Cyberattacks targeting supermarket refrigeration systems across Europe expose a dangerous gap between enterprise IT security and operational technology protection. For Indian CIOs and CISOs, the incidents underline the urgency of securing connected devices, strengthening vendor accountability, eliminating internet-facing vulnerabilities and building enterprise-wide visibility across IT and OT environments.
The cyberattacks targeting supermarket refrigeration systems across Europe should prompt CIOs and CISOs to reconsider an often-overlooked dimension of enterprise cybersecurity: the protection of connected operational technology (OT). What appears to be an attack on an ordinary supermarket appliance is, in reality, a demonstration of how vulnerabilities in seemingly peripheral infrastructure can translate into direct business disruption.
In October 2026, refrigeration systems at supermarkets in France reportedly came under cyberattack, with attackers manipulating temperature settings and disrupting normal operations. The incidents subsequently extended across several European markets. Reuters reported on November 2 and 3 that retailers in countries including Sweden, Belgium, Ireland, Luxembourg, Estonia, Finland and the Netherlands had experienced refrigeration-related disruptions. Some systems reportedly reached temperatures as high as 50 degrees Celsius, resulting in spoiled food and operational losses.
“Visibility is not a dashboard. It is the ability to make a safe decision while there is still time to act.”
— Frank Ruge, Senior Vice President, Direct Sales EMEA, Infoblox
While investigations into the precise attack mechanisms and perpetrators continue, the incidents have exposed a significant security challenge: organisations are connecting more physical infrastructure to digital networks without necessarily implementing equivalent security controls.
For enterprise technology leaders, the implications extend well beyond retail. The same vulnerabilities can exist in manufacturing plants, hospitals, warehouses, data centres, energy facilities and commercial buildings. Any connected device capable of influencing a physical process can potentially become an entry point for an attacker.
The question for CIOs and CISOs is no longer simply whether their enterprise network is secure. It is whether they know every connected device operating across their business, understand its dependencies and have the ability to prevent its compromise from affecting critical operations.
The expanding attack surface of cyber-physical systems
Modern refrigeration infrastructure is a typical example of a cyber-physical system. These systems combine hardware, software, sensors and network connectivity to monitor and control physical processes.
Remote management allows retailers to monitor temperatures across multiple outlets, identify equipment failures and optimise energy consumption. Similar connectivity is increasingly common in industrial automation, building management, healthcare infrastructure and manufacturing.
However, connectivity also expands the attack surface.
Vladimir Dashchenko, Principal Security Researcher at Kaspersky, points out that refrigeration systems illustrate how cyber-physical infrastructure can become vulnerable when remote-management capabilities are not supported by adequate security measures.
“Modern refrigeration systems are a typical example of cyber-physical systems. It means they can be monitored and controlled remotely, while their level of security often remains insufficient,” he observes.
According to Dashchenko, some manufacturers fail to implement fundamental safeguards such as password policy enforcement, two-factor authentication and other standard security controls. Weaknesses in secure software development and Software Security Development Life Cycle (SSDLC) processes further increase the exposure.
“If a device is publicly reachable and insecurely configured, it can be discovered both by administrators and by threat actors.”
— Vladimir Dashchenko, Principal Security Researcher, Kaspersky
For CIOs and CISOs, this raises an important issue: the security of enterprise infrastructure increasingly depends on the cybersecurity maturity of equipment manufacturers and technology vendors.
An organisation may have invested substantially in endpoint protection, identity security, network detection and response, and security operations. Yet an insecure controller connected to a remotely accessible management platform could remain outside the visibility of conventional security systems.
This is particularly concerning because OT equipment often remains operational for considerably longer than conventional IT assets. Legacy controllers may continue functioning for years without adequate firmware upgrades or security improvements.
Internet-facing devices: The vulnerability nobody is monitoring
One of the most concerning aspects identified by Kaspersky is the potential exposure of refrigeration control panels to the public internet.
Dashchenko explains that internet search platforms such as Shodan and Censys can identify publicly accessible refrigeration controllers and similar devices.
