Attacks on supermarket and blood storage cooling systems prompt US warning
- Severity
- High
- Sources
- 1
What happened
CISA, the FBI and three other federal agencies warned on November 5 that attackers may exploit authentication bypass flaws, code-injection vulnerabilities or weak configurations in refrigeration controllers to change temperatures or force continuous heating or defrost cycles. No CVE identifiers are given. Danfoss advised Dutch customers on October 13 to disconnect from the public internet, and says the compromised Dutch systems used default passwords. Defenders should remove control panels from the internet, segment operational networks, replace default credentials, enforce strong authentication, patch firmware, retire unsupported devices, and set safe temperature limits with alerting.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Keep refrigeration or cold-storage control panels off the public internet and reconnect only through a secure network.
- Change default passwords and enable strong authentication on controllers and their associated apps.
- Apply firmware updates and replace devices that no longer receive support.
- Disable remote access on devices you do not use away from home, after checking the manufacturer's instructions.
Written by AI from the sources, checked against them