617/69 Thuesday, November 10, 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), together with the Federal Bureau of Investigation (FBI), Department of Health and Human Services (HHS), Department of Agriculture (USDA), and Department of Transportation (DOT), has issued a joint advisory warning of cyber threats targeting Industrial Refrigeration Controllers and temperature monitoring systems used in Cold Chain Monitoring Systems. These technologies are widely deployed across healthcare, chemical manufacturing, food production, retail, and temperature-controlled transportation sectors. The agencies stated that threat actors have been targeting temperature control devices and commercial refrigeration systems used in supermarkets and refrigerated storage facilities worldwide, particularly devices that remain unpatched or are directly accessible from the internet, potentially allowing attackers to take control and alter system settings without authorization.
According to CISA, attackers may exploit authentication bypass vulnerabilities, code injection flaws, and weak security configurations to access refrigeration control systems and modify operating parameters. In particular, attackers could force systems into heating or continuous Defrost Mode, causing temperatures inside refrigerators, freezers, or cold-storage facilities to rise abnormally. Such manipulation could result in large-scale spoilage of food products and medical supplies, as well as increase the risk of equipment damage or fire. Attackers may also interfere with monitoring systems, preventing administrators from accurately viewing temperatures or receiving timely alerts about abnormal operating conditions. This could create additional risks to consumer safety if products stored outside required temperature ranges are distributed or used.
CISA and partner agencies recommend that organizations operating Operational Technology (OT) refrigeration systems identify devices exposed to the internet and avoid allowing direct external access to control systems. Where remote administration is required, organizations should use properly updated firewalls or security gateways and segment OT networks from corporate IT environments. Default passwords should be changed, strong authentication enforced, and phishing-resistant Multi-Factor Authentication (MFA) enabled where supported. Organizations should also apply firmware updates, replace unsupported devices, restrict configuration changes to trusted devices and IP addresses, maintain offline backups, enable logging, and regularly monitor network traffic. Temperature safety limits should also be configured to prevent commands that push systems beyond safe operating ranges. The agencies emphasized strengthening OT access controls to reduce risks to business continuity and public safety.