FlagThis — Daily Cybersecurity Intelligence Briefing

On the night of October 11 2026, threat actors compromised internet‑facing Danfoss Optyma refrigeration controllers in roughly 400‑500 French supermarkets by exploiting default admin/admin credentials on exposed HTTP panels and public SNMP v2c community strings, then issued a Modbus TCP forced‑defrost command (function code 0x10, register 0x0015 set to 0x01) that raised unit temperatures to ≈50 °C. The temperature spike caused perishable goods to thaw and spoil, prompting retailer disclosures, ANSSI Level 2 advisories, and Danfoss‑released firmware patch 2026.10.01 with segmentation guidance.