attacks",{"type":32,"value":51,"context":49},"Danfoss AK-SC",{"type":32,"value":53,"context":49},"Copeland xweb",{"type":32,"value":55,"context":49},"Dixell xweb",[18,21,23],{"controls":58,"vendors":146},[59,88,117],{"slug":60,"name":61,"problem":62,"products":63},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-access","Cloudflare Access","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Faccess\u002F","Zero trust access to internal applications without a VPN.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-private-access","Zscaler Private Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-private-access","Zero trust access to private applications, replacing VPN.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-private-access","Netskope Private Access","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fprivate-access","Zero trust access to private applications.",{"slug":89,"name":90,"problem":91,"products":92},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[93,101,109],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":118,"name":119,"problem":120,"products":121},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[122,130,138],{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",[],{"slug":148,"title":149,"body":150,"framework_refs":151,"framework_notes":159},"ics-refrigeration-controllers-exposed-to-internet-enable-supermarket-freezer-attacks","ICS Refrigeration Controllers Exposed to Internet Enable Supermarket Freezer Attacks","Hackers exploited internet-exposed industrial control system (ICS) interfaces—specifically Danfoss and Copeland refrigeration controllers—to manipulate freezer temperatures in Swedish and French supermarkets, causing widespread food spoilage. The root problem was that critical operational technology (OT) management interfaces were directly reachable from the public internet without adequate access controls or network isolation. This matters because OT attacks have immediate, tangible physical consequences: financial losses from spoiled inventory, food safety risks to consumers, and potential regulatory liability. The incidents also highlight a systemic gap in securing legacy industrial equipment that was never designed with internet-connected threat models in mind.",[152,153,154,155,156,157,158],"CIS Control 12: Network Infrastructure Management","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)","CIS Control 13: Network Monitoring and Defense","CIS Control 4: Secure Configuration of Enterprise Assets and Software",{"NIS2 Article 21(2)(b)":160,"NIST SP 800-53 SI-2: Flaw Remediation":161,"CIS Control 13: Network Monitoring and Defense":162,"CIS Control 12: Network Infrastructure Management":163,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":164,"CIS Control 4: Secure Configuration of Enterprise Assets and Software":165,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":166},"NIS2 requires operators of essential services—including food supply chain operators—to implement incident handling and risk management measures that would encompass securing critical OT systems against network attacks.","Applying available firmware patches to the Danfoss and Copeland controllers in a timely manner would have removed known exploitable vulnerabilities used in the French attacks.","Continuous monitoring of OT network traffic would have detected unauthorized commands sent to refrigeration controllers, enabling early intervention before temperatures reached dangerous levels.","Directly applies here: segmenting OT refrigeration controller networks from internet-accessible networks would have prevented attackers from reaching the management interfaces in the first place.","A formal vulnerability management process covering OT assets would have identified the exposed controllers and mandated remediation before attackers could exploit them.","Hardening controller configurations—disabling unused remote management ports and applying secure default settings—would have significantly reduced the attack surface on the refrigeration units.","The controllers lacked proper access controls on their management interfaces; enforcing authentication and restricting remote access would have blocked unauthorized manipulation."]