In a joint advisory dated 5 November 2026, CISA, FBI, HHS, USDA and DOT warn of malicious activity against electronic temperature controllers and commercial refrigeration systems worldwide. Actors may abuse authentication bypass, injection or weak configurations to change setpoints and force continuous heat/defrost cycles, risking inventory loss, equipment damage and fire. They urge removing internet exposure, OT VLAN isolation, changing defaults, MFA, patches and offline backups.

What it means: For Greek supermarkets, food logistics, pharma cold stores and blood banks, the advisory is an immediate OT checklist: remove public controller exposure, patch, and confirm setpoint limits with alerting. It follows the EU refrigeration incident wave; combine with ENISA/CSIRT guidance. BMS/refrigeration vendor contracts should set security SLAs and firmware-update duties. In practice, teams should name an owner, update the risk register and agree success criteria within 30 days. Where suppliers or customers are affected, send a short note citing the primary source without overclaiming. Compliance, security and operations are linked; one change often needs contract, access-rights and continuity checks. Keep a review calendar so the news becomes concrete actions for the Greek business. In practice, teams should name an owner, update the risk register and agree success criteria within 30 days. Where suppliers or customers are affected, send a short note citing the primary source without overclaiming. Compliance, security and operations are linked; one change often needs contract, access-rights and continuity checks. Keep a review calendar so the news becomes concrete actions for the Greek business.

Read the original on CISA / FBI

Related service: Custom software

Related stories