[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOQBNMoG1FCzW0esxUL3u6D9_RCj3iCW5_huhq_QcFsI":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":126},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"789daa8b-1083-43c2-97d8-1dc995f24ed8","The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call","the-fridge-hacking-spree-is-an-internet-of-things-wake-up-call-962a4f","Escalating hacks affecting blood labs and grocery stores show the very real risks to critical infrastructure that come from basic security lapses involving internet-connected devices.","A series of cyberattacks have targeted internet-connected refrigerators in France, impacting blood labs and grocery stores by raising temperatures. Similar incidents have also affected supermarkets across Europe and commissaries on US military bases, leading to significant food spoilage. While the perpetrators remain unclear, potential links to Russia or Iran are being investigated, and attackers are reportedly exploiting unpatched controllers with weak passwords.","Internet-connected refrigerators targeted in attacks across Europe and US military bases.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fkernel-panic-refrigeration-hacks-internet-of-things\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6aecfb1b276d9711716c8ef8\u002Fmaster\u002Fpass\u002FKernelPanic_10312026_v1-ezgif.com-video-to-gif-converter.gif","2026-11-07T13:00:00+00:00","2026-11-07T14:00:21.162612+00:00",8,[17,20,23,26,28],{"name":18,"type":19},"Danfoss","vendor",{"name":21,"type":22},"refrigerators","product",{"name":24,"type":25},"Russia-based actors","threat_actor",{"name":27,"type":25},"Iran-linked actors",{"name":29,"type":30},"Internet of Things","technology","d6f63bb8-0801-486a-be7f-171400700454",{"id":31,"icon":33,"name":34,"slug":35},null,"IoT\u002FOT","iot-ot",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":52,"vendors":125},[53,82,96],{"slug":54,"name":55,"problem":56,"products":57},"patch-management","Automated patch management","Known holes get closed in days, not months.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":83,"name":84,"problem":85,"products":86},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[87,88],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":97,"name":98,"problem":99,"products":100},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[101,109,117],{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",[],{"slug":127,"title":128,"body":129,"framework_refs":130,"framework_notes":138},"iot-fridges-hacked-weak-passwords-and-unpatched-controllers-spoil-food-and-safety","IoT Fridges Hacked: Weak Passwords and Unpatched Controllers Spoil Food and Safety","Attackers exploited internet-connected refrigeration controllers that were running outdated firmware and secured with weak or default passwords, causing temperature manipulation that spoiled food and compromised blood supplies. This incident highlights the dangerous real-world consequences when operational technology (OT) and IoT devices are treated as low-priority assets in security programs. The attack surface expands dramatically when critical infrastructure devices are internet-exposed without hardening. It matters not only because of financial losses but because compromised cold chain integrity can endanger lives — particularly in medical settings where temperature-sensitive blood products are stored.",[131,132,133,134,135,136,137],"CIS Control 7: Continuous Vulnerability Management","CIS Control 1: Inventory and Control of Enterprise Assets","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)","OWASP A06:2021 Vulnerable and Outdated Components",{"NIS2 Article 21(2)(b)":139,"NIST SP 800-53 SI-2: Flaw Remediation":140,"OWASP A06:2021 Vulnerable and Outdated Components":141,"CIS Control 7: Continuous Vulnerability Management":142,"CIS Control 1: Inventory and Control of Enterprise Assets":143,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":144,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":145},"NIS2 mandates incident handling and security measures for operators of essential services including food supply and healthcare cold chain, directly applicable to the organizations whose refrigeration systems were compromised.","SI-2 requires organizations to identify, report, and correct information system flaws; mandatory flaw remediation processes would have closed the unpatched vulnerabilities in the refrigeration controllers.","The refrigeration controllers were running outdated, unpatched software — a textbook instance of vulnerable and outdated components being exploited, underscoring the need to track and update all system components including embedded OT firmware.","The attackers exploited unpatched controllers; a continuous vulnerability management program would have identified outdated firmware and driven timely remediation before exploitation.","Without an accurate inventory of internet-connected refrigeration controllers, organizations cannot know which devices are exposed, unpatched, or misconfigured — the exact gap attackers leveraged here.","This control requires timely identification and remediation of technical vulnerabilities, which if applied to OT\u002FIoT assets would have driven patching of the exploited refrigeration controllers.","Weak passwords on OT controllers directly violate this principle; enforcing strong authentication would have significantly raised the barrier to unauthorized access and control."]