Technology1 min read

German watchdog warns some cooling systems remain vulnerable to hacking

By · Published by Everything Blog

In short

German information security office BSI issued an advisory confirming that certain Danfoss industrial cooling systems remain exposed to cyberattacks despite prior incidents in France and across Europe. The agency instructed IT managers to apply existing patches, secure networks via VPNs, and disconnect vulnerable units from the public internet entirely. However, the BSI cautioned that the manufacturer has not provided sufficient software updates to completely neutralize the security flaws. International concern is mounting, with the United States issuing its own warning regarding threats targeting industrial refrigeration infrastructure.

Key points

  • Danfoss has not yet released sufficient software patches to fully protect its vulnerable…: Danfoss has not yet released sufficient software patches to fully protect its vulnerable industrial cooling appliances.
  • Security officials advise system operators to isolate refrigeration equipment behind VPNs…: Security officials advise system operators to isolate refrigeration equipment behind VPNs or disconnect it from the internet entirely.
  • The German cybersecurity agency warns that industrial control systems must never be left…: The German cybersecurity agency warns that industrial control systems must never be left directly accessible via public networks.

Sources checked by our analysis pipeline: 1

BERLIN, Nov 13 : Germany's information security office BSI warned on Friday of ongoing vulnerabilities in some of Danish firm Danfoss' industrial cooling appliances, following cyberattacks on refrigeration systems across Europe.

The systems in question should be taken offline when possible or otherwise any connection should be secured via VPN, or Virtual Private Network, BSI said in a security advisory on its website.

Hacking attacks on European supermarkets spread across the continent last week, hitting fridges and freezers from Sweden to Belgium and forcing stores to throw away food in an incident that echoed a similar attack in France last month.

At least some of the refrigerator units affected used temperature control technology from Danfoss that was also targeted in the French attack.

The German office said IT security managers should also check whether they can install updates available from the company. It warned, however, that Danfoss had not yet provided sufficient software updates to counter the attacks.

"Even new patches do not guarantee that further vulnerabilities in an affected product will not come to light in the near future.…

Technology