The media in this post is not displayed to visitors. To view it, please go to the original post.
Regarding the Danfoss fridge thing doing the rounds in the media - there’s several thousand of them that are directly internet facing.
The username is admin and the password changes every day automatically to.. the current date.
Every single one is like this. You can just log in and change the temperature. Anybody can do it, easily scriptable.
Carlos Solís likes this.
reshared this
Ben Hardill
in reply to Kevin Beaumont • • •Michael Kohlman
in reply to Ben Hardill • • •@ben
No. It was an HVAC system. Same penetration scenario and just as stupid though.
Lived in an apartment building about 6 blocks from Target headquarters at the time. Lot of Target employees (including IT) lived there.
Ben Hardill
in reply to Michael Kohlman • • •Michael Kohlman
in reply to Ben Hardill • • •@ben Yeah, no thanks.
I always found the Target story to be an interesting one, especially from hearing some of the comments from staff that made it clear they saw that train wreck coming, and naively figured people would learn from it.
Silly me...
outis
in reply to Michael Kohlman • • •@NoRomBasic @ben
"People would learn from it"
theregister.com/security/2015/04/23/fukushima-nuke-plant-owner-told-to-upgrade-from-windows-xp/84343…
Are we human?
www.theregister.comMichael Kohlman
in reply to outis • • •@outis @ben As a CIO in a Public Service agency, 100% unsurprised by this.
Disappointed... definitely... But surprised?
Kevin Beaumont
in reply to Kevin Beaumont • • •Shodan search: html:danfoss product:"nginx"
The supermarket impacted today in France put all of their devices directly internet facing and all had the same password, today’s date.
beta.shodan.io/search?query=html%3Adanfoss+product%3A%22nginx%22
Shodan Search
beta.shodan.ioreshared this
Esther Payne y Nicole Parsons reshared this.
Kevin Beaumont
in reply to Kevin Beaumont • • •To bypass login send a POST request to /xml.cgi, there’s a write up here: claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-dan…
Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers
ClarotyNicole Parsons reshared this.
Kevin Beaumont
in reply to Kevin Beaumont • • •I’ve seen some breathless reporting in the media about the situation in France saying it’s the biggest cyber attack ever and the result of a swarm of Agentic AI bots.
Reality: no. It’s a complete lack of security controls and negligent product development by the vendor.
reshared this
Cat 🐈🥗 (D.Burch), Erik Uden 🚩, Mastodon Migration, don Elías (como los buses) 🥨 y Nicole Parsons reshared this.
Do-re-mi-so-la-ti-do
in reply to Kevin Beaumont • • •Aedius Filmania ⚙️🎮🖊️
in reply to Do-re-mi-so-la-ti-do • • •@bremner
it cost less than having someone that goes and read the thermometer xD
@GossiTheDog
The Frog
in reply to Aedius Filmania ⚙️🎮🖊️ • • •@Aedius @bremner
But... but... there's always someone in a supermarket! It's not like having a manager, who's already there, doing temperature checks a few times a day will cost much.
Sigh.
And if it's for monitoring when the shop is closed, it could be read only!
When it's set for the required temperature, no one needs to change it, unless you change the stuff inside it, which is a big operation in itself and doesn't happen often.
Even the productivity reason doesn't hold.
Marius
in reply to The Frog • • •@Lily_and_frog @Aedius @bremner
Its mostly for maintenance people to do remote troubleshooting and optimisation. Thats hours of driving at least, and more if specialized service technicians are at supplier headquarters abroad.
A lot of equipment nowadays has such functions, quite often with a phone modem directly in the machine. Yes its a security risk, but also extremely useful
The Frog
in reply to Marius • • •It's a fridge. It doesn't need optimisation. It can run for 20 years before the hardware breaks.
The Lack Thereof
in reply to The Frog • • •@Lily_and_frog
As someone who spent half his adult life working in the service industry... No one is manually checking those fridge temperatures, ever. Doesn't matter if it's the soda cooler in a shop's impulse buy gauntlet, or a meat storage walk-in.
