This posting is here to collect cyber security news in November 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
This posting is here to collect cyber security news in November 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
79 Comments
Tomi Engdahl says:
Supermarkets cyber attacks
https://www.facebook.com/share/v/1FAtYhjXC7/
Tomi Engdahl says:
Supermarkets across Europe have been hit by a suspected cyber-attack affecting their fridges and freezers.
This has raised concerns about the vulnerabilities of internet-connected devices – from industrial machinery to domestic appliances like central heating and washing machines.
Read more: https://bbc.in/4BHhiIj
Tomi Engdahl says:
Several European supermarkets have been hit by a spate of apparent cyber attacks in the past 24 hours. Video: Jack Power / Zara Morgan
https://www.facebook.com/share/v/1F9ELReHV3/
Tomi Engdahl says:
Europe’s supermarkets apparently have a hacker problem in the freezer aisle.
Tomi Engdahl says:
Hackers Are Cranking Supermarket Fridges to 122F
Supermarkets across Sweden, Belgium, Ireland, Estonia and beyond found their fridges and freezers mysteriously switched to defrost mode or cranked to 122 degrees Fahrenheit, forcing stores to dump spoiled food. No group has claimed responsibility, and one refrigeration chief says fixing the units will take physical repairs, not just a software patch. Who is targeting Europe’s cold chain, and why?
https://qz.com/supermarket-fridges-cyberattacks-europe-sweden-belgium-110226?utm_source=facebook&utm_medium=social&utm_campaign=qzd-image
Tomi Engdahl says:
Yksi asia pakastinhyökkäyksessä voi viitata valtiolliseen toimijaan – suora lähetys
Kyberhyökkäysten aalto iski ruokakauppojen kylmäjärjestelmiin. Hyökkääjistä tiedetään hämmentävän vähän, samoin iskujen tavoitteista.
Yksi asia pakastinhyökkäyksessä voi viitata valtiolliseen toimijaan – suora lähetys
https://www.is.fi/kotimaa/art-2000012383478.html
Jos taustalla on valtiollinen toimija, esimerkiksi Venäjä, miten se hyötyisi tästä?
Vanhanen sanoo, että kyse voisi olla vaikkapa kriisinkestävyyden testaamisesta. Vaikka pakastiminen sulattaminen voi kuulostaa hauskalta, ongelmat voisivat kohdistua vaikkapa lämmitykseen, johon ei Suomen kaltaisessa maassa ole varaa.
Kärkkäinen sanoo, että taustalla voisi olla kaaoksen ja epäluottamuksen luominen.
Hän myös sanoo, että Venäjällä on haittaohjelmia, jotka on tarkoitettu kriittisen infrastruktuurin häiritsemiseen.
Tomi Engdahl says:
Mitä tiedämme kohteena olleesta järjestelmästä?
Eri järjestelmiä oli ilmeisesti useita. Danfossin laitteissa osasta tietoturva-aukot on korjattu. Päivittämällä laitteet hyökkäykset olisi voitu päivittää.
Osa laitteista taas oli vanhoja eikä niihin saa päivityksiä. Kärkkäinen vertaa tällaista tilannetta siihen, että lähtee lomalle ja jättää ulko-oven auki.
Entä jos ei päivitä salasanaa ollenkaan? Silloin laitteessa ei ole minkäänlaista turvaa.
Kenen vastuulla ylläpitäminen ja päivittäminen sitten on?
Kärkkäinen sanoo, että valmistaja toimittaa päivityksiä. Laitteen käyttäjällä pitäisi olla joku, joka vastaa päivitysten käyttöönotosta.
Yksi asia pakastinhyökkäyksessä voi viitata valtiolliseen toimijaan – suora lähetys
https://www.is.fi/kotimaa/art-2000012383478.html
Tomi Engdahl says:
https://www.newsweek.com/european-countries-hit-by-supermarket-freezer-cyberattacks-12649185?utm_medium=Social&utm_source=Facebook#Echobox=1793628320
Tomi Engdahl says:
https://www.facebook.com/share/r/1NRMFABPe5/
Europe’s Supermarket Cyber Attack: Freezers Set to +50°C
A remote command. A freezer setting changed to +50°C. Food suddenly at risk.
