CVE-2025-41450
CVSS 8.2 HIGH: improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior… EPSS 0.4% (27th percentile).
OT / ICS Security · IoT / OT Attack
French supermarket chains were hit overnight by a cyberattack that remotely took over Danfoss refrigeration controllers and left chilled and frozen stock defrosted, according to BleepingComputer and Help Net Security. The disruption affected hundreds of stores in France, with reported damage running into tens or hundreds of thousands of euros per site.
The controllers are remotely manageable, so once an attacker reaches them they can change cooling settings into heating settings instead. That means the failure is not just device downtime: by morning, staff can find inventory already spoiled, even if the controller is later recovered or rebooted.
For retailers that run connected cold-chain gear, the exposure sits at the operations layer. If those controllers are reachable from outside the store or through a supplier path, a compromise can become immediate stock loss and store disruption, not a conventional IT incident.
4 sources · 2h ago
CVSS 8.2 HIGH: improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior… EPSS 0.4% (27th percentile).
SecurityWeek
Refrigeration Controller Hack Spoils Food Across European Supermarkets
A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost.
originalHelp Net Security
Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted - Help Net Security
In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed following a cyberattack.
originalBleepingComputer
Cyberattack shuts down refrigerators at French supermarkets
Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers.
originalPart of the PlainSec briefing for 2026-10-13
Every edition of this story: Danfoss refrigeration controllers turn a cyberattack into spoilage