The only person who looks at the thermometers is the health inspector, right before they hand you a violation notice because your prep fridge's condenser has had it's airflow so choked with dust buildup that it's been unable to get the temperature below 55° F despite the compressor running non-stop for months.
@Zamfr @Aedius @bremner @GossiTheDog
Marius
in reply to The Frog • • •@Lily_and_frog @Aedius @bremner
Its typically a few chillers on the roof (with their conpressors), some distribution pipes and valves, a series of cold units with their individual temp control units, some logging and alarms, a little network between them.
Its not crazy difficult and usually keep working but there is enough that sometimes something breaks, or a setting goes wrong, etc.
Marius
in reply to Marius • • •@Lily_and_frog @Aedius @bremner its then very useful if a manager can pick up the phone, and someone looks at it remotely, identify the problem, perhaps fix it, or directly send maintenance with the right replacement components.
Quite often, that works even without the manager having to pick up the phone.
It means stuff gets fixed quicker, than if you first have to wait for someone to do diagnosis
kcp
in reply to Aedius Filmania ⚙️🎮🖊️ • • •WellsiteGeo
in reply to kcp • • •It didn't go wrong.
It worked as designed.
The design was insane, but worked perfectly.
Stumpy The Mutt
in reply to Do-re-mi-so-la-ti-do • • •Kevin Beaumont
in reply to Kevin Beaumont • • •Also there’s loads of speculation about if it’s Russia, China, Iran.
It’s likely a bored teen in their underpants in between Roblox sessions. Not a joke.
Kevin Beaumont
in reply to Kevin Beaumont • • •Darth Osler
in reply to Kevin Beaumont • • •@GossiTheDog
TheYOSH
in reply to Kevin Beaumont • • •Awkward Turing
in reply to Kevin Beaumont • • •Simon Zerafa
in reply to Kevin Beaumont • • •Wilfried Klaebe
in reply to Simon Zerafa • • •Don't forget to wash your hands afterwards! 😬
@simonzerafa @GossiTheDog
Simon Zerafa
in reply to Wilfried Klaebe • • •Yes Dad! 😔
Kevin Beaumont
in reply to Kevin Beaumont • • •LinkedIn’s absolutely awash with security vendors posting brain-dead takes on the fridge thing as they have no idea, at all, what they’re talking about. It’s great as it’s a list of people not to hire.
You may be surprised to know the through line to the posts is.. AI. Remember when we had intelligence.
Christoffer S.
in reply to Kevin Beaumont • • •Alex
in reply to Kevin Beaumont • • •Three plus or minus five
in reply to Kevin Beaumont • • •I went to linkedIn to see if I had any in my timeline.
This was a huge mistake. Looking at LinkedIn makes me want to vomit every time. (My timeline was all Nobel prize, CERN, and crap about robots.)
The Doctor
in reply to Kevin Beaumont • • •YOUR::L0CAL::DÆMON
in reply to The Doctor • • •pass the dab rig
The Doctor
in reply to YOUR::L0CAL::DÆMON • • •internetthought
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •The manufacturer has confirmed this was caused by unpatched systems being internet-facing. The French government CERT has also issued an advisory saying the same. The patch in question removed the date-based backdoor password. cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-012/
Incident de sécurité ciblant les Danfoss série AK-SM et AK-SC - CERT-FR
www.cert.ssi.gouv.frNicole Parsons reshared this.
Awkward Turing
in reply to Kevin Beaumont • • •how does patched/unpatched fit in? How does it matter when no exploit was used?
Or did I miss something?
ChrispyW
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •German authorities are reminding orgs not to directly connect food cooling solutions to the Internet. allianz-fuer-cybersicherheit.de/SharedDocs/Downloads/Webs/ACS/DE/BSI-CS/BSI-CS_154.html
Gefährdung durch internet-verbundene OT-Systeme
Bundesamt für Sicherheit in der InformationstechnikNicole Parsons reshared this.
aburka 🫣
in reply to Kevin Beaumont • • •Awkward Turing
in reply to Kevin Beaumont • • •John Ulrik
in reply to Kevin Beaumont • • •Benedek Kozma
in reply to John Ulrik • • •Tormod
in reply to Kevin Beaumont • • •Jyrgen N
in reply to Kevin Beaumont • • •rtificial
in reply to Kevin Beaumont • • •@GossiTheDog
Sterling Hammer
in reply to Kevin Beaumont • • •Ben Gillam
in reply to Sterling Hammer • • •@cdlhamma What gets me about this “hack” have they never heard of VPNs?
