[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMQi0JUkg5CDFvZRrS5QNkH2omSYIQYdMzRvvTZW7lBo":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":49,"controls":50},"860c60c6-7161-4c96-b9bf-d50cb5749440","legacy-ot-refrigeration-controllers-exploited-across-french-supermarket-chain","e81a115a-7baa-46b7-aa61-8ec790fc3e4d","Legacy OT Refrigeration Controllers Exploited Across French Supermarket Chain","This attack exploited legacy operational technology (OT) controllers managing refrigeration systems — devices that are often overlooked in traditional IT security programs due to their specialized nature and long operational lifespans. The root cause lies in unpatched, aging OT hardware that was likely internet-accessible with little to no network isolation from the broader corporate environment. What makes this incident particularly alarming is the direct physical consequence: compromised food safety, spoiled inventory, and significant business disruption — demonstrating that cyber threats to OT are no longer theoretical. Organizations managing critical infrastructure must recognize that any networked device, regardless of its function, represents a potential attack vector. This incident underscores the urgent need to extend cybersecurity governance to OT and industrial control systems (ICS) with the same rigor applied to IT assets.","**Immediate actions:**\n- Audit and inventory all OT\u002FICS devices, identifying legacy controllers that are internet-facing or unpatched, and isolate them from the public internet immediately.\n- Apply all available vendor patches or firmware updates to refrigeration and building management controllers, or implement compensating controls where patching is not feasible.\n- Force credential rotation on all OT management interfaces and disable default or shared credentials.\n\n**Long-term improvements:**\n- Implement strict network segmentation by placing all OT systems in isolated VLANs with firewall-enforced policies that deny unrestricted IT-to-OT lateral movement.\n- Establish a formal OT asset lifecycle policy that triggers security reviews and replacement planning when devices reach end-of-support status.\n- Integrate OT devices into a unified vulnerability management program with dedicated scanning tools suited for industrial protocols (e.g., Claroty, Dragos, Nozomi).\n\n**Detection measures:**\n- Deploy OT-aware intrusion detection systems (IDS) capable of baselining normal operational traffic and alerting on anomalous commands or connections.\n- Establish 24\u002F7 monitoring and alerting for OT control plane changes, unexpected reboots, or configuration modifications on critical building management systems.\n- Define and test an OT-specific incident response playbook that includes escalation paths to physical operations teams when cyber events have real-world consequences.",[12,13,14,15,16,17,18,19,20,21],"CIS Control 1: Inventory and Control of Enterprise Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-82: Guide to ICS Security","NIST CSF: Protect (PR.AC-5) – Network integrity is protected through network segregation","NIST CSF: Detect (DE.CM-1) – The network is monitored to detect potential cybersecurity events","IEC 62443-3-3: System security requirements and security levels for ICS","NERC CIP-007: Systems Security Management (applicable by analogy to OT contexts)","ITIL: Problem Management – Root cause analysis for recurring infrastructure vulnerabilities","EU NIS2 Directive: Article 21 – Security measures for operators of essential services",{},"published","2026-10-13T14:21:25.939097+00:00","2026-10-13T14:21:25.902+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F10\u002F13\u002Flegacy-refrigeration-controllers-exploited-in-ot-attack-on-hundreds-of-french-supermarkets\u002F?utm_source=rss&utm_medium=rss&utm_campaign=legacy-refrigeration-controllers-exploited-in-ot-attack-on-hundreds-of-french-supermarkets","legacy-refrigeration-controllers-exploited-in-ot-attack-on-hundreds-of-french-su-b2931f","Legacy refrigeration controllers exploited in OT attack on hundreds of French supermarkets",[31,37,43],{"id":32,"name":33,"slug":34,"description":35,"color":36},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":38,"name":39,"slug":40,"description":41,"color":42},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",{"id":44,"name":45,"slug":46,"description":47,"color":48},"f43a7f30-5046-4b10-9dba-1a704139821e","Network Segmentation","network-segmentation","Lateral movement, flat networks, missing firewalls","#06b6d4",[],[51,54,58],{"slug":46,"name":52,"problem":53},"Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":55,"name":56,"problem":57},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"slug":59,"name":60,"problem":61},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it."]