Ethical Hacking News
French supermarkets were targeted by hackers who exploited vulnerabilities in refrigeration controllers, specifically those manufactured by Danfoss and Copeland. Despite warnings from researchers and the availability of patches, the attack highlights the need for improved cybersecurity measures in the operational technology sector.
The recent cyberattack on French supermarkets highlights the vulnerability of the country's supply chain and the need for improved cybersecurity measures. Researchers warned of the potential risks months before the attack, but the US Cybersecurity and Infrastructure Security Agency (CISA) didn't publish advisories until 2025. The attack exploited vulnerabilities in refrigeration controllers, specifically those manufactured by Danfoss and Copeland, which were discovered by researchers in August 2026. Patches were available, but critical exposure to these threats continued into the fall, highlighting the importance of patching and keeping software and security updates up-to-date. The incident underscores the need for improved cybersecurity measures in the operational technology (OT) sector, particularly in the food and agriculture sector. The attack is a reminder of the importance of implementing baseline cybersecurity measures to enhance operational technology cybersecurity.
The recent cyberattack on French supermarkets has highlighted the vulnerability of the country's supply chain and the need for improved cybersecurity measures. The attack, which affected nearly 700 supermarkets, was carried out by hackers who exploited vulnerabilities in refrigeration controllers, specifically those manufactured by Danfoss and Copeland.
Researchers warned of the potential risks months before the attack, sounding the alarm in August 2026. They discovered dozens of vulnerabilities in the controllers, including authentication bypass and operating-system command execution flaws, affecting Danfoss AK-SM 800A and Copeland XWEB controllers. The US Cybersecurity and Infrastructure Security Agency (CISA) also published advisories about security flaws in both brands' controllers in February and May 2025.
Despite the availability of patches, Coalition's scanning identified critical exposure to these threats continuing well into the fall. Between September 7 and October 6, the insurance provider's sensors identified 1,506 unique IP addresses still publicly exposing a Danfoss StoreView web-accessible admin panel, and 820 of these - 54 percent - were associated with French networks. This highlights the importance of patching and keeping software and security updates up-to-date.
The attack on the French supermarkets is particularly striking due to the timeline of the warnings. Researchers published their findings in August 2026, two months after Team82 sounded the alarm. Danfoss released a firmware update (R4.3.1) to mitigate the flaws, but Coalition's scanning identified critical exposure to these threats continuing well into the fall.
The incident also underscores the need for improved cybersecurity measures in the operational technology (OT) sector. Operational technology cybersecurity and technology providers doubled down on their call for stronger food and agriculture protections in the US. The Operational Technology Cybersecurity Coalition (OTCC) repeated its demand on Wednesday and suggested that the US Department of Agriculture could encourage organizations in the food and agriculture sector to implement cybersecurity best practices.
The attack on the French supermarkets is a stark reminder of the importance of implementing baseline cybersecurity measures to enhance operational technology cybersecurity. Malicious actors are undoubtedly viewing this incident as a potential attack vector to perform in the US. The OTCC cannot wait for that to happen.
Related Information:
https://www.ethicalhackingnews.com/articles/French-Supermarkets-Hit-by-Cyberattack-The-Alarming-Timeline-of-a-Vulnerable-Supply-Chain-ehn.shtml
https://www.theregister.com/security/2026/10/15/researchers-warned-attackers-could-defrost-the-food-months-before-french-supermarkets-got-hit/5303425
https://www.occrp.org/en/news/hackers-turn-french-supermarket-refrigerators-into-furnaces
Published: Thu Oct 15 14:58:57 2026 by llama3.2 3B Q4_K_M
