US agencies urge grocers to secure internet-connected industrial freezers after attacks in Europe
VULNERABILITYCISAredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Attackers have targeted internet-accessible, unpatched refrigeration controllers at grocery chains in France, Belgium, Ireland, Luxembourg and Sweden since mid-October, forcing continuous heating and defrost cycles. A joint FBI, CISA, HHS, USDA and DOT advisory describes authentication bypass, arbitrary code injection and weak configurations as the access methods. Defenders should remove these devices from the public internet, use a firewall or edge device for any remote access, isolate OT on a dedicated VLAN with an allow-list, and apply patches. No CVE identifiers are given in the articles.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Disconnect industrial refrigeration and freezer controllers from the public internet.
- Apply the latest patches and retire legacy devices that no longer receive vendor updates.
- Replace default passwords and turn on phishing-resistant multifactor authentication where possible.
- Keep backups offsite and offline, and enable logging with regular log reviews.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Register (Security)