You would hope in 2026 nobody is working in IT that thinks surfacing anything especially critical to the entire web is a good idea much less that they would work for a major retailer 🤦♂️
Julien Avérous – 🇫🇷🇪🇺🇺🇦
in reply to Kevin Beaumont • • •webhat
in reply to Kevin Beaumont • • •Tryst 🏴 🇮🇪
in reply to Kevin Beaumont • • •Hey Gus
in reply to Kevin Beaumont • • •Gildilinie Gremlin 🏳️⚧️🍳
in reply to Kevin Beaumont • • •Thomas Depierre
in reply to Gildilinie Gremlin 🏳️⚧️🍳 • • •Paul McGranite
in reply to Kevin Beaumont • • •SabreToothTigress ZenD
in reply to Paul McGranite • • •🆘Bill Cole 🇺🇦
in reply to Kevin Beaumont • • •It’s a teenager kind of attack. A target no adult would think about because adults have forgotten all of the open targets that we’ve been safely (de facto) been ignoring forever.
Knud Jahnke
in reply to Kevin Beaumont • • •Itelcan3
in reply to Kevin Beaumont • • •Da_Gut
in reply to Kevin Beaumont • • •The Doctor
in reply to Kevin Beaumont • • •WellsiteGeo
in reply to Kevin Beaumont • • •Is there a way to stop people using this drug (device, whatever).
Where do we send the preventative nukes?
joepie91 needs more railing 🚅💦 (🔜 eth0)
in reply to Kevin Beaumont • • •a juicy little detail is that some news outlets reported 'small fires' in some of these fridges.
none of them bothered to ask why a fridge has *any* sort of button that can result in a fire to begin with.
cybergibbons
in reply to joepie91 needs more railing 🚅💦 (🔜 eth0) • • •joepie91 needs more railing 🚅💦 (🔜 eth0)
in reply to cybergibbons • • •dylan
in reply to Kevin Beaumont • • •"You'll never guess what"
Esther Payne reshared this.
AlisonW ♿🏳️🌈♾️
in reply to dylan • • •dylan
in reply to AlisonW ♿🏳️🌈♾️ • • •@AlisonW real security relies on the blatant disregard of ISO 8601
AlisonW ♿🏳️🌈♾️
in reply to dylan • • •@dylan My favourite discussion
tops
in reply to Kevin Beaumont • • •nixFREAK
in reply to Kevin Beaumont • • •Bill
in reply to Kevin Beaumont • • •Krzysztof Sakrejda 🏳️⚧️ 🏴☠
in reply to Kevin Beaumont • • •Hole Digger #17665
in reply to Krzysztof Sakrejda 🏳️⚧️ 🏴☠ • • •@wronglang
That shouldn't live in the first place.
Sober people put "local network only" incoming connections limitation.
+ something per-unit-unique like serial number for a password.
If (big if) some piece of hardware does need 24/7 connection to something. Which is supposed to be handled by some middlweare orchestrating this stuff over LAN.
Modern smart tech engineers are actually less smart than their smart fridges, unfortunately.
Krzysztof Sakrejda 🏳️⚧️ 🏴☠
in reply to Hole Digger #17665 • • •WellsiteGeo
in reply to Krzysztof Sakrejda 🏳️⚧️ 🏴☠ • • •"Isolated network"
That is a contradiction in terms.
Do you mean "airgapped, with the modems (including RS232, Ethernet *and* all similar) with a nail through their transceiver driver chips"?
