[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f38IRH85nLV8kMnj6w6WAcwuGjLcUfvDcnDZcVCwa8mE":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"bf999ecc-f4ab-4bfb-8ab8-1c6760d97ce6","Harden cooling systems now, feds warn critical infrastructure operators amid attacks","harden-cooling-systems-now-feds-warn-critical-infrastructure-operators-amid-atta-2daf0a","The U.S. government on Thursday called on critical infrastructure operators to safeguard their cooling systems following hacks that have caused chaos in European supermarkets in recent weeks.","US federal agencies have issued a warning to critical infrastructure operators to secure their cooling systems following recent cyberattacks in Europe that disrupted supermarket refrigeration and caused significant food spoilage. The advisory highlights the potential for malicious actors to exploit unpatched or internet-accessible controllers to alter settings, leading to inventory loss and equipment hazards. The warning comes amid heightened concerns about hybrid threats to infrastructure.","US feds warn critical infrastructure operators to harden cooling systems amid European supermarket hacks.","https:\u002F\u002Ftherecord.media\u002Fcyberattacks-refrigeration-cisa-fbi","http:\u002F\u002Fcms.therecord.media\u002Fuploads\u002FTrucks_34d1614b26.jpg","2026-11-05T19:15:00+00:00","2026-11-05T20:00:14.537649+00:00",8,[17,20,22,24],{"name":18,"type":19},"CISA","vendor",{"name":21,"type":19},"FBI",{"name":23,"type":19},"Defense Department",{"name":25,"type":19},"Ahold Delhaize","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":26,"icon":28,"name":29,"slug":30},null,"Threat Intelligence","threat-intelligence",[32,37,42,47],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":43},{"id":44,"icon":28,"name":45,"slug":46},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":48},{"id":26,"icon":28,"name":29,"slug":30},[],[18,21,23],{"controls":52,"vendors":139},[53,82,111],{"slug":54,"name":55,"problem":56,"products":57},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-access","Prisma Access","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Faccess","Cloud-delivered SASE: zero trust access to private apps and secure web gateway.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-private-access","Netskope Private Access","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fprivate-access","Zero trust access to private applications.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-private-access","Zscaler Private Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-private-access","Zero trust access to private applications, replacing VPN.",{"slug":83,"name":84,"problem":85,"products":86},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":112,"name":113,"problem":114,"products":115},"patch-management","Automated patch management","Known holes get closed in days, not months.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":112,"product_name":136,"url":137,"description":138},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":152},"unpatched-internet-exposed-cooling-controllers-targeted-in-critical-infrastructure-attacks","Unpatched, Internet-Exposed Cooling Controllers Targeted in Critical Infrastructure Attacks","Cyberattackers exploited unpatched and internet-accessible industrial cooling controllers in European supermarkets, causing refrigeration failures and significant food spoilage. The root problem is a failure to apply available patches and to isolate operational technology (OT) systems from the public internet — two well-established security hygiene practices. When critical physical infrastructure controllers are reachable from the internet without compensating controls, a single successful exploit can translate directly into real-world harm. This incident underscores that OT\u002FICS environments carry the same vulnerability risks as IT networks but with far greater physical and financial consequences.",[145,146,147,148,149,150,151],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIS2 Article 21(2)(b)","OWASP A06:2021 Vulnerable and Outdated Components","CIS Control 17: Incident Response Management",{"NIS2 Article 21(2)(b)":153,"NIST SP 800-53 SI-2: Flaw Remediation":154,"CIS Control 17: Incident Response Management":155,"OWASP A06:2021 Vulnerable and Outdated Components":156,"CIS Control 7: Continuous Vulnerability Management":157,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":158,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":159},"NIS2 explicitly requires operators of essential services to implement incident handling and risk management measures including vulnerability handling — obligations that would apply to operators of critical food-chain infrastructure such as refrigeration systems.","SI-2 requires organisations to identify, report, and correct information system flaws; applying this to OT controllers would have mandated timely patching of the vulnerable refrigeration systems.","The attacks caused significant physical damage before being contained, indicating a lack of a practised OT incident response plan; a mature IR capability would have enabled faster detection, containment, and recovery to limit food spoilage and equipment harm.","The exploited controllers represent outdated, unpatched components in an operational environment; this risk category highlights the danger of running software and firmware without current security updates.","Attackers exploited unpatched cooling controllers; a continuous vulnerability management programme with defined remediation SLAs would have identified and closed the exposed flaws before they could be weaponised.","This control requires organisations to inventory assets, assess their vulnerability status, and apply timely patches — directly addressing the failure to patch and monitor internet-exposed industrial controllers.","Internet-accessible controllers with weak or default credentials represent a fundamental access control failure; this CSF outcome requires ensuring only authorised entities can reach and modify critical systems."]