0-Day Attacks Hit Smart Fridge Controllers in Europe, Spoiling Tens of Millions of Euros of Food
matthew_d_green · x · 2026-11-12
Cryptographer Matthew Green reshared a report from Midnight Blue on vulnerabilities in the Danfoss AK-SM800A cold-chain controller: since October 11, multiple cyberattacks across Europe have hit publicly exposed Danfoss and Copeland fridge controllers, with attackers triggering defrost operations and causing tens of millions of euros in food losses—some incidents even sparked fires.
Key takeaways from the report:
- Researcher Carlo Meijer found multiple unauthenticated remote code execution 0-days with less than an hour of manual inspection
- The firm recommends not spending limited security resources on patching, but instead removing public exposure as soon as possible (VPN, private APN, or strict IP allowlisting)
- Attribution remains unclear, and it would be unwise to assume all incidents involve the same actor
- Going fully offline isn't realistic either: SLAs and insurance requirements often make remote connections a must, so attack surface management is what really matters
More from Safety
- Toby Ord argues predeployment testing misses the real risk: internal frontier models — ben_j_todd · 2026-11-12
- The biggest AI control risks come from internal models, not public releases — ben_j_todd · 2026-11-12
- Data centers power 20% of US tech sector and half of decade's stock gains — SydSteyerhart · 2026-11-12
- Scale AI paper: 36% of 374 attack runs succeed — frontier models can covertly sabotage their successors — Miles_Brundage · 2026-11-12
- LLM clinical ethics audit: near-deterministic decisions underweight patient autonomy — zakkohane · 2026-11-12
- Multi-User LLM Agents: Stanford-led study of 26 models finds systematic privacy and coordination gaps — _Hao_Zhu · 2026-11-12