Krzysztof Sakrejda 🏳️⚧️ 🏴☠
in reply to WellsiteGeo • • •WellsiteGeo
in reply to Krzysztof Sakrejda 🏳️⚧️ 🏴☠ • • •@haitchfive
in reply to Kevin Beaumont • • •And some sandwiches went to waste. Judging from the symptoms as described in the press they had their fridges connected to the open internet.
Everything that really matters is minimised in public discourse, sidelined, or made look negligible.
All the things caused by negligence, bad decisionmaking, and terrible ideas get a free pass.
Nazo
in reply to Kevin Beaumont • • •Bill, organizer of stuff
in reply to Kevin Beaumont • • •rogue europlus 🤖
in reply to Kevin Beaumont • • •Cliff'sEsportCorner
in reply to Kevin Beaumont • • •The Sleight Doctor 🃏🍉
in reply to Kevin Beaumont • • •pauldulcini
in reply to Kevin Beaumont • • •TESTIMONIAL
Hello dear friends!
This lender is, according to my experience, honest. I obtained a loan of 180,000 euros through him, and frankly, I was satisfied with the speed of the processing of my file.
I also spoke about it to several colleagues who, like me, obtained loans without difficulty.
For any additional information, you can contact him directly via mail :
OLIVER11587@proton.me
Good luck to everyone.
WaledSc,🍉
in reply to Kevin Beaumont • • •chuffed.org/project/149031-give-waleeds-family-a-chance-to-live
149031-give-waleeds-family-a-chance-to-live
chuffed.orgfuzzyfuzzyfungus
in reply to Kevin Beaumont • • •"System Manager AK-SM 800A software package v4.0x and above enhances your product's security features to meet internationally recognized regulations. Danfoss is now defaulting to a strong security posture and is following secure by design principles."
Snark aside, the list of security features they tout as being available with the new v4 in 'strict' mode is rather terrifying.
danfoss.com/en-us/service-and-support/downloads/dcs/adap-kool-software/ak-sm-800a/#tab-security
Tony Hoyle
in reply to fuzzyfuzzyfungus • • •@fuzzyfuzzyfungus So.. with strict mode disabled (which was default until a certain version), they allow HTTP connections, use plaintext authentication, and don't sanitise inputs.
And they admit this..
fuzzyfuzzyfungus
in reply to Tony Hoyle • • •@tony It beats lying about it; but it certainly looks from the release notes like "enough security to actually have security flaws" is a version 4 feature; and from the compatibility notes that there's a bunch of 3rd party software and system integration that relies on the old behavior.
It's that second bit that is probably even worse news. Getting bugs patched is harder than it should be; but trivial compared to getting breaking changes patched.
Mark Bryant
in reply to Kevin Beaumont • • •Otte Homan :: fediologist
in reply to Kevin Beaumont • • •Tuxicoman
in reply to Kevin Beaumont • • •🅺🅸🅼 🆂🅲🅷🆄🅻🆉:~$ ▓
in reply to Tuxicoman • • •Victoria Walberg
in reply to Kevin Beaumont • • •Chances of customers updating the firmware in the last few months.
vs Chances they will update it now?
fuzzyfuzzyfungus
in reply to Victoria Walberg • • •Dahmonium
in reply to fuzzyfuzzyfungus • • •Ben Aveling
in reply to Victoria Walberg • • •Manufacturer was not producing upgrades. Their stated position is: you should buy new fridges.
@vickyjo @GossiTheDog
Victoria Walberg
in reply to Ben Aveling • • •If you have something to the contrary, feel free to share.
Ben Aveling
in reply to Victoria Walberg • • •I only know what I've read:
"Danfoss said in a statement that most of the affected equipment was "legacy" products which "no longer receive software or security updates".
It said its AK-SM800 and AK-SC355 fridge regulator systems were notably affected, with a version of the former using "outdated firmware".
It added that it had long advised supermarkets to update from those models."
rte.ie/news/2026/1012/1595129-france-supermarket-cyberattack/
@vickyjo @GossiTheDog
Fridges shutdown in French supermarkets after cyberattack
RTÉ News (RTE.ie)Victoria Walberg
in reply to Ben Aveling • • •@BenAveling Ah, so wider than than 800A in screenshot, legacy models affected too.
