[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fS_mn1nJZPflKEmaF7l2HeUX25LjNZU6VN4wWFyoIji4":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":49,"controls":50},"b6c59f4c-7bf7-45ab-bb66-75d4149c60ef","hijacked-ics-controllers-cook-french-supermarket-fridges-to-50c","941d546e-5313-4f5b-b0dd-b4cba8196d8e","Hijacked ICS Controllers Cook French Supermarket Fridges to 50°C","Attackers exploited internet-exposed Danfoss industrial controllers to remotely manipulate refrigeration systems across hundreds of French supermarkets, raising temperatures to 50°C and causing widespread food spoilage. The root cause lies in insufficiently secured remote access to operational technology (OT) systems — controllers were reachable from the internet without adequate authentication or network isolation. This incident demonstrates that OT\u002FICS devices are high-value targets with real-world physical and financial consequences when compromised. The lack of network segmentation between IT and OT environments allowed attackers to reach critical infrastructure systems that should never be directly internet-facing.","**Immediate actions:**\n- Audit and remove all direct internet exposure of ICS\u002FSCADA controllers, placing them behind VPNs or jump hosts with strong MFA.\n- Change all default credentials on Danfoss and similar OT controllers and enforce strong, unique passwords immediately.\n- Apply all available vendor firmware and software patches to affected Danfoss controllers.\n\n**Long-term improvements:**\n- Implement strict network segmentation (DMZ\u002Fair-gap where possible) between corporate IT networks and OT\u002FICS environments.\n- Maintain a comprehensive, up-to-date inventory of all internet-facing industrial control assets and conduct regular vulnerability assessments.\n- Work with vendors and supply chain partners to ensure remote management solutions meet minimum security baselines before deployment.\n\n**Detection measures:**\n- Deploy OT-aware intrusion detection systems (e.g., Claroty, Dragos, Nozomi) to alert on anomalous commands or parameter changes in industrial controllers.\n- Establish real-time alerting for out-of-range setpoint changes on critical systems such as refrigeration, HVAC, and power controls.\n- Define and rehearse an incident response playbook specifically for OT\u002FICS compromise scenarios, including manual override procedures.",[12,13,14,15,16,17,18,19,20,21],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 12 – Network Infrastructure Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-82 – Guide to ICS Security","NIST AC-17 – Remote Access","NIST SC-7 – Boundary Protection","IEC 62443 – Security for Industrial Automation and Control Systems","NIST CSF PR.AC-5 – Network Integrity \u002F Least Privilege","NIST CSF DE.CM-1 – Network Monitoring","GDPR Article 32 – Security of Processing (where personal data storage systems are co-located)",{},"published","2026-10-13T10:20:33.280663+00:00","2026-10-13T10:20:33.259+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fattackers-heat-french-supermarket.html","attackers-heat-french-supermarket-fridges-up-to-50-c-by-hijacking-danfoss-contro-08cfd3","Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers",[31,37,43],{"id":32,"name":33,"slug":34,"description":35,"color":36},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":38,"name":39,"slug":40,"description":41,"color":42},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":44,"name":45,"slug":46,"description":47,"color":48},"f43a7f30-5046-4b10-9dba-1a704139821e","Network Segmentation","network-segmentation","Lateral movement, flat networks, missing firewalls","#06b6d4",[],[51,55,58],{"slug":52,"name":53,"problem":54},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":46,"name":56,"problem":57},"Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":59,"name":60,"problem":61},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection."]