[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCr3qG3E2ZYNo1-bgp-PZrcNOtGblf_qnoGuQ5SMbaS0":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":21,"status":22,"created_at":23,"published_at":24,"article":25,"tags":29,"podcasts":48,"controls":49},"0c362283-7244-4c0c-ac0a-d345f3faddbd","outdated-refrigeration-controllers-enable-remote-sabotage-of-french-supermarkets","ec752207-c063-4553-a426-e59e0a651270","Outdated Refrigeration Controllers Enable Remote Sabotage of French Supermarkets","Attackers exploited known vulnerabilities in aging Danfoss refrigeration controllers to remotely disable refrigeration systems across hundreds of French supermarkets overnight, causing widespread food spoilage and significant financial damage. The root cause lies in unpatched, internet-exposed operational technology (OT) devices that lacked adequate network isolation from external threats. This incident highlights the growing danger of neglecting legacy industrial control systems (ICS) in retail and food supply environments, where cyber-physical attacks have direct, real-world consequences. The attack is a stark reminder that OT and IoT devices are increasingly targeted and must receive the same security rigor as traditional IT infrastructure.","**Immediate actions:**\n- Audit and immediately patch or replace all legacy Danfoss refrigeration controllers and similar OT\u002FICS devices running outdated firmware.\n- Isolate refrigeration control systems from the public internet by placing them behind firewalls or removing direct external access entirely.\n- Change all default credentials on refrigeration and building management system controllers.\n\n**Long-term improvements:**\n- Implement strict network segmentation between corporate IT networks and operational technology (OT) environments using dedicated VLANs or air gaps.\n- Maintain a comprehensive, up-to-date asset inventory of all OT\u002FICS and IoT devices, including firmware versions and patch status.\n- Establish a formal OT vulnerability management program with regular scanning and a defined patching cadence for industrial control systems.\n\n**Detection measures:**\n- Deploy anomaly-based monitoring on OT networks to detect unauthorized commands or unusual parameter changes to refrigeration controllers.\n- Set up real-time alerting for out-of-range temperature readings or unexpected device configuration changes across all refrigeration units.\n- Conduct periodic penetration testing specifically targeting OT and ICS environments to identify exploitable entry points before attackers do.",[12,13,14,15,16,17,18,19,20],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 12 – Network Infrastructure Management","NIST SP 800-82 – Guide to ICS Security","NIST CSF PR.AC-5 – Network Integrity \u002F Segmentation","NIST CSF DE.CM-1 – Network Monitoring","IEC 62443 – Industrial Cybersecurity Standard","GDPR Article 32 – Security of Processing (applicable where personal\u002Foperational data is at risk)","ITIL Service Continuity Management – Protection of critical infrastructure services",{},"published","2026-10-12T16:20:21.665531+00:00","2026-10-12T16:20:21.643+00:00",{"id":7,"url":26,"slug":27,"title":28},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcyberattack-shuts-down-refrigerators-at-french-supermarkets\u002F","cyberattack-shuts-down-refrigerators-at-french-supermarkets-953fff","Cyberattack shuts down refrigerators at French supermarkets",[30,36,42],{"id":31,"name":32,"slug":33,"description":34,"color":35},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":37,"name":38,"slug":39,"description":40,"color":41},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",{"id":43,"name":44,"slug":45,"description":46,"color":47},"f43a7f30-5046-4b10-9dba-1a704139821e","Network Segmentation","network-segmentation","Lateral movement, flat networks, missing firewalls","#06b6d4",[],[50,53,56],{"slug":33,"name":51,"problem":52},"Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":39,"name":54,"problem":55},"Automated patch management","Known holes get closed in days, not months.",{"slug":57,"name":58,"problem":59},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection."]