Those (AK SC 355 and AK SM 800) controllers are very EOL; expensive to replace, but probably cheaper than a commercial fridge.
Only a 5-6 year lifecycle on them.
hal8999
in reply to Kevin Beaumont • • •Thorium
in reply to Kevin Beaumont • • •@GossiTheDog
I AM BANKSY ☕ / 🗑🔥
in reply to Kevin Beaumont • • •Alpaca Male
in reply to Kevin Beaumont • • •Dmitri Goosens
in reply to Kevin Beaumont • • •so the major problem on the Internet is not #AI... it's still the same as it has always been...
too many lazy bastards that don't give a f***
/cc @Girgias
freya :4 (she/it)
in reply to Kevin Beaumont • • •that does not surprize me in the slightest btw
squarefaelltein
in reply to freya :4 (she/it) • • •Walter C. Smith
in reply to Kevin Beaumont • • •Carlos Solís
in reply to Walter C. Smith • •like this
Walter C. Smith, horstworst, joosteto, Leela Torres, Luna Lactea, aburka 🫣, Frank Heijkamp y Jan van Acken like this.
Walter C. Smith
in reply to Carlos Solís • • •😱
GeraintLlanfrancheta
in reply to Kevin Beaumont • • •Tyrone Slothrop
in reply to Kevin Beaumont • • •Tony Hoyle
in reply to Tyrone Slothrop • • •Lily Star
in reply to Tony Hoyle • • •TheYOSH
in reply to Kevin Beaumont • • •That is harder than password 123456
cybersecuritynews.com/admin-password-danish-data-breach/
Admin Password "123456" Led to 8.8 Million Danish CPR Data Breach
Guru Baran (Cyber Security News)Lasse Beyer
in reply to Kevin Beaumont • • •JBrown, Esq
in reply to Kevin Beaumont • • •Dave Wise
in reply to Kevin Beaumont • • •Tony Hoyle
in reply to Dave Wise • • •Bredroll
in reply to Kevin Beaumont • • •Lou
in reply to Kevin Beaumont • • •Erka Koivunen
in reply to Kevin Beaumont • • •This seems to have been fixed and sorted out already in 2025. 🤭
CVE-2025-41450
CVE-2025-41451
CVE-2025-41452
Ref. lnkd.in/p/da-kjBZQ
For anyone losing their minds about nation state actors and the recent refrigeration incident at French supermarkets; The vulnerabilities in Danfoss Storeview refrigeration controllers were… | Ken Munro
Ken Munro (LinkedIn)Wurzelmann
Unknown parent • • •@electricbrain 🤷
cyberplace.social/@GossiTheDog/117429525184825091
Kevin Beaumont
2026-10-12 19:12:34
lbcp 🦖
in reply to Kevin Beaumont • • •Erka Koivunen
Unknown parent • • •David Penfold
in reply to Kevin Beaumont • • •Tuxicoman
Unknown parent • • •Joe
in reply to Kevin Beaumont • • •is not a good line for a security mantra!
Luna Lactea
in reply to Kevin Beaumont • • •You could store random data in an array of these across the world by setting the temperature & then watching the current temperatures fluctuate around those & use it as a source of entropy. Obviously only use three or four time zones that are in the middle of the day at a time.
New worst way to generate key pairs?
Frank Heijkamp
in reply to Luna Lactea • • •You could name it the frost spread algorithm.
@GossiTheDog
I AM BANKSY ☕ / 🗑🔥
in reply to Kevin Beaumont • • •Momo
in reply to Kevin Beaumont • • •Nielso
in reply to Momo • • •@momo
I reckon it's cheaper to write a web interface than to have buttons and a display on the fridge.
You can copy the web interface into every fridge, but you can't copy a hardware UI.
There's household fridges that allow to do super quick cooling via a function in their phone app, and the manufacturer advertised this as a useful feature if you want to cool down drinks for a party… ignoring the fact that you need to access the fridge physically in order to put the bottles into it, so you might as well just push some physical button… customers are buying this shit as a feature, because they are told it is a feature… even though it's 100% useless.
