Guest Post by Unshadowed
UPDATE: it’s not just France vulnerable — see below.
Multiple cyberattacks are emptying grocery shelves across Europe right now. In France, hackers forced refrigeration systems up to 50°C, spoiling fresh and frozen goods. One viewer’s photo shows a fully designed customer notice somehow already posted this morning. In the Netherlands, an attack has paused distribution centers, with empty shelves expected. These attacks match years of warnings about cyber risks to the food supply.
or on Bitchute: https://www.bitchute.com/video/mQ5WFb8jzBQ8
UPDATE: It’s not just France – anyone with Danfoss could have their inventory “cooked” overnight like this. A vulnerability in the Danfoss platform was documented on August 9th by Team 82:
Danfoss AK-SM 800A controllers are widely deployed to manage refrigeration infrastructure in supermarkets, cold-storage facilities, warehouses, and other commercial environments. Because these systems provide centralized management of refrigeration equipment, compromising the management interface can have significant operational consequences.
Team82 researched the attack surface of the Danfoss AK-SM 800A platform and identified multiple vulnerabilities affecting the embedded web management interface.
Our research uncovered a hidden “code-of-the-day” authentication mechanism that could be abused to bypass normal authentication, a command-injection vulnerability leading to remote code execution, and an issue allowing authenticated users to inject arbitrary Nginx configuration directives, which could be leveraged to manipulate web traffic and trigger a denial-of-service condition.
Our analysis began by examining the internet exposure of these devices, where we identified thousands of publicly accessible management interfaces.
— Team 82 @ Claroty
Tweet
Continue reading...
[ H/T The Burning Platform ]
Hackers push supermarket freezers to 50°C, reminding us of food supply chain fragility
UPDATE: it’s not just France vulnerable — see below.
Multiple cyberattacks are emptying grocery shelves across Europe right now. In France, hackers forced refrigeration systems up to 50°C, spoiling fresh and frozen goods. One viewer’s photo shows a fully designed customer notice somehow already posted this morning. In the Netherlands, an attack has paused distribution centers, with empty shelves expected. These attacks match years of warnings about cyber risks to the food supply.
or on Bitchute: https://www.bitchute.com/video/mQ5WFb8jzBQ8
UPDATE: It’s not just France – anyone with Danfoss could have their inventory “cooked” overnight like this. A vulnerability in the Danfoss platform was documented on August 9th by Team 82:
Danfoss AK-SM 800A controllers are widely deployed to manage refrigeration infrastructure in supermarkets, cold-storage facilities, warehouses, and other commercial environments. Because these systems provide centralized management of refrigeration equipment, compromising the management interface can have significant operational consequences.
Team82 researched the attack surface of the Danfoss AK-SM 800A platform and identified multiple vulnerabilities affecting the embedded web management interface.
Our research uncovered a hidden “code-of-the-day” authentication mechanism that could be abused to bypass normal authentication, a command-injection vulnerability leading to remote code execution, and an issue allowing authenticated users to inject arbitrary Nginx configuration directives, which could be leveraged to manipulate web traffic and trigger a denial-of-service condition.
Our analysis began by examining the internet exposure of these devices, where we identified thousands of publicly accessible management interfaces.
— Team 82 @ Claroty
Tweet
Continue reading...
[ H/T The Burning Platform ]
