HACKERS HIT DEFROST

The real news

The story, straight

Your freezer has a simple job: keep food cold. Add a computer and an internet connection, and its settings can be changed remotely.

Useful, until someone outside the supermarket gets control. Then your ice cream has a cybersecurity problem, which is a ridiculous thing to explain to a cone.

TechCrunch reports a suspected 2nd wave of cyberattacks spoiled food at dozens of supermarket stores in Belgium, Ireland, Luxembourg and Sweden. Ahold Delhaize and Colruyt confirmed hacks.

A Belgian company operating Delhaize's systems said hackers changed settings to defrost, according to Reuters.

Not stolen recipes. Not missing loyalty points.

Actual food becoming actual waste because someone changed a setting.

The report follows attacks in France last month that spoiled food at hundreds of supermarkets. Researchers linked those earlier hacks to internet-connected Danfoss refrigeration equipment no longer receiving security updates.

Claroty warned in August that the units risked remote attacks and outages. That does not identify who carried out this new wave.

Security updates repair weaknesses in software. When those repairs stop, keeping equipment connected can leave an old weakness available to attackers.

A fridge can still look perfectly functional while its digital protection is past its use-by date.

The useful lesson: protecting food also means protecting the controls. Store operators should review remote access and replace unsupported equipment where necessary.

A shiny freezer door is not a security policy.

Repost this before another ice cream needs a security briefing.

Thanks for supporting Lil'meme. Your support is appreciated.