Back to Feed
IoT/OTNov 9, 2026

U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacks

US agencies warn critical infrastructure to secure refrigeration systems after EU attacks.

Following cyber attacks on French blood banks and European supermarkets, U.S. federal agencies are urging critical infrastructure organizations to immediately secure industrial refrigeration systems. Attackers are exploiting unpatched flaws, misconfigurations, and weak passwords to remotely manipulate temperature controls, leading to product spoilage and potential fire hazards. Agencies recommend isolating OT systems, securing remote access, patching vulnerabilities, and replacing end-of-life devices.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Danfoss?

Get an email when a new story names Danfoss, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

Attackers exploited a combination of unpatched vulnerabilities, misconfigurations, and weak passwords in industrial refrigeration systems to remotely manipulate temperature controls — causing spoilage of blood supplies and food products, and creating potential fire hazards. These OT (Operational Technology) systems were likely internet-exposed with little to no network isolation, making them easy targets for remote exploitation. The incidents highlight how legacy industrial control systems are frequently overlooked in standard patch and hardening cycles, leaving life-safety consequences on the table. When critical infrastructure OT systems are treated as 'set and forget' rather than actively managed assets, attackers can weaponize them with minimal effort.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — Danfoss AK-SM
  • malware — Danfoss AK-SC
  • malware — Copeland
  • malware — Dixell XWEB

Entities

Danfoss (vendor)Copeland (vendor)Dixell (vendor)AK-SM (product)AK-SC (product)XWEB (product)