Security experts are raising alarms about issues with industrial refrigeration controllers used by major supermarket chains. The vulnerabilities in Copeland controllers could let hackers remotely change fridge and freezer settings, risking food spoilage and possibly endangering public health.
These vulnerabilities are significant because many U.S. grocery stores and food service companies rely on Copeland’s systems. If exploited, attackers could alter temperatures or disable equipment, threatening inventory and disrupting supply chains. Copeland’s devices are used by big grocery chains across the U.S. and in over 40 countries, meaning the potential impact could be vast unless companies address these flaws promptly.
A security firm, Armis, found ten vulnerabilities in two lines of Copeland controllers, naming the issue Frostbyte10. They noted that these flaws might allow unauthorized users to gain control over the systems. Although there’s no public proof that these vulnerabilities have been exploited yet, the risk remains high. Armis emphasized that once vulnerabilities are known, malicious actors often look for unpatched systems.
Copeland is encouraging its customers to install firmware updates and consider upgrading older E2 controllers to newer, supported E3 models. Among the chains using these systems are Kroger, Albertsons, and Whole Foods.
Experts highlight the stakes involved. Josh Weaver, Copeland’s VP of software, mentioned that approximately two-thirds of grocery stores in North America use their products. He emphasized the prevalence of these systems in stores where most of us shop.
Nadir Izrael, CTO of Armis, elaborated on the motivation for attacks, pointing out that hackers often target systems that can incur rapid losses for businesses. Food retailers, with significant inventory at risk, are particularly vulnerable.
Going forward, it’s crucial for operators to prioritize security measures. As federal agencies publish guidelines for protecting operational technology, businesses must act quickly to implement patches and upgrades. This proactive approach is essential in safeguarding our food supply and maintaining public trust.
For more detailed information on this issue, you can refer to Armis’s official reports on the Frostbyte10 vulnerabilities here.
Source link
Hackers,Tech