Vulnerabilities · 8h ago

Danfoss refrigeration attacks spoiled food across 700 stores

Dark Reading reports cyberattacks on Danfoss-linked refrigeration controls disrupted more than 700 French food and retail stores in one night. A Sekoia analyst also told Reuters that Spain, Portugal, Poland, Germany and Belgium were affected. The report links the incident to outdated AK-SM firmware; the attackers’ identity remains unknown.

French sources cited by Dark Reading said attackers extended freezer defrost cycles—the periods when equipment briefly warms to melt ice—so dangerous warming looked like routine maintenance. Some equipment reportedly reached 50°C, spoiling food and causing small fires.

For retailers relying on remotely managed refrigeration, the incident shows how a change to normal operating behavior can make temperature monitoring harder to interpret while losses spread across a store fleet. The reporting does not establish how widely the firmware exposure persists.

CVE-2025-41451

NVD KEV

EPSS 3% (87th percentile).

CVE-2025-41450

NVD KEV

CVSS 8.2 HIGH: improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior… EPSS 0.8% (55th percentile).

CVE-2025-41452

NVD KEV

EPSS 0.7% (53rd percentile), up from 0.3%.

Timeline

Sources

1 source covering this story

Dark Reading Oct 22
Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
Les magasins ont perdu des millions en faisant appel à des prestataires externes pour gérer des micrologiciels OT obsolètes.

Entities

CVE-2025-41450
CVE-2025-41451
CVE-2025-41452

Part of the PlainSec briefing for 2026-10-22

Editions

Briefing for 2026-10-22

Vulnerabilities · 8h agoDanfoss refrigeration attacks spoiled food across 700 storesDark Reading reports cyberattacks on Danfoss-linked refrigeration controls disrupted more than 700 French food and retail stores in one night. A Sekoia analyst also told Reuters that Spain, Portugal, Poland, Germany and Belgium were affected. The report links the incident to outdated AK-SM firmware; the attackers’ identity remains unknown.French sources cited by Dark Reading said attackers extended freezer defrost cycles—the periods when equipment briefly warms to melt ice—so dangerous warming looked like routine maintenance. Some equipment reportedly reached 50°C, spoiling food and causing small fires.For retailers relying on remotely managed refrigeration, the incident shows how a change to normal operating behavior can make temperature monitoring harder to interpret while losses spread across a store fleet. The reporting does not establish how widely the firmware exposure persists.

CVE-2025-41451

NVD KEV

EPSS 3% (87th percentile).

CVE-2025-41450

NVD KEV

CVSS 8.2 HIGH: improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior… EPSS 0.8% (55th percentile).