On 2 November 2026, refrigeration incidents were reported in nine European countries: Ireland, Belgium, Sweden, Luxembourg, Estonia, the Netherlands, Finland, Portugal and Italy.
Some cyberattacks are confirmed; other incidents remain under investigation. Italy’s cause is still unconfirmed. Claims involving twelve countries have not been fully verified.
The +50°C figure refers to a reported controller setting. Actual food temperatures and impacts differed between stores. At Estonia’s Selver store, the retailer’s account shows how rapid detection helped prevent food damage.
Crisis Mechanics explains how a digital intrusion can threaten the physical cold chain and why the response matters.
Original reporting and maps, licensed illustrative stock and clearly labelled AI illustrations. Generated scenes are not footage from the affected stores.
Sources: retailer and contractor statements reported by ERR, RTÉ, NOS, STT, Associated Press, Open and SAPO.
#cyberattack #Cybersecurity #supermarket #foodsafety #coldchain #EuropeNews
Video
https://www.facebook.com/sharVideoe/r/19oHPNzzFo/
Tomi Engdahl says:
Chains in seven countries say cooling unit temperatures rose overnight in incident similar to hack of French stores
https://www.theguardian.com/world/2026/nov/02/supermarket-freezers-across-europe-hit-by-second-suspected-cyber-attack?CMP=fb_gu&utm_medium=Social_img&utm_source=Facebook#Echobox=1793639362
Tomi Engdahl says:
Last night hackers turned supermarket freezers into ovens
Fridges in Belgium, Luxembourg, Sweden and Estonia were cranked to 50°C. Three weeks ago it happened to 500+ stores in France. No one has claimed it. Sources: Security Affairs, Al Jazeera, Claroty Team82. #hackers #cybersecurity #supermarket #news #3000yearslate
https://www.facebook.com/share/r/1FfGgfZCyq/
Tomi Engdahl says:
Poliittisen mainonnan säännöt menivät uusiksi – Nämä 3 asiaa muuttuivat
EU:n uusi sääntely on muuttanut poliittisen mainonnan pelisääntöjä merkittävästi. Muutos koskee useita toimijoita ja määrittelee poliittisen mainonnan laajasti.
https://www.iltalehti.fi/politiikka/a/5e48aab7-b050-4f80-aebc-b8d0a3d19fd8
Onko mainos poliittinen vai ei? Siitä on tullut yksi ajankohtaisimmista kysymyksistä monille mainostajille EU:n uuden sääntelyn myötä. Uudistus toi mukanaan uusia ilmoitus- ja merkintävelvollisuuksia sekä muutti tapaa, jolla poliittista mainontaa voidaan kohdentaa verkossa.
Tomi Engdahl says:
Viime yönä, osa Ruotsin ICA-ruokakauppajätin langattomasti ohjattavista pakastimista ja kylmäkaapeista nosti lämpötilansa +50 asteeseen – väittävät johtuvan kyberhyökkäyksestä – olikohan hyvä idea ottaa käyttöön langattomasti säädettävä kalusto? Langaton teknologia on haavoittuvaa. Koska päättäjämme heräävät?
https://x.com/InsiderGeo/status/2117164877701595165?s=20&fbclid=IwY2xjawVVSW9leHRuA2FlbQIxMABwZG9mBWJyaWQRMFpGU3o2aVBJcm5Yandud0RzcnRjBmFwcF9pZBAyMjIwMzkxNzg4MjAwODkyAAEfl3we74W-HASwCe0n2B5ytzGHN0iE5dYkirUudaymk-yU_zcwqHpcywSHJuU_aem_qrvZw3zATMURD88_49RSGA
Tomi Engdahl says:
https://www.facebook.com/share/p/1A3yEP6QoR/
Britain’s food supply has been targeted by mystery hackers
https://www.dailystar.co.uk/news/latest-news/mystery-hackers-attack-uks-freezers-37837238?utm_medium=Social&utm_source=Facebook#Echobox=1793704391
Tomi Engdahl says:
Worrying news just in.
