How do cyberattacks on supermarket refrigeration systems work?

Numbers match the citations in the article. A working link isn't proof that a page supports a claim; check the quoted passage and date.

1. 1

   Industrial control system (Wikipedia)

   WikipediaPublished Oct 9, 2026Checked Oct 12, 2026

   “An industrial control system (ICS) is an electronic control system and associated instrumentation used for industrial process control. Control systems can range in size from a few modular panel-mounted controllers to large interconnected and interactive distributed control systems (DCSs) with many thousands of field connections. Control systems receive data from remote sensors measuring process variables (PVs), compare the collected data with desired setpoints (SPs), and derive command functions that are used to control a process through the final control elements (FCEs), such as control valves. Larger systems are usually implemented by supervisory control and data acquisition (SCADA) systems, or DCSs, and programmable logic controllers (PLCs), though SCADA and PLC systems are scalable down to small systems with few control loops. Such systems are extensively used in industries such as chemical processing, pulp and paper manufacture, power generation, oil and gas processing, and telecommunications.”

2. 2

   Control system security (Wikipedia)

   WikipediaPublished Oct 6, 2026Checked Oct 12, 2026

   “Control system security, or industrial control system (ICS) cybersecurity, is the prevention of (intentional or unintentional) interference with the proper operation of industrial automation and control systems. These control systems manage essential services including electricity, petroleum production, water, transportation, manufacturing, and communications. They rely on computers, networks, operating systems, applications, and programmable controllers, each of which could contain security vulnerabilities. The 2010 discovery of the Stuxnet worm demonstrated the vulnerability of these systems to cyber incidents. The United States and other governments have passed cyber-security regulations requiring enhanced protection for control systems operating critical infrastructure. The term industrial control system (ICS) is the most widely recognized and is considered the standard term used to describe control system security. Under industrial control systems there are numerous subgroups. These include SCADA (Supervisory Control and Data Acquisition) security, DCS (Distributed Control System), and PLC (Programmable Logic Controller) environments.”

3. 3

   Fridges in French supermarkets hit by cyber attack

   BBC NewsPublished Oct 12, 2026Checked Oct 12, 2026

   “Hundreds of stores were targeted by the overnight hack, which spoiled fresh and frozen food estimated to be worth millions of euros.”

4. 4

   Composite Vulnerabilities and Hybrid Threats for Smart Sensors and Field Busses in Building Automation: A Review.

   Sensors (Basel, Switzerland) (Gerhalter & Dahal)Published Aug 22, 2025Checked Oct 12, 2026

   “This approach is much less pronounced in the area of cyber physical systems and not present at all in the area of building automation. Increasing interconnectivity, undefined responsibilities, connections between secured and unsecured areas, and a lack of understanding of security among decision-makers pose a particular threat. This systematic review demonstrates a paucity of literature addressing real-world scenarios, asymmetric/hybrid threats, or composite vulnerabilities. In particular, the attack surface is significantly increased by the deployment of smart sensors and actuators in unprotected areas. Furthermore, a range of additional hybrid threats are cited, with practical examples being provided that have hitherto gone unnoticed in the extant literature. It will be shown whether solutions are available in neighboring areas and whether these can be transferred to building automation to increase the security of the entire system. Consequently, subsequent studies can be developed to create more accurate behavioral models, enabling more rapid and effective analysis of potential attacks to building automation.”

5. 5

   AI-Driven Problem Solving for Cyber-Physical Systems Security: An Assessment Framework.

   Sensors (Basel, Switzerland) (Kulothungan et al.)Published Aug 27, 2026Checked Oct 12, 2026

   “We find that traditional risk assessment and testing approaches, often network-centric and compliance-driven, are insufficient for AI-powered CPS. New vulnerabilities arise from the tight coupling of cyber and physical components, such as adversarial manipulation of sensors that can cause dangerous misbehavior, supply chain attacks on AI models, and the inability to patch critical devices on the fly. We use AI techniques and problem-solving methods to improve the security of CPS. The framework helps detect threats, monitor system activities, and reduce security risks in real time. It also follows important security and privacy standards such as NIST, IEC 62443, ISO 21434, and GDPR. The system continuously checks CPS operations, uses AI tools to find weaknesses, and supports security compliance. We also study real-world CPS attacks, including industrial malware, car hacking, and medical device attacks, to show the importance of the framework. In this research, we present prototype implementation and experimental evaluation along with a case study of protecting a smart manufacturing plant during a ransomware attack using the proposed approach.”