[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcbmJaomckVrblUdjr1EuaLcuvJkyv82gibex7La8nOc":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":49,"controls":50},"b9727951-5e48-4be6-b94e-e154fa77dfa8","refrigeration-controller-vulnerabilities-enable-remote-supermarket-attacks","aa783c48-4665-4c0b-ae85-9d83ec662ba2","Refrigeration Controller Vulnerabilities Enable Remote Supermarket Attacks","Attackers exploited unpatched vulnerabilities in internet-exposed Danfoss refrigeration controllers to remotely manipulate temperatures across hundreds of European supermarkets, causing widespread food spoilage. This incident underscores a critical and often overlooked risk: Operational Technology (OT) devices such as HVAC and refrigeration controllers are frequently deployed with default configurations, minimal authentication, and delayed patching cycles — making them attractive targets. Unlike IT systems, compromised OT devices can cause direct physical harm, financial loss, and public safety consequences. The attack demonstrates that OT environments must be treated with the same security rigor as enterprise IT infrastructure.","**Immediate actions:**\n- Immediately audit all internet-facing OT\u002FICS devices (e.g., refrigeration controllers) and remove direct public internet exposure.\n- Apply all available vendor patches and firmware updates to Danfoss controllers and equivalent OT equipment.\n- Change all default credentials on OT devices and enforce strong, unique passwords for remote access.\n\n**Long-term improvements:**\n- Implement strict network segmentation by placing OT systems on isolated VLANs with firewall-enforced boundaries separating them from corporate IT networks.\n- Establish a dedicated OT asset inventory and assign ownership for patching and vulnerability tracking on all industrial control devices.\n- Require multi-factor authentication (MFA) and VPN-gated access for any remote management of OT\u002FICS systems.\n\n**Detection measures:**\n- Deploy OT-aware monitoring solutions (e.g., Claroty, Dragos, or Nozomi) to detect anomalous commands or temperature parameter changes in real time.\n- Define and alert on operational baselines so any deviation in refrigeration set-points triggers an immediate security and operations notification.\n- Conduct regular penetration testing and vulnerability assessments specifically targeting OT\u002FICS environments.",[12,13,14,15,16,17,18,19,20,21],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 12 – Network Infrastructure Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-82 – Guide to ICS\u002FOT Security","NIST CSF PR.AC-5 – Network Integrity \u002F Segmentation","NIST CSF DE.CM-1 – Network Monitoring for Anomalies","IEC 62443-3-3 – Industrial Automation and Control Systems Security","NERC CIP-005 – Electronic Security Perimeters (applicable by analogy to OT)","GDPR Article 32 – Security of Processing (for any personal data impacted by OT breaches)",{},"published","2026-10-13T10:21:18.704511+00:00","2026-10-13T10:21:18.66+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fwww.securityweek.com\u002Frefrigeration-controller-hack-spoils-food-across-european-supermarkets\u002F","refrigeration-controller-hack-spoils-food-across-european-supermarkets-11ed89","Refrigeration Controller Hack Spoils Food Across European Supermarkets",[31,37,43],{"id":32,"name":33,"slug":34,"description":35,"color":36},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":38,"name":39,"slug":40,"description":41,"color":42},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",{"id":44,"name":45,"slug":46,"description":47,"color":48},"f43a7f30-5046-4b10-9dba-1a704139821e","Network Segmentation","network-segmentation","Lateral movement, flat networks, missing firewalls","#06b6d4",[],[51,54,57],{"slug":34,"name":52,"problem":53},"Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":40,"name":55,"problem":56},"Automated patch management","Known holes get closed in days, not months.",{"slug":58,"name":59,"problem":60},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection."]