These platforms are legitimate tools used by security researchers and administrators to discover exposed infrastructure. However, the same visibility can be exploited by threat actors searching for vulnerable systems.
“If a device is publicly reachable and insecurely configured, it can be discovered both by administrators and by threat actors,” he says.
The implication for enterprise security leaders is significant. An attacker may not always need to penetrate an organisation’s primary corporate network to identify a vulnerable operational device.
An exposed management interface, weak authentication or outdated firmware could provide an alternative route to unauthorised access.
Dashchenko also highlights that information about methods for achieving remote arbitrary code execution on similar refrigeration control panels has previously appeared in the public domain.
Remote code execution vulnerabilities can potentially allow attackers to execute commands or malicious code on affected devices. Where manufacturers lack mechanisms to enforce critical updates, known weaknesses may remain unaddressed.
For CISOs, this reinforces the importance of external attack surface management. Organisations need to identify internet-facing infrastructure continuously, including assets that may not appear in conventional IT inventories.
Why CIOs must bring OT under enterprise security governance
One of the fundamental challenges in OT security is fragmented ownership.
In many organisations, IT departments manage corporate networks and cybersecurity, while engineering teams, facilities departments and external vendors manage operational equipment.
This separation can create gaps in accountability.
A manufacturing controller may be managed by an engineering team, a building automation system by facilities management, and refrigeration infrastructure by an external service provider. Yet all these systems may connect to enterprise networks or external management platforms.
Without coordinated governance, security teams may not know what devices exist, which systems they support, how they communicate or who is responsible for protecting them.
Frank Ruge, Senior Vice President, Direct Sales EMEA, Infoblox, believes that the European incidents highlight precisely this challenge.
“The immediate question for a retailer, hospital or manufacturer is not only whether a controller is exposed. It is whether the organisation knows the controller exists, what it supports, who owns it and how it can be secured or isolated,” he says.
For CIOs, this makes OT visibility an enterprise architecture and governance priority. For CISOs, it means extending security monitoring and risk assessment beyond traditional IT infrastructure.
Organisations need an authoritative inventory of connected assets, including unmanaged devices where relevant telemetry and specialist OT security integrations are available.
This inventory should identify device ownership, network connections, software versions, vulnerabilities, operational dependencies and external access arrangements.
Ruge emphasises that collecting more alerts is not the answer.
“Holistic asset visibility that turns into actionable insights is what matters most.”
The distinction is important. A dashboard showing thousands of connected devices has limited value unless security teams can identify which devices represent business-critical risks and determine what action is required.
Moving from inside-out security to outside-in exposure management
Traditional enterprise security strategies have largely concentrated on protecting internal networks, endpoints, applications and data. However, cloud adoption, third-party connectivity and remote infrastructure management have weakened the boundaries of conventional enterprise networks.
Attackers increasingly look for exposed services, compromised credentials, malicious domains and vulnerable infrastructure beyond the corporate perimeter.
This makes external attack surface management (EASM) and digital risk protection important components of modern security architecture.
Infoblox has expanded its Exposure Management capabilities with Axur, bringing together external attack surface management and digital risk protection to provide an outside-in view of an organisation’s exposure.
Ruge explains:
“Organisations cannot manage risk solely from the inside out. External attack surface management and digital risk protection provide an outside-in view of exposed credentials, relevant malicious infrastructure and other risks forming beyond the perimeter.”
For CISOs, the value lies in correlating these external signals with internal asset intelligence.
For example, discovering an exposed remote-management service becomes more meaningful when security teams can establish which operational devices depend on it, who manages those devices and what business consequences could follow from compromise.
Such correlation can help security teams prioritise remediation based on operational impact rather than treating every vulnerability as an isolated technical issue.
Protective DNS: Strengthening the enterprise defence layer
Another important component of Infoblox’s approach is Protective DNS.
DNS is fundamental to internet communication, translating domain names into the IP addresses required to connect to online services. Cybercriminals frequently exploit malicious domains and command-and-control infrastructure to communicate with compromised devices, distribute malware and coordinate attacks.
Protective DNS can identify and block requests to known malicious domains, preventing devices from communicating with recognised hostile infrastructure.
For enterprises with distributed operations and connected OT environments, this provides an additional layer of protection.
However, CISOs should recognise that Protective DNS is not a substitute for securing vulnerable controllers, enforcing strong authentication or removing unnecessary internet exposure.
It must operate alongside network segmentation, secure remote access, vulnerability management, identity controls and continuous monitoring.
Five priorities for Indian CIOs and CISOs
Although the reported incidents have occurred in Europe, the underlying vulnerabilities are relevant to Indian enterprises. India’s manufacturing expansion, smart infrastructure investments, connected healthcare facilities, logistics networks and increasing automation are expanding the country’s cyber-physical attack surface.
CIOs and CISOs should consider five immediate priorities:
1. Establish a unified IT-OT asset inventory
Identify every connected device across corporate networks, factories, warehouses, hospitals and facilities. Include legacy systems, unmanaged devices and equipment maintained by third-party vendors. Map ownership, business dependencies and network connectivity.
2. Eliminate unnecessary internet exposure
Identify publicly accessible controllers, management interfaces and remote-access services. Restrict direct internet connectivity and provide controlled access through secure gateways, VPNs and approved access-management mechanisms.
3. Make vendor cybersecurity a procurement requirement
Evaluate manufacturers and service providers on authentication standards, secure development practices, vulnerability disclosure, firmware support and patch-management capabilities. Contracts should clearly establish security responsibilities and incident-reporting obligations.
4. Strengthen segmentation and identity controls
Separate OT environments from corporate IT networks wherever operationally feasible. Enforce multi-factor authentication, least-privilege access and continuous monitoring of third-party connections. Ensure that a compromised device cannot easily provide access to critical enterprise infrastructure.
5. Integrate threat intelligence with incident response
Combine internal asset visibility with external attack surface intelligence and Protective DNS. Develop incident-response procedures that involve IT security, engineering, facilities management and business continuity teams. Test the ability to isolate compromised equipment without unnecessarily interrupting essential operations.
These priorities should be supported by a continuous risk-assessment programme rather than one-time security audits.
Security by design: The responsibility of manufacturers and buyers
Enterprise security cannot be achieved through defensive controls alone. Equipment manufacturers must also accept responsibility for the security of connected products throughout their lifecycle.
Dashchenko recommends incorporating security requirements from the design stage, avoiding direct internet exposure, implementing strong authentication and ensuring timely installation of critical updates.
He also stresses that buyers and organisations procuring such equipment must examine vendors’ cybersecurity practices, particularly their approach to patch management and remote-access protection.
This is an important shift in procurement thinking. CIOs and CISOs should no longer evaluate connected infrastructure exclusively on performance, price, operational efficiency and technical specifications.
Cybersecurity support, product lifecycle management and the manufacturer’s ability to respond to emerging vulnerabilities must become equally important purchasing criteria.
The boardroom question: Can the business operate securely if OT is compromised?
The European supermarket incidents demonstrate that cybersecurity risks can quickly move from the digital environment into the physical world.
A compromised refrigeration controller can destroy inventory. A vulnerable industrial system can interrupt production. A compromised building-management platform can affect critical facilities. The business impact may extend across customers, suppliers and entire supply chains.
For Indian enterprises, the message is clear: OT security can no longer remain the exclusive responsibility of engineering or infrastructure teams. It must become part of enterprise risk management, board-level cybersecurity oversight and business continuity planning.
Infoblox’s Ruge captures the central challenge:
“Visibility is not a dashboard. It is the ability to make a safe decision while there is still time to act.”
The convergence of IT and OT demands a corresponding convergence of security strategy. Kaspersky’s warning about insecure cyber-physical devices and Infoblox’s emphasis on asset visibility and external exposure management point towards the same conclusion: enterprises must know what is connected, understand what is exposed and establish who is accountable.
For CIOs and CISOs, the next cybersecurity crisis may not begin with a compromised database or a ransomware demand. It could start with an ordinary operational device quietly accepting an unauthorised command.
The real test of enterprise cyber resilience will be whether organisations can identify that exposure and act before a technical vulnerability becomes a business crisis.