[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdZDHUV-8Fe2UYXKOhni3Q2WQWnrCffp_zhq0bIKusbU":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":32},"e81a115a-7baa-46b7-aa61-8ec790fc3e4d","Legacy refrigeration controllers exploited in OT attack on hundreds of French supermarkets","legacy-refrigeration-controllers-exploited-in-ot-attack-on-hundreds-of-french-su-b2931f","A coordinated attack on the operational technology (OT) behind supermarket refrigeration has hit hundreds of stores across France, in what security experts are calling one of the clearest examples yet of cyber sabotage with physical consequences. Retailers confirmed the attack on Monday 12 October, with disruption reportedly beginning on Sunday night. Intermarché and its Netto […] The post Legacy refrigeration controllers exploited in OT attack on hundreds of French supermarkets appeared first on IT Security Guru.","A coordinated cyberattack targeting the operational technology (OT) of refrigeration systems has affected hundreds of supermarkets across France. The attack, which began on Sunday night and was confirmed on Monday, caused significant disruption to the stores' cooling capabilities. Security experts are highlighting this incident as a clear instance of cyber sabotage with tangible physical consequences.","OT attack on refrigeration systems impacts hundreds of French supermarkets.","https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F10\u002F13\u002Flegacy-refrigeration-controllers-exploited-in-ot-attack-on-hundreds-of-french-supermarkets\u002F?utm_source=rss&utm_medium=rss&utm_campaign=legacy-refrigeration-controllers-exploited-in-ot-attack-on-hundreds-of-french-supermarkets",null,"2026-10-13T10:31:52+00:00","2026-10-13T14:00:05.199095+00:00",8,[17,20,23,26],{"name":18,"type":19},"refrigeration controllers","product",{"name":21,"type":22},"operational technology","technology",{"name":24,"type":25},"Intermarché","vendor",{"name":27,"type":25},"Netto","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":28,"icon":12,"name":30,"slug":31},"Nation-state","nation-state",[33,38,40,45],{"category":34},{"id":35,"icon":12,"name":36,"slug":37},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":39},{"id":28,"icon":12,"name":30,"slug":31},{"category":41},{"id":42,"icon":12,"name":43,"slug":44},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":46},{"id":47,"icon":12,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[24,27,18],{"controls":53,"vendors":141},[54,83,112],{"slug":55,"name":56,"problem":57,"products":58},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"slug":84,"name":85,"problem":86,"products":87},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"slug":113,"name":114,"problem":115,"products":116},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",[],{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":157},"legacy-ot-refrigeration-controllers-exploited-across-french-supermarket-chain","Legacy OT Refrigeration Controllers Exploited Across French Supermarket Chain","This attack exploited legacy operational technology (OT) controllers managing refrigeration systems — devices that are often overlooked in traditional IT security programs due to their specialized nature and long operational lifespans. The root cause lies in unpatched, aging OT hardware that was likely internet-accessible with little to no network isolation from the broader corporate environment. What makes this incident particularly alarming is the direct physical consequence: compromised food safety, spoiled inventory, and significant business disruption — demonstrating that cyber threats to OT are no longer theoretical. Organizations managing critical infrastructure must recognize that any networked device, regardless of its function, represents a potential attack vector. This incident underscores the urgent need to extend cybersecurity governance to OT and industrial control systems (ICS) with the same rigor applied to IT assets.",[147,148,149,150,151,152,153,154,155,156],"CIS Control 1: Inventory and Control of Enterprise Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-82: Guide to ICS Security","NIST CSF: Protect (PR.AC-5) – Network integrity is protected through network segregation","NIST CSF: Detect (DE.CM-1) – The network is monitored to detect potential cybersecurity events","IEC 62443-3-3: System security requirements and security levels for ICS","NERC CIP-007: Systems Security Management (applicable by analogy to OT contexts)","ITIL: Problem Management – Root cause analysis for recurring infrastructure vulnerabilities","EU NIS2 Directive: Article 21 – Security measures for operators of essential services",{}]