EXPLORINEER
en

DE — heise online

Sabotage of Cooling Systems: Expert Criticizes Manufacturers

Security1 min read

Hackers attacked cooling systems in supermarkets in several European countries, including Germany. A German IT security expert says device makers are mainly to blame, because their systems ship with default settings and standard passwords.

What happened

Cyberattacks hit cooling systems in supermarkets in several European countries, including Germany. Karlsruhe IT security expert Christoph Fischer says the makers of connected devices carry the main responsibility. He told the German press agency dpa that shipping and running control systems with factory settings and standard passwords is a serious failure. He called it "completely unforgivable."

Earlier attacks

In mid-October, attackers in France used security holes in older control devices from Danfoss that were connected to the internet. It is not yet confirmed whether the new cases have the same cause. Fischer says makers should have sent updates that force users to change standard access settings.

Key facts

  • Attacks hit supermarket cooling systems in several European countries, including Germany.
  • The attacks in France were in mid-October.
  • The EU Cyber Resilience Act (CRA) applies stronger duties to makers of connected devices from December 2027.
  • Makers must report actively used security holes and serious security incidents since September 11, 2026.

Why it matters

Many connected devices, from solar panels to heat pumps, can be attacked if they are set up badly. Fischer says secure remote access is possible today, for example with certificates and asymmetric encryption, which uses a pair of keys to protect data. He also says that not everything needs to be online, and that consumer tests should check IT security.

What to watch

  • Whether the new supermarket attacks have the same cause as the Danfoss attacks in France.
  • How device makers respond with updates that require new passwords on first use.
  • Whether consumer groups such as Stiftung Warentest add minimum IT security rules to their tests.

Glossary

Cyber Resilience Act (CRA)
An EU law that sets stronger security rules for makers of connected devices.
Danfoss
A company that makes control devices, including the older ones used in the French attacks.
Stiftung Warentest
A German consumer group that tests products and rates their quality.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

More in this topic

SecurityITmedia

Denny's App Hit by Unauthorized Access; Fraudulent Credentials Created During Legacy App Migration, Possible Personal Data Leak

Denny's Japan announced on November 3 that its app, which manages coupons and points for its restaurants, was accessed by a third party and that some users' personal data may have leaked. During a system process to migrate from the old app to the new one, unauthorized credentials were created, giving access to some users' accounts; the number of affected people is still under investigation. The company says it does not hold names, addresses, phone numbers, passwords, or credit card information.

SecurityITmedia

Sega Faave Hit by Unauthorized Access, Arcade Services Suspended; Bandai Namco's Taiko no Tatsujin Also Affected

Sega Faave, a Sega Sammy Holdings subsidiary, said on November 2 that some of its servers were accessed by a third party without authorization, and it suspended related services from 3 p.m. on November 1. Arcade online services, ALL.Net, Aime, and new SEGA ID registrations are affected, and Bandai Namco Experience titles such as Taiko no Tatsujin and Mario Kart Arcade GP DX are also impacted. The company is investigating whether any information was leaked; its initial probe found no leak of customer or business partner data, and services will resume after the investigation and safety checks are complete.

Security전자신문

China-linked hackers launch AI-driven attacks on over 200 organizations worldwide, targeting US chip and defense firms

According to CrowdStrike's threat analysis report, the China-linked hacking group "VAPOR PANDA" carried out AI-based cyberattacks against at least 14 countries over 11 days starting on the 17th of last month. The attacks used the Chinese large language model DeepSeek and the AI-based intrusion tool "ARTEX," which was originally an open-source penetration testing tool that attackers have misused. Targets included US pharmaceutical, chip, defense, nuclear and financial firms, as well as telecom operators in the US, Belgium and the Philippines.

SecurityITmedia

Up to 77 Million Email Addresses Possibly Leaked in Arara Message Breach; Attackers Breached Client Company Servers

Paycloud Holdings said on November 2 that about 77 million email addresses may have been leaked or exposed in the unauthorized access to its subsidiary Arara's email delivery service "Arara Message," with up to about 380 contracted companies affected. Attackers reportedly entered contracted companies' systems via Arara Message servers between October 28 and 31, taking data from 97 servers, and were also found to have sent up to about 7.13 million phishing emails impersonating credit card companies. The service has been fully suspended since October 31, with no restart date set.