@GossiTheDog
Momo
in reply to Nielso • • •No it's worse. I looked at the manufactuers product page. The System Manager is not a fridges control unit, it's the centerpiece controlling ALL fridges in a market. It can monitor the temperature and send out notifications if something went wrong. It can schedule defrosting circles, stuff like that. It's a cloudless smart fridge IT solution (because Danfoss probably can't offer a cloud service for cheap with the necessary SLAs to prevent damages like this) used by non-IT supermaket personel. And that's why we have thousands of units with default credentials on the internet, where they should not be in the first place.
@GossiTheDog
Knud Jahnke
in reply to Kevin Beaumont • • •Do you know what Danfoss also produces: home thermostat applications. Incl. ones that are app-controlled, so internet-facing. Hmm.
danfoss.com/en/products/dhs/smart-heating/solutions/danfoss-tpone-s/#tab-overview
funnymonkey
in reply to Kevin Beaumont • • •Eric Likness
in reply to funnymonkey • • •Who knew food safety and refrigeration were right up there with power generation and sewer treatment in the attack surface and threat to civil society? Man. The hits just keep on comin'. 🥴
Enerby
in reply to Kevin Beaumont • • •Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers
ClarotySimon Hewison
in reply to Kevin Beaumont • • •Frank Heijkamp
in reply to Simon Hewison • • •Defrost is an actual genuine feature of a refrigeration controller in order to reduce the buildup of ice. Just a pity someone misused it.
@GossiTheDog
abadidea
in reply to Kevin Beaumont • • •Falcon Darkstar
in reply to abadidea • • •@0xabad1dea I've advocated in the past for this type of liability; more broadly phrased, dereliction of a public trust should be indictable on the rationale that between the hacker and the large corporate defender, one of these is much easier to deter.
The flagrantly negligent defender in whom public trust is placed also profits from their misdeeds. So the idea would be to fine e.g. banks who do things like lay off all their security teams and then get hacked.
LisPi
in reply to abadidea • • •Tom Westmacott
in reply to abadidea • • •Victoria Walberg
in reply to abadidea • • •I see @ANSSI_FR put something out a couple of hours ago
cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-012/
Incident de sécurité ciblant les Danfoss série AK-SM et AK-SC - CERT-FR
www.cert.ssi.gouv.frLats (314 ppm)
in reply to abadidea • • •Am I?
in reply to Kevin Beaumont • • •#Alt4You
Screenshot of a Danfoss login page:
Danfoss
System Manager 800A
an input box with "admin" in it
an input box with 5 password dots in
a button saying "Sign In"
luca
in reply to Kevin Beaumont • • •Nothing to object with toilet cleaning, I do it myself. I'd like to know if that person is so underskilled as it looks, from my perspective of toilet cleaning, which actually stands out in the comparison.
mobidic
in reply to Kevin Beaumont • • •diana 🏳️⚧️🦋🌱
in reply to Kevin Beaumont • • •not the first time for Danfoss. They had a 06/06/2006 midnight incident, where ALL of their BRC-2000 controllers worldwide were programmed to hammer the motor contactors to burn up the AC motors. This company and their "security" is legendary...
They had a notice about this on their website for a few years, but likely did a document purge to prevent the endless subpoenas in the future...
Robot
in reply to diana 🏳️⚧️🦋🌱 • • •Joshua Small
in reply to Kevin Beaumont • • •Alexis Willam
in reply to Kevin Beaumont • • •Matt Blaze
in reply to Kevin Beaumont • • •Nicholas Conrad
in reply to Matt Blaze • • •It probably used to be rsa keys or something all the techs carried until a pointy haired middle manager decided losing one would compromise the entire system, and demanded the engineering team implement a system that changed every day but every tech could always know the password for without a physical key or written code book. They probably got a bonus for implementing it.
standev
in reply to Matt Blaze • • •mathieui
in reply to Kevin Beaumont • • •SpaceLifeForm
in reply to Kevin Beaumont • • •Stellarskrit
in reply to Kevin Beaumont • • •Lats (314 ppm)
in reply to Kevin Beaumont • • •John Q McDonald
in reply to Kevin Beaumont • • •Zeborah
in reply to John Q McDonald • • •@jqmcd A supermarket chain with a lot of fridges/freezers across multiple sites such that automated monitoring / recordkeeping becomes useful.
