OT / ICS Security · IoT / OT Attack

Danfoss refrigeration controllers turn a cyberattack into spoilage

French supermarket chains were hit overnight by a cyberattack that remotely took over Danfoss refrigeration controllers and left chilled and frozen stock defrosted, according to BleepingComputer and Help Net Security. The disruption affected hundreds of stores in France, with reported damage running into tens or hundreds of thousands of euros per site.

The controllers are remotely manageable, so once an attacker reaches them they can change cooling settings into heating settings instead. That means the failure is not just device downtime: by morning, staff can find inventory already spoiled, even if the controller is later recovered or rebooted.

For retailers that run connected cold-chain gear, the exposure sits at the operations layer. If those controllers are reachable from outside the store or through a supplier path, a compromise can become immediate stock loss and store disruption, not a conventional IT incident.

4 sources · 2h ago

CVE-2025-41450

NVD KEV

CVSS 8.2 HIGH: improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior… EPSS 0.4% (27th percentile).

Timeline

Sources

Part of the PlainSec briefing for 2026-10-13

Every edition of this story: Danfoss refrigeration controllers turn a cyberattack into spoilage