U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacks
Source Tenable Research
End of life, no fix coming : replace or isolate affected systems; no fix will be released.
Data as of 9 Nov 2026, 22:04 UTC
Rated Critical by Tenable Research
- Patch
- None coming – the product is end of life
What to do
No fix will be released: the affected product is end of life. Replace it, or isolate it from untrusted networks until you can.
AI-suggested
U.S. federal agencies recommend immediate actions including using strong authentication and changing default passwords, promptly patching critical vulnerabilities, replacing end-of-life devices, identifying and isolating OT systems accessible from the internet, removing unnecessary remote access, securing necessary remote access, and maintaining offsite backups. Organizations should assume their refrigeration and monitoring systems could be targeted and prioritize hardening these systems accordingly. These steps are practical and directly address the vulnerabilities exploited in recent attacks.
Description
U.S. federal agencies are warning critical infrastructure organizations to urgently secure industrial refrigeration and cold-chain systems following cyber attacks targeting European supermarkets and blood banks. Attackers exploit unpatched vulnerabilities, misconfigurations, and weak or default passwords in refrigeration controllers to remotely manipulate temperature controls, causing spoilage of essential products and potential fire hazards. The affected sectors include healthcare, chemicals, transportation, and food and agriculture. Agencies recommend isolating OT systems, removing or securing remote access, patching vulnerabilities, replacing end-of-life devices, and maintaining offsite backups. Specific controller models such as Danfoss AK-SM and AK-SC series, Copeland, and Dixell XWEB have been compromised in recent attacks. The threat highlights the increasing exposure of cyber-physical systems due to IT/OT convergence and internet accessibility.