Vendors and CVEs › Sectors › Retail
Retail: industrial cyber security news for the sector
7 stories in Industrial Cyber Brief name Retail, 1 on CISA’s list of known exploited flaws, from Sunday 18 October 2026 to Monday 9 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
High Known exploited
Weekly news roundup mentions refrigeration cyberattacks on European retailers
A Help Net Security weekly review lists refrigeration cyberattacks hitting European retailers again, a Patch Tuesday forecast, and an interview on command policy for AI coding agents.
Critical
Internet-connected freezers and cold chain systems are becoming a cyber target
Forescout reports attacks on French supermarket refrigeration that changed temperature and defrost settings.
Critical
Hackers remotely change freezer settings at European supermarkets
A cyberattack on refrigeration systems disrupted stores of several supermarket chains in multiple European countries. Hackers remotely changed temperature settings on freezers and cooling systems.
Low
Cold chain attacks point to weak OT security in retail
A Computer Weekly headline links cold chain cyber attacks to a lack of operational technology (OT) security in retail. The report gives no detail on the attacks or their impact.
Critical
Researchers warned of refrigeration controller flaws months before French supermarkets were hit
Researchers warned of flaws in refrigeration controllers months before attacks on nearly 700 French supermarkets. Criminals hacked thousands of controllers, raising heat to 50°C (122°F).
Critical
Attackers spoiled food at French supermarkets by altering refrigeration controls
Overnight from 11 to 12 October 2026, attackers changed temperature and defrost settings in refrigeration systems at hundreds of French stores. Stores discarded fresh and frozen food.
High
French supermarket refrigeration attacks widen to Copeland and Dixell controllers
Cyberattacks hit roughly 700 French supermarkets. The attacks have widened to Copeland and Dixell controllers. No group has claimed responsibility.