Forescout warns internet-exposed refrigeration controls could enable attacks on food supply chains and hospitals

As cited

Copy frozen at 2026-10-23 15:37 UTC (site build).

vulnerabilities

Forescout warns internet-exposed refrigeration controls could enable attacks on food supply chains and hospitals

Forescout research identified 12,976 internet-exposed refrigeration control systems across 6,017 public IP addresses in 99 countries, with multiple product families from vendors including Danfoss, Copeland, Dixell, and Carel vulnerable to attack. Recent October 2026 incidents in France compromised over 700 supermarkets through manipulation of temperature and defrost controls via legitimate supervisory functions, causing significant food losses and demonstrating attacks that exploit weak or missing authentication and known vulnerabilities including CVE-2025-41451 and CVE-2025-41452. The exposure extends beyond retail to hospitals, agricultural facilities, and food processing operations, with hacktivist groups conducting over 20 claimed attacks since January 2026 across European targets.

Why it matters: Organizations operating refrigeration systems in food retail, agriculture, healthcare, and food processing face immediate risk of physical and financial damage if management interfaces remain internet-exposed; practitioners should inventory control paths, remove direct public access, implement secure gateways, patch supported systems, and strengthen access controls with multifactor authentication (MFA) and change monitoring.

Source published

2026-10-23 12:16 UTC

First seen by Cybersecurity Tracker

2026-10-23 14:50 UTC