France confirmed that a cyberattack on October 11–12 manipulated Danfoss refrigeration controllers across hundreds of supermarkets, spoiling fresh and frozen stock and triggering fires. CERT-FR verified the compromises involving Danfoss AK-SM and AK-SC systems, while prosecutors opened an investigation without attributing the incident or finding AI involvement. Older products running outdated firmware exposed legacy operational technology vulnerabilities, echoing recent Claroty research findings on exposed management interfaces.
The incident follows unexplained commissary cooling failures in August at Fort Huachuca and other US military sites, highlighting broader civil-defense risks where civilian food distribution supports military readiness. NATO guidance includes food and water supply among civilian lifelines, urging public-private cooperation and resilience exercises. Remediation requires independent temperature sensors, bounded remote-access privileges, and out-of-band monitoring so alarms function independently of primary management planes.
Centralised digital management of commercial refrigeration creates systemic exposure where software compromise translates directly into physical inventory loss. The reliance on legacy Danfoss AK-SM controllers running unsupported firmware illustrates how commercial operational technology often lacks the segmented access controls mandated in military networks. Without out-of-band temperature sensors operating independently of the primary management plane, operators cannot verify food safety once remote administrative authority is corrupted.
No comments:
Post a Comment