Read more: https://www.thesun.co.uk/money/40890822/cyber-attack-hits-uk-freezers/?utm_medium=Social&utm_campaign=sunmainfacebook&utm_source=Facebook#Echobox=1793694971
FRIDGE ATTACKS Cyber attack hits UK freezers after Europe supermarket chaos as spy chief backs warnings for Brits to stockpile supplies
THE UK has been hit in the latest cyber attack targeting fridges and freezers across Europe, the National Cyber Security Centre confirmed.
The country’s top cyber chief Dr Richard Horne has backed Government warnings for Brits to stockpile essentials, adding “it’s your life, choose wisely”.
The NCSC is urgently warning British retailers to update the software on fridge temperature controls.
Some UK meat suppliers were among those throwing out products as temperatures in fridges and freezers were raised to as high as 55C across Europe.
Hackers disabled temperature alarms before overriding thermostats, so store managers were unaware until it was too late.
Technology executives in Estonia and Belgium said the latest hack has the “same signature” as a similar attack a few weeks ago, exploiting outdated systems.
It’s now been confirmed that a “handful of organisations in the UK” have also been affected.
Dr Horne, CEO of the National Cyber Security Centre (NCSC), told BBC Radio this morning: “There is a handful of organisations in the UK that we’ve alerted and we’re aware of a couple of impacts, we think.
“We don’t know the full impact, but we do know there are a couple of instances where vulnerable technology has been exploited and we’re working with those organisations.
Speaking about who could be behind the latest attack across Europe, he added: “It’s too early for us to say.
“We just don’t know if it’s a state or if it’s criminals, it’s a genuine unknown. It’s not just supermarkets, it’s through the whole food supply chain.”
It comes after the Government warned for all UK residents to stock up on essentials in case a national crisis cuts them off from essential services.
The advice covers preparation for everything from storms to cyber-attacks and power blackouts.
Asked if it reinforces warnings from the Defence Secretary that people in the UK should stockpile, Dr Horne said: “Absolutely. And we saw criminal attacks last year impact retailers in the UK.
“We alert people. We intervene where we can. But, at the end of the day, it’s your business. It’s your charity. It’s your life. You need to make the choice and choose wisely.”
Tomi Engdahl says:
From comments at
https://www.facebook.com/share/r/1K7n8taJ8W/
three Danfoss device types have been attacked. Two were out of support devices (which should have been phased out of use with anything connected to Internet). One is current model 800A that has instructions how connection to Internet should be done (use firewall) and has security update release at end of 2025 that would have fixed known vulnerabilities.
that’s assuming control engineers had cyber knowledge necessary to secure the system, appetite in the management to change and upgrade. The backbone SCADA/HMI has 23 vulnerabilities (21 high security) in the Copeland/Dixell XWEB systems. Although there is a firmware upgrade to remedy these vulnerabilities it’s clear not many systems have been patched.
Tomi Engdahl says:
Devices like fridges and freezers can now be monitored and controlled remotely, which opens new opportunities for hackers. A SentinelOne researcher said an attacker who logs into an exposed control panel leaves almost nothing behind, which makes tracing them hard. At least some of the units hit used Danfoss temperature control technology, also targeted in last month’s attack in France, and Danfoss said it has been working with customers to implement fixes.
Source: Reuters
https://www.reuters.com/business/retail-consumer/temperature-soars-swedish-grocery-store-freezers-one-store-blames-hackers-2026-11-02/
Tomi Engdahl says:
Viranomainen: Tämä on ”pakastinhyökkäyksen” tilanne Suomessa
Kyberturvallisuuskeskus aloitti toimenpiteet Suomessa Ranskan-hyökkäysten jälkeen.
