Refrigeration compromises turn public management interfaces into a food-supply risk
CERT-FR expanded its warning from compromised Danfoss refrigeration controls to Copeland and Dixell systems as hundreds of French supermarkets reported manipulated temperatures, spoiled stock and continuing public exposure.
Security.io Intelligence Desk · Wednesday, 14 October 2026
Executive consequence
French authorities report numerous compromises of internet-connected refrigeration controllers spanning Danfoss, Copeland and Dixell product families.
Decision today
Inventory refrigeration controllers by model, firmware, exposure, site and service provider.
Read the full decision briefPrimary reporting: CERT-FR Alert CERTFR-2026-ALE-012 · AP European supermarket cyberattack report · Reuters French refrigeration attack update
Decision intelligence, not a headline feed.Every edition ranks what security leaders should read first, assign today and monitor next.
Daily executive briefing
Security.io Daily Headlines
Five equally weighted stories: what happened and the leadership decision each creates.
Ivanti released fixes for CVE-2026-104935 after Volexity observed a chain combining authentication bypass, remote code execution and a separate, still-unfixed privilege escalation.
Do today
Enumerate every externally reachable Ivanti Connect Secure appliance and its exact build.
Microsoft fixed an actively exploited Windows Shell security-feature bypass while publishing an unusually large update set and an experimental risk-cohort approach.
Do today
Prioritise CVE-2026-96951 across affected Windows client and server assets.
Ahold Delhaize took systems offline across a multi-region retail environment and has started a controlled restart. Stores remained open, but online services were still disrupted and the company had not published the intrusion method, forensic scope or complete recovery timetable.
Do today
Map unavailable systems to customer, employee, supplier and fulfilment services.
Norway's regulator fined Xandr for real-time bidding involving Grindr user data and treated the intermediary as a joint controller responsible for independently validating consent.
Do today
Map sensitive-data flows through advertising, analytics and identity intermediaries.
