https://maritimeinfosec.org/tags/refrigeration/Refrigeration - Tag - Maritimeinfosec.orgHugo -- gohugo.ioen-USCopyright Maritimeinfosec.org 2018-2026Thu, 15 Oct 2026 09:00:00 +0200https://maritimeinfosec.org/exposed-refrigeration-controllers-and-starlink-tracking-on-board/Thu, 15 Oct 2026 09:00:00 +0200Olivier JACQhttps://maritimeinfosec.org/exposed-refrigeration-controllers-and-starlink-tracking-on-board/On 12 October 2026 (after plenty of alerts, press coverage and what have you), CERT-FR published, cold, an alert about “numerous compromises” of remote controllers for refrigeration installations. It first covered Danfoss AK-SC and AK-SM units, and an update on 13 October added Copeland xweb and Dixell xweb controllers [1]. The attacks date from the night of 11 to 12 October (attacking at night and over the weekend is, after all, the most damaging pattern). The alert points - surprise - to administration interfaces exposed directly on the Internet. CERT-FR asks (what ANSSI has been recommending for years) that exposure be removed, that equipment be reached only through a VPN (Virtual Private Network) or a protected network, that equipment be updated (well, often it is end-of-life…) and that default passwords be changed.

]]>