Viranomainen: Tämä on ”pakastinhyökkäyksen” tilanne Suomessa
https://www.is.fi/digitoday/tietoturva/art-2000012382523.html
Suomen lähialueella hyökätään laajasti kauppojen kylmälaitteisiin. Myös Suomeen on kohdistunut hyökkäyksiä.
– Saimme jo kentältä tietoa, että ”on muutama osuma ja pientä vahinkoa on ehtinyt tapahtua”, eritysasiantuntija Juha Tretjakov kertoo Ilta-Sanomille.
– Tilanne on siis akuutti Suomessakin, Tretjakov toteaa.
Kesko kertoo joidenkin kauppojensa kärsineen ”kylmälaitteiden lämpötilahäiriöistä”.
Valmistautuminen hyökkäyksiin Suomessa aloitettiin jo viime kuussa. Tretjakov kertoo Kyberturvallisuuskeskuksen kartoittaneen Ranskan-hyökkäysten jälkeen haavoittuvia laitteita Suomessa. Hyökkäyssarja Ranskaan alkoi maanantaina 12. lokakuuta.
– Tämä koskettaa tiettyjä Danfossin valmistamia laitteita, joiden ei valmistajan ohjeiden mukaan pitäisi olla internetiin näkyvissä. Olemme tätä tilannetta Suomessa kartoittaneet ja olleet yhteydessä laitteiden omistajiin, Tretjakov sanoo.
Haavoittuvia laitteita alettiin poistaa verkosta jo pari viikkoa sitten. Jatkokartoitus on parhaillaan menossa.
– Suomessa meillä on aika hyvä tilanne sen suhteen, että me käymme elintarviketoimijoiden ja vähittäiskaupan toimijoiden kanssa jatkuvasti tiedonvaihtoa siitä, missä mennään.
Tomi Engdahl says:
https://www.facebook.com/share/r/1LqaeT58Nw/
Hackers are deliberately spoiling supermarket food across Europe by remotely turning up the heat in commercial freezers.
A coordinated cyberattack targeted grocery retailers in at least eight European countries, including Sweden, Belgium, Estonia, and Ireland, forcing stores to discard large quantities of ruined inventory. Attackers breached retail networks and manipulated the controls of commercial Danfoss refrigeration systems, intentionally switching evaporators to defrost mode and spiking freezer temperatures as high as 55°C (131°F).
The European Union has condemned the mass disruption as a deliberate attempt to undermine the regional food supply chain. Major supermarket brands like Carrefour, ICA, and SuperValu are currently working alongside cybersecurity agencies to secure their vulnerable network installations and prevent further food waste.
How should the retail industry secure critical infrastructure against remote tampering?
Tomi Engdahl says:
Karmea tilanne ruokakaupoissa – Nyt puhuu K-kauppias: ”Tämä herättää meidät kaikki”
K-Citymarket Kupittaan kauppias Hannu Aaltonen peräänkuuluttaa koko kaupan alalta kriittistä katsetta tietoturvaan.
https://www.iltalehti.fi/kotimaa/a/6ace7c19-589e-406e-9e7b-b2efcb0e5480
Tomi Engdahl says:
Hackers already targeting UK supermarket freezers, cybersecurity chief warns
Dr Richard Horne said AI has allowed Britain’s adversaries to easily find and exploit vulnerabil
https://www.independent.co.uk/news/uk/home-news/uk-freezers-europe-cyber-hack-ncsc-b3078173.html?fbclid=IwdGRjcAVW4-xjbGNrBVbjzGV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfu6NCzqETpNn5qXa78fO6SLxzXbrmlLssiSzrWT5dxniZq6XPANOmjcHVdV4_aem_TrAaPzV4dfEV5rRWw0gQaw
A small number of UK freezers were impacted in a suspected hack that saw fridge and freezer temperatures spike across Europe, Britain’s cybersecurity chief has said.