Sure you could get your staff to keep an eye on it but (even aside from capitalists don't like to trust staff, let's assume best intentions) that doesn't help if there was a power cut just after the store closed for the night, things defrosted for several hours, then power came back on. Staff come in next morning, fridges seem to be working, but the product mightn't actually be safe to sell.
Alternatively, you get a complaint from a customer who got sick and you need to prove to the food safety inspectors with all your audit logs that your fridges *didn't* fail, not your fault, go investigate further up the supply chain.
Now obviously what they really need is an internet-facing refrigerator _that can't be hacked by a bored seven-year-old_.
@GossiTheDog
Mark Rotteveel
in reply to Zeborah • • •Zeborah
in reply to Mark Rotteveel • • •@mrotteveel Everyone and their dog has been moving everything to software-as-a-service on the cloud. If your hiring system and payroll system and leave system and procurement system and self-check machines(*) are all operating on the cloud just like everyone else's, why would you think "Oh shit, we'd better invest in servers, networking and firewalls to secure our *fridges*"?
If you ever thought about the security of your fridges at all, you'd start by changing the username and password. So we know they never did, which in turn gives us a pretty good indication of the size/capacity/budget of whatever passes for their IT department....
(*) If anyone knows how to hack into a supermarket's self-check machines to make them stop nagging me to take my groceries while I'm clearly in the process of taking my groceries, please let me know. Just out of curiosity. No reason.
Donal Fellows
in reply to Mark Rotteveel • • •@mrotteveel @zeborah @jqmcd Security is hard! Let's go shopping!
Oh, wait...
John Q McDonald
Unknown parent • • •Things you thought never needed to be spoken aloud: “Hold on, I’m patching the security hole in my refrigerator…”
BryanTheSnail
in reply to Kevin Beaumont • • •GlennMagusHarvey
in reply to Kevin Beaumont • • •ozeng
in reply to Kevin Beaumont • • •@Laukidh I’m impressed the “hackers” (low bar) got the temperature to 50C. Did they just hammer it with manual defrost commands for several hours or something?
Another 10C and the food would have been sous-vide instead of ruined
Joshua Small
Unknown parent • • •@mattblaze I always hate this framing of "The researcher responsibly disclosed this to the vendor" when talking about a support backdoor. How does this conversation go?
"Hey you know that thing you deliberately went and did? I just want to let you know that you did it. I know this information may come as a total surprise."
Pierre-Alain Dorange
in reply to Kevin Beaumont • • •Sören
in reply to Kevin Beaumont • • •13.10.2026
13.10.26
13-10-2026
13/10/2026
13102026
131026
2026.10.13
26.10.13
2026-10-13
2026/10/13
20261013
261013
10.13.2026
10.13.26
10-13-2026
10/13/2026
10132026
101326
2026.13.10
26.13.10
2026-13-10
2026/13/10
20261310
261310
🧐
Judy Garland
in reply to Kevin Beaumont • • •Pseudo Nym
in reply to Kevin Beaumont • • •At least they passed the PCI audit checkbox about rotating passwords periodically. They went above and beyond going daily instead of every 90 days.
And yes, I know advice in 800-53 no longer recommends this, but some PCI auditors still do.
Legion495
in reply to Kevin Beaumont • • •Legion495
in reply to Legion495 • • •srslypascal
in reply to Kevin Beaumont • • •Kobold
in reply to Kevin Beaumont • • •nadaka
in reply to Kevin Beaumont • • •Herr TurTur
in reply to Kevin Beaumont • • •Awkward Turing
Unknown parent • • •Christian Berger DECT 2763
in reply to Kevin Beaumont • • •Hendi
in reply to Kevin Beaumont • • •guenther
in reply to Kevin Beaumont • • •duffn
in reply to guenther • • •@guenther @dumbpasswordrules
Contributions welcome! github.com/duffn/dumb-password-rules
GitHub - duffn/dumb-password-rules: A compilation of sites with dumb password rules.
