FBI and CISA Warn of Active Cyberattacks on Industrial Refrigeration Controllers

Ce qui s’est passé

The U.S. FBI and CISA issued a joint advisory warning that threat actors are actively exploiting unpatched, internet‑exposed industrial refrigeration and cold‑chain monitoring controllers worldwide. Attackers are leveraging authentication‑bypass flaws, arbitrary‑code‑injection bugs, and weak default configurations to alter temperature set‑points, force continuous defrost cycles, or shut down cooling equipment. Recent incidents in Europe have seen dozens of supermarkets and blood‑storage facilities experience temperature spikes up to 50 °C, leading to food spoilage, equipment damage, fire hazards, and loss of critical medical supplies. The advisory urges operators in healthcare, food production, chemical processing, and transportation to remove remote access from the public internet, enforce strong authentication, change default passwords, and apply all available firmware updates.

Pourquoi c’est important pour la confiance et la conformité

• The episode highlights the need for robust access‑control and configuration‑management controls for OT devices, a single control objective that satisfies multiple framework requirements.
• Map OT access‑control and configuration‑management controls to your framework of record for continuous evidence collection.
• Demonstrate remediation of identified gaps in a Trust Center audit package.

Who is affected

Recommended actions

1. Create an inventory of all refrigeration controllers and verify they are not exposed to the public internet.
2. Enforce strong, unique credentials and multi‑factor authentication for any remote access.
3. Apply all vendor‑released firmware patches and harden default configurations.
4. Implement continuous monitoring of OT network traffic for anomalous commands.