Dr Richard Horne, head of the National Cyber Security Centre (NCSC), said there was evidence of “a couple of impacts” within the food supply chain in the UK and that vulnerable technology had been “exploited”.
Tomi Engdahl says:
Kyberturvallisuuskeskus muistuttaa, että OT- ja IOT-laitteiden tietoturvaongelmat voivat muuttua fyysisiksi ongelmiksi.
https://www.kauppalehti.fi/uutiset/a/062a28a8-06ee-4006-a52f-e5a76587a1d0?utm_term=Autofeed&utm_medium=Social&utm_source=Facebook#Echobox=1793718766
Tomi Engdahl says:
Very cold war: Who’s attacking Europe’s supermarket freezers?
Cold stores in supermarkets across Europe have been targeted in a cyberattack with no clear culprit.
https://www.aljazeera.com/news/2026/11/3/very-cold-war-whos-attacking-europes-supermarket-freezers?utm_source=facebook&utm_medium=social&utm_campaign=socialPulse&fbclid=IwdGRjcAVW93FjbGNrBVb3bGV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfo8CuaUj0oK4DfNLWq29427o0ixkLlRyEmARxkhWipFnA_4UaJMT-YJErk-4_aem_dYhdEh_yBLPx4O8m3p29pg
Tomi Engdahl says:
Danfoss comments
https://assets.danfoss.com/documents/latest/614557/BC577847894432en-000102.pdf
Tomi Engdahl says:
European supermarkets have become the center of another cyberattack, with hackers remotely heating fridges and spoiling food.
The attack caused temperatures in fridges and freezers to rise sharply, with at least one store reporting temperatures of up to 50°C (122°F) and other retailers discarding food. It’s sparked concerns across the retail industry.
Read more: cnb.cx/47QDiCZ
Tomi Engdahl says:
https://www.facebook.com/share/p/1FfaV2hmMc/
Staff at supermarkets across Europe arrived on Monday morning to find freezers and chillers blasting hot air.
Units that should have stayed near freezing had been driven overnight to 50–55°C.
At an ICA store in Stockholm the attack hit around 2 a.m. local time and went unnoticed for hours.
Sales manager Engla Ingwall told Reuters that “everything is destroyed,” as staff loaded shopping carts with ruined meat, dairy and frozen goods that had to be thrown away.
The same disruption has been confirmed at ICA and Coop stores in Sweden, at dozens of Ahold Delhaize locations plus Colruyt, Carrefour, SPAR and Intermarché outlets in Belgium and Luxembourg, at least one IKEA, and 13 SuperValu stores in Ireland.
Further reports have come from the Netherlands, Estonia and Finland.
Company statements and early investigations indicate attackers remotely accessed internet-connected refrigeration controllers, including systems from Danfoss that were also targeted in France last month.
They forced the units into continuous defrost mode or simply overrode the temperature settings, allowing the contents to warm for hours while the stores were closed.
The method matches a cyberattack that struck hundreds of French supermarkets in mid-October.
Estimates from that incident reached as high as 700 stores across chains including Intermarché, Carrefour, Coopérative U and Monoprix.
Freezers climbed as high as 50–80°C, large quantities of food spoiled, and in several locations the extreme heat sparked fires.
Losses ran into the millions of euros.
No group claimed responsibility and no ransom demand appeared.
EU Agriculture and Food Commissioner Christophe Hansen has described the repeated attacks as “a deliberate attempt to disrupt our food supply chain and undermine consumers’ confidence in it,” adding that the pattern is deeply concerning.
Supermarket operators are now discarding stock and posting notices that refrigerated and freezer shelves are empty because of the cyberattack.
One Belgian Delhaize branch has already estimated losses of around €100,000 in a single store.
