| ▲ | liveoneggs 7 hours ago |
| Why isn't the brand of cooler or cooler-controller being named? Was it a password break or an open admin console or SNMP or what? |
|
| ▲ | cryptonym 7 hours ago | parent | next [-] |
| https://cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012/ The real issue is geniuses in food stores connecting to the open internet systems with 100K+ EUR of products exposed. Remember, the 'S' in 'IoT' stands for Security. |
| |
| ▲ | oasisbob 38 minutes ago | parent | next [-] | | Good link, thanks. Was a bit surprised (well, no, not really) to see that the linked XWEB bulletin in that alert mentions a backdoor which can be used to help customers regain access to breached systems. Wondering how likely it is that this backdoor algo has also been leaked or reverse-engineered too: (translated from French to English with Google Translate) > If your password has been changed and you are unable to log in, please contact Copeland Technical Support, available 24/7, at [...] and ask for instructions on how to obtain a temporary password. Copeland technical support will need the current date of the XWEB EVO and the MAC address displayed on the XWEB login page. | |
| ▲ | Delphiza 4 hours ago | parent | prev [-] | | Similar to the 'S' in VPN |
|
|
| ▲ | flexie 7 hours ago | parent | prev | next [-] |
| In the attack on French supermarkets a few weeks ago, hackers pirated controllers mostly supplied by the Danish company Danfoss. |
| |
| ▲ | usrnm 7 hours ago | parent | next [-] | | Multiple sources confirm that it's the same Danfoss problem this time, for example, https://www.hln.be/binnenland/centrum-voor-cybersecurity-bev... (in Dutch) | | |
| ▲ | dopa42365 5 hours ago | parent [-] | | In the Reuters article on it weeks ago they mentioned finding 4500 similar freezers still available online, with the simple login bypass included. So yeah that was just a matter of time? Glass half full: The scale of this is rather small overall, so most supermarkets etc. appear to have at least some form of basic security. |
| |
| ▲ | ninju 3 hours ago | parent | prev [-] | | Somebody needs to run Windows Update :-) > the hackers pirated controllers mostly supplied by the Danish company Danfoss, which said subsequently that it had identified some security flaws last year and had “long recommended” customers install updates. | | |
| ▲ | ThrowawayB7 44 minutes ago | parent [-] | | This but unironically. Windows Update forcing updates and reboots is precisely to prevent incompetent IT from running unpatched systems. |
|
|
|
| ▲ | mrweasel 7 hours ago | parent | prev | next [-] |
| In France I believe that the password on the monitoring software, or the controllers, was updated daily. The date was somehow used as the new password, or as an input to the password sequence. So rolling the passwords didn't do anything when the attackers are aware of the "algorithm". |
| |
| ▲ | liveoneggs 7 hours ago | parent [-] | | Sounds like other retail systems where lock screen passwords are the store number or similar conventions |
|
|
| ▲ | OJFord 6 hours ago | parent | prev [-] |
| The BBC names (and quotes) Sabcobel as one of the manufacturers. https://www.bbc.co.uk/news/articles/cq1kd1nee80eo |