GitHubcuan_knaggs
Unknown parent • • •christian mock
Unknown parent • • •JF
Unknown parent • • •I AM BANKSY ☕ / 🗑🔥
in reply to JF • • •@jfparis I think the patch has existed for decades. It's "Don't connect this to the public Internet."
@GossiTheDog
JF
in reply to JF • • •JF
in reply to I AM BANKSY ☕ / 🗑🔥 • • •JF
Unknown parent • • •cybergibbons
in reply to Kevin Beaumont • • •Eldeberen
Unknown parent • • •cybergibbons
Unknown parent • • •Victoria Walberg
in reply to cybergibbons • • •@cybergibbons I thought it had been tested ...
cyberplace.social/@GossiTheDog/117429683678007410
Kevin Beaumont
2026-10-12 19:52:52
Haelwenn /элвэн/
in reply to Kevin Beaumont • • •酷豆
in reply to Kevin Beaumont • • •internetthought
Unknown parent • • •Stumpy The Mutt
Unknown parent • • •Simon Zerafa
Unknown parent • • •cybergibbons
in reply to Victoria Walberg • • •@vickyjo unless there is another version of the controller available, its certainly not just the date.
IMO it's a bit of an annoying RE task. The function is obvious but you need to carefully work out other input parameters to it to get the password right. It's not reading python script.
qdkp
Unknown parent • • •VessOnSecurity
Unknown parent • • •ElectricBrain
in reply to Wurzelmann • • •lemonde.fr/en/pixels/article/2026/10/13/after-danfoss-hackers-strike-other-refrigeration-systems-use…
Client Challenge
www.lemonde.frJustin Scholz
Unknown parent • • •Antoinne Sterk
in reply to VessOnSecurity • • •@bontchev
"That day, for no particular reason, I decided to go for a little run"
youtube.com/watch?v=M4ul35wlqjA
The Running Man (1987) - Subzero Gets Iced Scene (2/10) | Movieclips
Movieclips (YouTube)Papageier
in reply to Kevin Beaumont • • •What really peeves me is: we are lucky it were just fridges this time.
We are putting literally anything on the internet these days, without having second thoughts. Production equipment. Power plants. Medical devices. Anything. Many of them have this kind of bullshit security backdoor.
We haven't seen jack yet. This is only the beginning.
hcy
in reply to Kevin Beaumont • • •Adam Sjøgren
in reply to hcy • • •Danfoss - Wikipedia
Contributors to Wikimedia projects (Wikimedia Foundation, Inc.)cakruege
Unknown parent • • •internetthought
Unknown parent • • •my apologies, I thought everyone was jumping too quickly to conclusions, because the issue appeared to be only limited to France, but it does appear to be wider spread. So much for "clues" then (see Terry Pratchett quote). I have a bias against cyber attack messaging, when often the alleged attack is human stupidity, misconfiguration, mother nature etc. and not a Neo-like leet h@ckx0r... Oh well, a few supermarkets got a slightly more expensive cybersecurity drill 😋
wolf_sasse
in reply to Kevin Beaumont • • •@GossiTheDog
Syiad
in reply to Kevin Beaumont • • •Cool! (pun intended)
So the French supermarkets can charge damages to Danfoss for lack of security. Unless ... the manual for the fridge clearly informs about this setting and instructs the user to change the credentials before connecting the fridge to the Internet.
Kevin Beaumont
Unknown parent • • •You don't need a nation state to warm up a fridge | Pen Test Partners
Alex Wallace (Pen Test Partners)Ben Hardill
in reply to Kevin Beaumont • • •@cybergibbons
> running a cryptocurrency miner
ahh, so that's how they got the fridges warm 😜
zsapi
in reply to Kevin Beaumont • • •Did an LLM mess up the summary? 🙃
Dan Goodin
in reply to zsapi • • •I just came here to ask the same thing.