EU agencies warn of cyberattacks on refrigeration systems across Europe
- Severity
- High
- Sources
- 1
What happened
ENISA, the Commission, Europol and EU CSIRT and CyCLONe networks issued a joint advisory on 4 November after a new wave of incidents on 1-2 November, urging immediate action to mitigate exposure. No CVE IDs are given in the articles. Reported French targets were older Danfoss refrigeration controllers past end of support running outdated firmware; researchers previously reported authentication bypass weaknesses in some Danfoss controllers, but exploitation in these attacks is unconfirmed. Defenders should review ENISA's national CSIRT advisories, retire or update unsupported controllers, and check NIS2 reporting obligations.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Review ENISA's published technical advisories from national CSIRTs and apply the protective measures they recommend.
- Replace or update end-of-support refrigeration controllers and install current firmware.
- Report significant incidents to your national CSIRT or competent authority if your organisation falls under NIS2.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Who and what is in it
Companies
Government agencies