Show HN: Coldframe, a Honeypot That Poses as a Supermarket Fridge Controller
hedgerow-dev · hn · 2026-11-08
A developer built Coldframe, a honeypot mimicking Danfoss AK-SM 800A and Dixell XWEB supermarket refrigeration controllers, indistinguishable from real units on Shodan. It detects CVE-2025-41450 and the Danfoss "code of the day" bypass, tags attempts on several other CVEs, and lets attackers into a fake store dashboard to observe their next moves. One Python file, standard library only, based on research by Synacktiv, Claroty and Ironhackers.
More from Safety
- Defenders Can Match 1,000 Attacking AI Agents—and Hold an Information Edge — marktenenholtz · 2026-11-08
- Open-source AEGIS simulates credential-leak outbreaks; adding memory lifts containment coverage by 7 points — shabrisharakosch · 2026-11-08
- Incident agent stores only engineer-verified fixes in Hindsight to prevent memory poisoning — LingonberryMoist9805 · 2026-11-08
- Lenskart Accused of Scanning Customers' Faces In-Store, Storing Biometrics 5+ Years — kingslyj · 2026-11-08
- Anthropic, OpenAI, Google, Microsoft to back unified robots.txt opt-out for publishers — jonathanmendez · 2026-11-08
- MCP servers can silently bypass host confirmation prompts after Day 1 approval — with a fix — Independent-Sir3234 · 2026-11-08