[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqEIl5g3UC4FRXn7TTqy2dPpQAxkRYgeuQgvio6y6m7U":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":148},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"aa783c48-4665-4c0b-ae85-9d83ec662ba2","Refrigeration Controller Hack Spoils Food Across European Supermarkets","refrigeration-controller-hack-spoils-food-across-european-supermarkets-11ed89","A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost. The post Refrigeration Controller Hack Spoils Food Across European Supermarkets appeared first on SecurityWeek.","A widespread cyberattack has disrupted refrigeration systems in hundreds of European supermarkets, causing significant food spoilage. Attackers reportedly exploited vulnerabilities in Danfoss refrigeration controllers, remotely setting temperatures to 50°C and initiating defrost cycles. The attack, which affected multiple supermarket chains across several countries, highlights the critical security risks in operational technology (OT) environments.","Cyberattack targets refrigeration controllers in European supermarkets, spoiling food.","https:\u002F\u002Fwww.securityweek.com\u002Frefrigeration-controller-hack-spoils-food-across-european-supermarkets\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002Fsupermarket-refrigerators.jpeg","2026-10-13T08:28:51+00:00","2026-10-13T10:00:15.808415+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Danfoss","vendor",{"name":21,"type":22},"AK-SM 800A","product",{"name":24,"type":22},"refrigeration controllers",{"name":26,"type":22},"supermarkets",{"name":28,"type":19},"Claroty",{"name":30,"type":22},"Hyper U","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":31,"icon":33,"name":34,"slug":35},null,"Malware","malware",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[],[18,28,21],{"controls":57,"vendors":144},[58,87,116],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":88,"name":89,"problem":90,"products":91},"patch-management","Automated patch management","Known holes get closed in days, not months.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":117,"name":118,"problem":119,"products":120},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[121,128,136],{"vendor_slug":122,"vendor_name":28,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",[145],{"slug":122,"name":28,"logo_path":123,"roles":146},[147],"reported_by",{"slug":149,"title":150,"body":151,"framework_refs":152,"framework_notes":163},"refrigeration-controller-vulnerabilities-enable-remote-supermarket-attacks","Refrigeration Controller Vulnerabilities Enable Remote Supermarket Attacks","Attackers exploited unpatched vulnerabilities in internet-exposed Danfoss refrigeration controllers to remotely manipulate temperatures across hundreds of European supermarkets, causing widespread food spoilage. This incident underscores a critical and often overlooked risk: Operational Technology (OT) devices such as HVAC and refrigeration controllers are frequently deployed with default configurations, minimal authentication, and delayed patching cycles — making them attractive targets. Unlike IT systems, compromised OT devices can cause direct physical harm, financial loss, and public safety consequences. The attack demonstrates that OT environments must be treated with the same security rigor as enterprise IT infrastructure.",[153,154,155,156,157,158,159,160,161,162],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 12 – Network Infrastructure Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-82 – Guide to ICS\u002FOT Security","NIST CSF PR.AC-5 – Network Integrity \u002F Segmentation","NIST CSF DE.CM-1 – Network Monitoring for Anomalies","IEC 62443-3-3 – Industrial Automation and Control Systems Security","NERC CIP-005 – Electronic Security Perimeters (applicable by analogy to OT)","GDPR Article 32 – Security of Processing (for any personal data impacted by OT breaches)",{}]