OT Security Weekly DACH, KW 42/2026: cooling controllers under attack
OT-Cyber.de rated the OT threat level for Germany, Austria and Switzerland as high for week 42 of 2026. Attackers manipulated internet-exposed Danfoss, Copeland and Dixell refrigeration controllers in hundreds of French supermarkets on 11-12 October, spoiling food, and CERT-FR expects the campaign to continue. Meanwhile Ivanti Connect Secure (CVE-2026-104935) and PAN-OS (CVE-2026-0322) are being exploited, and BSI published BSI-CS 154.
- CERT-FR confirmed compromised Danfoss AK-SM/AK-SC, Copeland and Dixell xweb controllers
- At least 4,500 Danfoss interfaces were exposed online on 13 October, per Reuters
- Ivanti Connect Secure CVE-2026-104935 added to KEV on 13.10; fixed in 22.8R2.5 and 25.1.x
- PAN-OS CVE-2026-0322 scores CVSS 8.6; fixed in 12.2.4, 11.2.16 and 10.2.18-h12
Read next
Security