Coopérative U CEO Dominique Schelcher confirmed on October 12 that a cyber-attack hit refrigeration at several of its stores from October 11. The Danfoss link, the loss figures and the other chains named come from press reports, and Danfoss was asked for comment.
Perspective Coverage
53 publishers
- Builder
- Builder 32%
- Operator
- Operator 43%
- Investor
- Investor 25%
Reality
- Evidence76
- Adoption
- Not scored
- Hype gap+12
- Incentives50
- Confidence78
Censys sees exposed Danfoss StoreView panels in France drop 71% in three days after the supermarket attack
Censys counted 71% fewer internet-exposed Danfoss StoreView panels in France three days after the October 11 attack on hundreds of supermarkets. It found no rise in patched firmware, so the older versions are still running.
Reality
- Evidence58
- Adoption26
- Hype gap+12
- Incentives
- Not scored
- Confidence55
ANSSI extends French supermarket refrigeration alert to Copeland and Dixell XWEB controllers
France's cyber agency ANSSI says the attack that hit about 700 supermarkets also reached Copeland and Dixell XWEB refrigeration controllers. Danfoss says most of its affected units are end-of-life and unpatched.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap−10
- Incentives45
- Confidence60
Date-based Danfoss login is the entry point in the French fridge attack, Pen Test Partners says
Fridges and freezers in several hundred French supermarkets were warmed overnight on 11 October 2026, with losses in the tens of millions of euros. Pen Test Partners points to Danfoss AK-SM and AK-SC controllers and a login derived from the date.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence50
Frontier AI models went from perimeter breach to control zone in just over 16 minutes in Booz Allen's lab
Booz Allen's frontier AI models met all eight attack objectives against an isolated industrial-control testbed in its Chantilly, Virginia lab. In the last test a model took administrative control of a robotic arm and moved it.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence50
Two local-only flaws expose Johnson Controls EasyIO FG devices to full unauthorized access
CISA says two flaws in Johnson Controls EasyIO FG firmware 2.0b52 and earlier can give an attacker full access to the device. The agency rates both as hard to exploit and not remotely reachable, so the risk is with whoever can already get onto the unit's network.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence60
Lantronix cellular gateway turns tampered update metadata into root code, CISA says
CISA says two flaws in Lantronix's G520 cellular gateway let anyone who can tamper with its plain-HTTP update traffic run code as root. The gateways run in transportation, energy and water networks worldwide, and Lantronix has shipped a fix in firmware 2.6.0.7R6.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap−5
- Incentives
- Not scored
- Confidence66
An Iran-linked intrusion kept a British generator down for four days while US wastewater plants lost pressure across 12 states. The number that matters now is restoration time.
Perspective Coverage
4 publishers
- Builder
- Builder 16%
- Operator
- Operator 68%
- Investor
- Investor 16%
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+20
- Incentives55
- Confidence50
Crafted Desigo CC graphics documents execute code on the operator client that opens them
CVE-2026-34223 lets a script embedded in a user-defined graphics document write arbitrary files on any Desigo CC V6 or V7 client. Siemens has no fix and points operators at who is allowed to open graphics.
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap−10
- Incentives25
- Confidence68
libiec61850 1.6.2 patches a stack overflow an MMS client can reach with one write request
The maintenance release for the 1.6 branch carries seven fixes with GitHub advisory IDs and six that involve memory corruption. It also lets a running IEC 61850 server take a new TLS configuration.
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap−25
- Incentives60
- Confidence66
buildOne report1 publisher One S7comm function code byte divides a PLC read from a memory write
A hand-built client walked TPKT, COTP and S7comm against a Snap7 server on port 102, negotiated a 480-byte PDU and pulled 16 bytes out of DB3 with function code 0x04. The layers below that byte are the same for a write.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap−5
- Incentives42
- Confidence52
buildConfirmed2 publishers CISA's advisory describes a mechanism, not a vulnerability: commercial scanners find the exposed PLC, and the agencies say AI tooling closes the distance from found to controlled.
Reality
- Evidence55
- Adoption30
- Hype gap+35
- Incentives45
- Confidence60