[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fO0sxA9WWQAl6PLwj6hxVvzikt1kwARGb2h5mmPxGrJU":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"44d8eea6-77ce-4451-9171-ba4da386821f","US agencies warn attackers are targeting refrigeration systems that protect food and medicine","us-agencies-warn-attackers-are-targeting-refrigeration-systems-that-protect-food-e70260","Threat actors are going after the controllers that keep grocery store freezers and cold storage rooms at safe temperatures, and they may push those units into continuous heating and defrost cycles, five US federal agencies warned in a joint advisory published on Thursday. CISA, the FBI, the Department of Health and Human Services (HHS), the US Department of Agriculture (USDA) and the Department of Transportation (DOT) issued the warning in response to ongoing malicious activity … More → The post US agencies warn attackers are targeting refrigeration systems that protect food and medicine appeared first on Help Net Security.","Five US federal agencies have issued a joint advisory warning that threat actors are targeting industrial refrigeration and cold chain monitoring systems. Attackers are exploiting unpatched or internet-exposed controllers to manipulate temperature settings, potentially causing inventory loss, equipment damage, and public health risks. The advisory urges organizations to take immediate action, including disconnecting controllers from the internet and implementing robust security measures.","US agencies warn of attacks targeting refrigeration systems that protect food and medicine.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F11\u002F06\u002Fcyberattacks-refrigeration-systems-cisa-fbi\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002F02152704\u002Fhot-1500.webp","2026-11-06T09:04:36+00:00","2026-11-06T10:00:22.235081+00:00",8,[17,20,22,24,26,28],{"name":18,"type":19},"CISA","vendor",{"name":21,"type":19},"FBI",{"name":23,"type":19},"HHS",{"name":25,"type":19},"USDA",{"name":27,"type":19},"DOT",{"name":29,"type":30},"industrial refrigeration","technology","d6f63bb8-0801-486a-be7f-171400700454",{"id":31,"icon":33,"name":34,"slug":35},null,"IoT\u002FOT","iot-ot",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,23],{"controls":57,"vendors":142},[58,87,116],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":88,"name":89,"problem":90,"products":91},"patch-management","Automated patch management","Known holes get closed in days, not months.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":117,"name":118,"problem":119,"products":120},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[121,129,134],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":130,"product_name":131,"url":132,"description":133},"tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",[],{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":155},"internet-exposed-refrigeration-controllers-targeted-by-threat-actors","Internet-Exposed Refrigeration Controllers Targeted by Threat Actors","Attackers are exploiting unpatched and internet-exposed industrial refrigeration controllers to manipulate temperature settings in cold chain environments, putting food safety and medical supplies at risk. The root issue is a failure to manage vulnerabilities in operational technology (OT) systems and an absence of network segmentation that allowed these controllers to be directly reachable from the internet. This matters because compromising cold chain infrastructure can cause mass inventory loss, degrade life-saving medications, and create serious public health emergencies. OT environments are frequently overlooked in standard patch and vulnerability management programs, making them soft targets for even moderately sophisticated attackers.",[148,149,150,151,152,153,154],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)","OWASP A06:2021 Vulnerable and Outdated Components",{"NIS2 Article 21(2)(b)":156,"NIST SP 800-53 SI-2: Flaw Remediation":157,"CIS Control 12: Network Infrastructure Management":158,"OWASP A06:2021 Vulnerable and Outdated Components":159,"CIS Control 7: Continuous Vulnerability Management":160,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":161,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":162},"NIS2 mandates incident handling and risk management measures for operators of essential services including food and health supply chains; compliance would have required the network hardening and vulnerability management practices that were absent here.","SI-2 requires organisations to identify, report, and correct information system flaws; applying this control to OT refrigeration systems would have mandated timely patching of the vulnerable firmware exploited in this campaign.","Controllers were directly internet-exposed; proper network infrastructure management, including firewall rules and segmented OT zones, would have prevented external actors from reaching these systems at all.","The refrigeration controllers running unpatched firmware are a direct real-world instance of vulnerable and outdated components being exploited; applying this principle to OT device procurement and maintenance lifecycles would have driven timely updates.","Attackers exploited unpatched controllers; a continuous vulnerability management programme with regular scanning and enforced patch deadlines for OT assets would have remediated the known flaws before they could be exploited.","This control requires timely identification and remediation of technical vulnerabilities across all systems; had it been applied to OT assets, the unpatched controllers highlighted in the advisory would have been patched or mitigated before exploitation.","Internet-exposed controllers likely lacked strong authentication controls; enforcing identity management and access restrictions under PR.AA would have prevented unauthorised actors from logging in and changing temperature settings."]