[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqGv5Q2VNDe5ojMlMwz2ccdmUwQWS3jjEscHOOTwbPqQ":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":19,"status":27,"created_at":28,"published_at":29,"article":30,"tags":34,"podcasts":53,"controls":60},"ffc97642-52fd-4b61-a355-60d044209d44","iot-fridges-hacked-weak-passwords-and-unpatched-controllers-spoil-food-and-safety","789daa8b-1083-43c2-97d8-1dc995f24ed8","IoT Fridges Hacked: Weak Passwords and Unpatched Controllers Spoil Food and Safety","Attackers exploited internet-connected refrigeration controllers that were running outdated firmware and secured with weak or default passwords, causing temperature manipulation that spoiled food and compromised blood supplies. This incident highlights the dangerous real-world consequences when operational technology (OT) and IoT devices are treated as low-priority assets in security programs. The attack surface expands dramatically when critical infrastructure devices are internet-exposed without hardening. It matters not only because of financial losses but because compromised cold chain integrity can endanger lives — particularly in medical settings where temperature-sensitive blood products are stored.","**Immediate actions:**\n- Audit all internet-connected OT\u002FIoT devices immediately and enforce strong, unique passwords to replace any default or weak credentials.\n- Apply all available firmware and software patches to refrigeration controllers and similar OT devices without delay.\n- Isolate publicly exposed refrigeration controllers behind a firewall or VPN, removing direct internet access where operationally possible.\n\n**Long-term improvements:**\n- Maintain a comprehensive, continuously updated inventory of all OT\u002FIoT assets including firmware versions, network exposure, and responsible owner.\n- Implement a formal OT\u002FIoT patch management lifecycle with defined SLAs for critical vulnerabilities on operational technology.\n- Enforce a minimum-security baseline (strong authentication, encrypted communications, firmware validation) for any new IoT procurement.\n\n**Detection measures:**\n- Deploy network monitoring with anomaly detection tuned to flag unusual commands or access patterns on OT\u002FIoT device networks.\n- Configure alerting for out-of-range temperature readings or unexpected controller configuration changes to enable rapid incident response.",[12,13,14,15,16,17,18],"CIS Control 7: Continuous Vulnerability Management","CIS Control 1: Inventory and Control of Enterprise Assets","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)","OWASP A06:2021 Vulnerable and Outdated Components",{"NIS2 Article 21(2)(b)":20,"NIST SP 800-53 SI-2: Flaw Remediation":21,"OWASP A06:2021 Vulnerable and Outdated Components":22,"CIS Control 7: Continuous Vulnerability Management":23,"CIS Control 1: Inventory and Control of Enterprise Assets":24,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":25,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":26},"NIS2 mandates incident handling and security measures for operators of essential services including food supply and healthcare cold chain, directly applicable to the organizations whose refrigeration systems were compromised.","SI-2 requires organizations to identify, report, and correct information system flaws; mandatory flaw remediation processes would have closed the unpatched vulnerabilities in the refrigeration controllers.","The refrigeration controllers were running outdated, unpatched software — a textbook instance of vulnerable and outdated components being exploited, underscoring the need to track and update all system components including embedded OT firmware.","The attackers exploited unpatched controllers; a continuous vulnerability management program would have identified outdated firmware and driven timely remediation before exploitation.","Without an accurate inventory of internet-connected refrigeration controllers, organizations cannot know which devices are exposed, unpatched, or misconfigured — the exact gap attackers leveraged here.","This control requires timely identification and remediation of technical vulnerabilities, which if applied to OT\u002FIoT assets would have driven patching of the exploited refrigeration controllers.","Weak passwords on OT controllers directly violate this principle; enforcing strong authentication would have significantly raised the barrier to unauthorized access and control.","published","2026-11-07T14:20:24.505865+00:00","2026-11-07T14:20:24.488+00:00",{"id":7,"url":31,"slug":32,"title":33},"https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fkernel-panic-refrigeration-hacks-internet-of-things\u002F","the-fridge-hacking-spree-is-an-internet-of-things-wake-up-call-962a4f","The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call",[35,41,47],{"id":36,"name":37,"slug":38,"description":39,"color":40},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":42,"name":43,"slug":44,"description":45,"color":46},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":48,"name":49,"slug":50,"description":51,"color":52},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",[54],{"id":55,"date":56,"edition":57,"title":58,"audio_url":59},"4859a2fa-a0ef-4536-909c-5186e13772f0","2026-11-07","afternoon","ThreatNoir Weekend Brief — November 7","https:\u002F\u002Fcdn.threatnoir.com\u002Fpodcasts\u002F2026-11-07\u002Fthreatnoir-afternoon-brief-2026-11-07.mp3",[61,64,68],{"slug":50,"name":62,"problem":63},"Automated patch management","Known holes get closed in days, not months.",{"slug":65,"name":66,"problem":67},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":69,"name":70,"problem":71},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection."]