[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRzkdm4MFbF-0A6-SBEsozr73qf1Bc14dukCyT3Ew6DY":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":33,"created_at":34,"published_at":35,"article":36,"tags":40,"podcasts":59,"controls":60},"29f1f37b-b2c4-4f97-a788-083ac3f20b39","otics-cyberattack-spoils-food-stocks-by-hijacking-supermarket-refrigeration-systems","59c77cb7-cd97-4514-ab5a-99d0bc81e8d8","OT\u002FICS Cyberattack Spoils Food Stocks by Hijacking Supermarket Refrigeration Systems","Attackers exploited vulnerabilities in legacy industrial control software from Danfoss to manipulate refrigeration defrost cycles, driving temperatures to 50°C and causing millions of euros in food spoilage losses. The root problem lies in operational technology (OT) systems — refrigeration controllers, HVAC, and similar industrial devices — being reachable over networks without adequate isolation from corporate IT environments or the internet. Older control software in critical infrastructure is frequently unpatched and unmonitored, creating a wide attack surface that is attractive to threat actors seeking physical, financial, or disruptive impact. This incident underscores that cyberattacks are no longer confined to data theft; they can cause direct physical and economic harm to essential supply chains.","**Immediate actions:**\n- Audit and isolate all OT\u002FICS devices (refrigeration controllers, HVAC, PLCs) from corporate IT networks and the public internet immediately.\n- Inventory all industrial control software versions and apply available patches or vendor mitigations, prioritising legacy systems like the affected Danfoss software.\n- Change all default credentials on OT devices and enforce strong authentication for remote access.\n\n**Long-term improvements:**\n- Implement strict network segmentation using DMZs and industrial firewalls to separate OT environments from IT networks and external connectivity.\n- Establish a dedicated OT\u002FICS vulnerability management programme that tracks EOL software and firmware across all vendor-supplied control systems.\n- Develop and regularly test an OT-specific incident response plan that includes procedures for physical asset protection (e.g., manual temperature overrides, backup cooling protocols).\n\n**Detection measures:**\n- Deploy OT-aware monitoring tools (e.g., Claroty, Dragos, Nozomi) to detect anomalous commands or parameter changes in industrial control systems.\n- Set automated alerting thresholds on critical physical parameters such as refrigeration temperature deviations beyond acceptable ranges.\n- Require vendors like Danfoss to provide a Software Bill of Materials (SBOM) and timely security advisories for all deployed control software.",[12,13,14,15,16,17,18,19,20,21],"CIS Control 12 – Network Infrastructure Management","CIS Control 16 – Application Software Security","CIS Control 7 – Continuous Vulnerability Management","NIST SP 800-82 – Guide to ICS Security","NIST CSF PR.AC-5 – Network Integrity \u002F Segmentation","NIST CSF DE.CM-1 – Network Monitoring and Detection","IEC 62443 – Industrial Automation and Control Systems Security","GDPR Article 32 – Security of Processing (where personal data systems are co-located)","ITIL Problem Management – Root Cause Analysis for recurring OT vulnerabilities","ENISA Good Practices for Security of IoT and Smart Infrastructures",{"NIST SP 800-82 – Guide to ICS Security":23,"CIS Control 16 – Application Software Security":24,"CIS Control 12 – Network Infrastructure Management":25,"CIS Control 7 – Continuous Vulnerability Management":26,"NIST CSF DE.CM-1 – Network Monitoring and Detection":27,"NIST CSF PR.AC-5 – Network Integrity \u002F Segmentation":28,"IEC 62443 – Industrial Automation and Control Systems Security":29,"ENISA Good Practices for Security of IoT and Smart Infrastructures":30,"ITIL Problem Management – Root Cause Analysis for recurring OT vulnerabilities":31,"GDPR Article 32 – Security of Processing (where personal data systems are co-located)":32},"ICS security guidance covers protecting controllers like those that spoiled food stocks.","Secure software practices cover legacy ICS software with known flaws.","Segmenting refrigeration controllers from the internet would have stopped attackers reaching the Danfoss systems.","Continuous vulnerability management includes tracking flaws in OT software like Danfoss refrigeration controllers.","Network monitoring can detect unauthorised changes to refrigeration settings.","Segmentation keeps refrigeration controls away from untrusted networks.","Industrial security standards cover access control and patching for refrigeration controllers.","IoT security guidance covers securing smart infrastructure like refrigeration systems.","Root cause analysis helps address recurring OT vulnerabilities like those in legacy controllers.","Requires appropriate security where personal data systems sit on the same network as OT.","published","2026-10-12T14:21:37.872427+00:00","2026-10-12T14:21:37.851+00:00",{"id":7,"url":37,"slug":38,"title":39},"https:\u002F\u002Fhackread.com\u002Fhackers-heat-supermarket-fridges-50c-france-cyberattack\u002F","hackers-heat-supermarket-fridges-to-50-c-in-france-cyberattack-7fbcc5","Hackers Heat Supermarket Fridges to 50°C in France Cyberattack",[41,47,53],{"id":42,"name":43,"slug":44,"description":45,"color":46},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":48,"name":49,"slug":50,"description":51,"color":52},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",{"id":54,"name":55,"slug":56,"description":57,"color":58},"f43a7f30-5046-4b10-9dba-1a704139821e","Network Segmentation","network-segmentation","Lateral movement, flat networks, missing firewalls","#06b6d4",[],[61,64,68],{"slug":44,"name":62,"problem":63},"Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":65,"name":66,"problem":67},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"slug":69,"name":70,"problem":71},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it."]