The same class of refrigeration controllers remains widely deployed across the continent.
In many cases the devices stay exposed to the internet so they can be monitored and maintained remotely.
That configuration has now allowed the same form of sabotage to disrupt stores in at least seven countries in a matter of weeks.
These attacks are alarming precisely because they’re so simple and so effective.
A remote override turns the systems that keep food safe into the means of destroying it.
The October wave in France already showed what a larger, better-timed strike can do: hundreds of stores emptied at once, millions of euros of product lost, and public confidence shaken.
A broader attack coordinated across more countries or aimed at distribution hubs could spoil far larger volumes of meat, dairy and frozen goods before anyone noticed.
Governments across Europe have spent recent months warning households to prepare for exactly this kind of disruption.
The UK launched a “Be Ready” campaign advising three days of non-perishable food and water.
France, Germany, the Nordic countries and others have issued similar guidance, ranging from 72 hours to a week or more, citing cyberattacks, hybrid threats and interruptions to everyday supply.
The European Commission’s Preparedness Union Strategy likewise urges citizens to be able to cope independently for at least 72 hours.
When freezers can be turned into ovens from anywhere and officials are already telling people to stockpile, the vulnerability of the food chain is being shown in real time across multiple countries.
Tomi Engdahl says:
Kylmälaitehyökkäysten kohteena 10 maata – yli 100 kauppaa, teurastamoja…
Kauppojen kylmäjärjestelmät olivat maanantaina iskujen kohteena, kuten aiemmin lokakuussa. IS seuraa tilannetta tässä artikkelissa.
Kylmälaitehyökkäysten kohteena 10 maata – yli 100 kauppaa, teurastamoja…
https://www.is.fi/taloussanomat/art-2000012381926.html
Tämä tiedetään kylmälaitehyökkäyksistä: 10 maata, yli 100 kauppaa, teurastamoja…
Kylmälaitehyökkäykset kauppoihin eivät ole tämänhetkisen tiedon mukaan jatkuneet maanantain ja tiistain välisenä yönä. Kolme viikkoa sitten Ranskassa nähtiin kyberiskuja ainakin kahtena peräkkäisenä yönä, mutta nyt nähty iskusarja ei vaikuta saaneen jatkoa.
Iskut ovat kohdistuneet tiettävästi ainakin yhdeksään maahan. Hyökkäyksiä on ollut Suomen lisäksi ainakin Ruotsissa, Virossa, Irlannissa, Belgiassa, Italiassa, Luxemburgissa, Alankomaissa ja Portugalissa, kertoo tietoturvasivusto Bleeping Computer.
Lisäksi Tanskassa on tiedossa yksi hyökkäyksen yritys, joka onnistuttiin keskeyttämään.
Ennen Italian ja Portugalin lukuja tiedossa oli onnistuneita hyökkäyksiä yli 115 myymälään. Alankomaissa kohteena oli myös teurastamoja.
Tietoturvayhtiö Censys kertoi maanantaina löytäneensä yli 1000 internetiin näkyvää Danfoss StoreView -kylmälaitehallintaliittymää.
Hyökkäyksen tekijästä ei ole uutta tietoa. Ainakin Belgian viranomaiset ovat käynnistäneet tapauksesta tutkinnan. Ranskassa tutkinta avattiin kolme viikkoa sitten ensimmäisten hyökkäysten myötä.
–
Danfoss StoreView is the remote user management interface family used to connect, view, and configure Danfoss supermarket system managers like the legacy AK-SM 800 and the current AK-SM 800A.
The platform has transitioned from older, legacy client applications into a unified, web-based remote management tool
Tomi Engdahl says:
https://www.verkkouutiset.fi/a/laaja-kyberisku-kauppoihin-is-kylmalaitteissa-hairioita-myos-suomessa/?hl=en-US#2dfbbf73
Tomi Engdahl says:
more detail written in Estonian Public Broadcast (ERR) page. I copy the English-language news link here: