Top
Best
New

Posted by Zeekaas 11 hours ago

Hackers activate automatic defrosting in supermarket fridges across Europe(www.tomshardware.com)
https://www.reuters.com/business/retail-consumer/french-supe..., https://www.bbc.com/news/articles/crq5nzxv9q4yo, https://www.lemonde.fr/en/france/article/2026/10/12/french-s...

Related:

https://www.claroty.com/team82/research/freeze-the-controlle...

I think the military commissary's freezers were hacked - https://news.ycombinator.com/item?id=49508506 - Aug 2026 (239 comments)

352 points | 572 commentspage 3
yborg 3 hours ago|
Doesn't look like this needed a rampant AI, pardon, elite superintelligence:

https://cyberplace.social/@GossiTheDog/117429502412235079

WalterBright 5 hours ago||
These vandals are what creates a low-trust society, where everybody needlessly suffers.

I remember working on my car when I lived in an apartment. I'd take my tools out into the parking lot, and get to work. If I needed to use the potty, or get a snack, or whatever, I had to pack up the tools and take them inside. Then out again. It really stinks.

I currently live in a high trust neighborhood where I don't need to be present with anything outside.

It's so much better.

jimmySixDOF 5 hours ago||
Digital hackers who cause real world harm effects should get treated like the terrorists they are with all that means in terms of the available inerdictions.
r_luna 5 hours ago||
They should be treated as pirates (law of the sea). I think terrorist are charged under piracy laws.
AngryData 4 hours ago|||
Nah, im glad hackers are exposing vulnerabilities in critical infastructure and logistics. Otherwise when some belligerent oligarch or politician or generally wealthy asshole decides they should rule everything they don't have easy avenues to fuck things up.
WalterBright 3 hours ago||
Vulnerabilities can be exposed by reporting them to the vendor.
AngryData 2 hours ago||
Which will then be ignored because it costs money to fix if there are no consequences to not fix it.
WalterBright 2 hours ago||
Do assert that vandals are doing a public service?
chrisjj 3 hours ago|||
> These vandals are what creates a low-trust society, where everybody needlessly suffers.

Um, if everyone needlesly suffered, we'd not have the problem.

Whereas we have in fact generously provided life-enrichment opportunities - to miscreants.

alexashka 4 hours ago||
[flagged]
AndrewThrowaway 10 hours ago||
My first idea was "who the hell needs connected fridges".

Then I remembered that both my AC and floor heating are connected.

A hacker could easily turn on both AC and floor heating and cause me a few euros of damages in my electricity bill.

Tangurena2 9 hours ago||
Internet connected fridges are not new.

2014:

> A fridge has been discovered sending out spam after a web attack managed to compromise smart gadgets.

> The fridge was one of more than 100,000 devices used to take part in the spam campaign.

https://www.bbc.com/news/technology-25780908

Lessons were not learned:

2017:

> A critical security flaw dubbed HomeHack exposed 1 million LG smartThinQ IoT home devices, enabling hackers to easily gain access to users’ homes and take full control over any LG smart device connected to the account, including dishwashers, vacuums, air conditioners and washing machines, found security researchers from Check Point.

https://www.bitdefender.com/en-us/blog/hotforsecurity/securi...

floatrock 9 hours ago|||
Or keep duty-cycling the units until the pumps burn out...
kyriakos 9 hours ago|||
my water kettle has wifi support for some weird reason.
driverdan 9 hours ago||
who the hell needs connected AC and floor heating?
AndrewThrowaway 8 hours ago|||
I moved to a new apartment with all this stuff installed.

At first I thought exactly that - just why.

When days started getting warm in the beginning of the summer I started investigating and thought that it might actually be a good idea - you could turn AC an hour before you come home to find cool room.

When summer hit I actually found out that you just leave AC on all the time and it just keeps temperature at 22C or so and there is really no need for it to be connected. You don't want to turn that off as it is more economical to keep the room cool than letting it to get hot and then trying to cool it fast. It barely even showed up on my electricity bill at the end.

So all in all - really not needed.

NetMageSCW 4 hours ago||
My connected thermostat used the weather to determine expected outdoor temperature and sun exposure to adjust timing of heating and cooling as well as presence or absence of cell phone “at home” to adjust temperature range for savings. It also used cell phone approaching home to go back to normal temperature ranges.
asdff 4 hours ago||
My dumb thermostat also accounts for outdoor weather and sun exposure, simply by directly measuring the indoor air temperature which changes in response to those things. Dumb ones can also have schedule programming too. There's been plenty of times running errands when I approach home and then pass it up. Usually better to keep your temp constant than go through heating/cooling/big delta cycles generally speaking anyhow. One of those things where it feels like it makes sense but probably doesn't if you are coming back that day anyhow.
ImPostingOnHN 3 hours ago|||
Connected A/C has been useful for me, because I also have a window fan and outdoor temperature sensors. So when target temp is below indoor temp but above outdoor temp, I turn off the A/C and turn on the venting fan. It's a lot more energy efficient.

Now, is it connected to the internet? Ha ha ha, no.

GoofGarage 5 hours ago||
In the U.S. the following brands are affected (systems were proactively taken offline):

* Food Lion, 1100 stores

* Stop & Shop, 400 stores

* GIANT/MARTIN, ~190 stores

* Hannaford, ~160 stores

Websites are down at the very least. May affect ability to place online orders for pickup and delivery. Mobile apps are down. “In-app coupon” redemption is likely down.

US brand physical stores are open and selling to customers.

alexdrdr 10 hours ago||
Only going to get worse as hackers get increasing access to more advanced AI models and compute

Open weight models catch up quickly, so it is only a matter of time before Fable level models are in the hands of bad players

Key issue will be that banks and key infrastructure *may* get their security patched in time. But there’s going to be so many vulnerable companies like in this case

Tangurena2 9 hours ago||
No. Politicians will do no such thing. There have been hacks/attacks of internet-connected appliances for more than a decade. LG is notorious for demanding that appliances be connected (why does a washing machine do when connected to the internet?).

IOT security needs to change.

There have been some changes to SCADA security, making it harder to hack into water treatment facilities (for example) but in my opinion, not enough.

revolvingthrow 6 hours ago|||
> Key issue will be that banks and key infrastructure may get their security patched in time

They'll do nothing until a few get pwned into the dirt. Same for power distribution systems, it's all parochial boomers calling all the shots.

For AI, what's funny is that it's the solution to securing your ancient hardware that's no longer supported. I reverse engineered almost all electronics I own, just by having modern AI models have a go at it and knowing almost nothing about the topic. It's something that a person can do, but a company won't even consider.

notyourwork 10 hours ago||
And hopefully regulation following it.
jayGlow 10 hours ago||
What regulations would help with this? companies that actually host the models themselves can be regulated but open models can e abliterated or otherwise modified to stop them from refusing tasks. I'd be very wary of any regulations that prevent people from hosting or making their own models and weights.
hmstx 3 hours ago||
1 data point of Yep. I went to my local Monoprix to grab a few things during lunch break. For some reason they seemed to have suffered a fridge incident, good for me I didn't need anything from those aisles. I did wonder if it was just a recent problem or if a more sneaky malfunction had silently semi-spoiled some of the products I brought back days before, until it just blew over.
kumarharsh 5 hours ago||
Something different came to mind as I read this article - there has been recent chatter regarding impending Food security issues - it was even talked about by India's foreign minister recently:

https://www.thehindu.com/news/national/eam-jaishankar-warns-...

I wonder if this attack is some kind of early warning about capabilities of disruptive forces.

abosley 7 hours ago||
Same (an outage) happened to the US military commissary system https://www.stripes.com/theaters/us/2026-09-01/army-cid-inve...
linuxguy2 6 hours ago||
I was hoping there would be more discussion about the overlap of these two events.
vkou 6 hours ago||
The overlap between those two events is that digital security sucks ass and that attacks are much easier to mount in an era of agents.
drummojg 6 hours ago||
I can see advantages to collating data for both organizations, but to it just raises the question, once again, of why simple appliances are connected to the Internet.
red_admiral 5 hours ago||||
That, and why there's not a company VPN in between.
jandrewrogers 5 hours ago|||
These industrial networks are often not internal to a single company, sometimes by necessity. They also are often installed in places with inherent connectivity difficulties, so sometimes you are bridging weird networks that limit what is possible just to get the signal out.

These aren't consumer fridges with wifi. The situation on the ground is significantly more complex. There are a lot of embedded sensors and control systems in supply chains in order to minimize waste.

vkou 5 hours ago|||
Because a main user of this is the third-party HVAC contractor, and there's a operational cost to getting him set up on the grocer's VPN. (He has thousands of clients, that's in aggregate a lot of customers that would need to give him VPN access. He will do whatever the client asks of him, but he will bill accordingly.)
vkou 5 hours ago|||
1. There's nothing simple about a commercial HVAC install, especially across a national chain.

2. Because they think (rightly or wrongly) that the benefits of monitoring and ease of maintenance and their contractor having direct access to the data outweigh the risks.

3. They think it outweighs the risk because IOT has been socially normalized, creating the wide perception that no, it's not that bad.

They almost certainly have insurance for this kind of event, and their insurer will almost certainly think real hard about the pros/cons of this, and will adjust rates accordingly. The grocer is free to take those rates into account when deciding on whether their next store will have an IOT HVAC.

sgnelson 4 hours ago||
I came here for this very discussion. Shame more investigation was not done on this story.
NetOpWibby 4 hours ago|
Watch Dogs was ahead of its time. How long before one of these hacker groups claim the DedSec name as their own?
More comments...