Sabotage of refrigeration systems: Expert criticizes manufacturers

heise onlineIndependentCenterNov 4

Following cyberattacks on supermarket cooling systems across several European countries, including Germany, IT security expert Christoph Fischer argues that manufacturers of connected devices bear primary responsibility for the vulnerabilities exploited. Fischer criticized the practice of shipping control units with unchanged factory settings and standard passwords, describing this as an unforgivable failure. He noted that while similar attacks in France in October targeted outdated Danfoss controllers, it remains unconfirmed if the current incidents share the same cause. The expert emphasized that secure encryption methods, such as certificates and asymmetric encryption, are technically feasible and should be implemented by manufacturers during initial setup. Fischer warned that the issue extends beyond retail to various sectors like photovoltaics and heat pumps, urging consumers to avoid unnecessary internet connectivity for household devices. Additionally, he suggested that consumer protection organizations should include mandatory IT security criteria in their product evaluations, noting that stricter manufacturer obligations under the Cyber Resilience Act will take effect between 2026 and 2027.

Bias read (Center): The article relies exclusively on technical arguments and regulatory timelines provided by a single security expert, presenting a balanced view of industry standards versus future legal requirements without partisan framing.

heise onlineIndependentCenterNov 3

Users of the mSecure password manager received notifications regarding suspicious activities associated with the application, prompting them to take immediate security measures such as changing passwords and resetting two-factor authentication. The developer, mSeven, stated that they launched an investigation, engaged external IT security experts, and took unspecified steps to contain the issue, though specific details about the nature of the breach remain undisclosed. Critics note that the incident raises concerns about the app's encryption claims, particularly since the German Federal Office for Information Security (BSI) previously identified mSecure as allowing theoretical manufacturer access to user data. Despite these security questions, the app remains popular with over 500,000 installations on Google Play and significant usage on iOS. The lack of transparency regarding the exact scope of the intrusion has led to speculation about potential vulnerabilities in the zero-knowledge architecture.

Bias read (Center): The article presents factual reporting on a cybersecurity incident, citing official statements and previous regulatory assessments without using loaded language or taking a partisan stance.

Focus OnlineIndependentCenterNov 3

The provided text consists solely of a headline stating that hackers are attacking supermarkets because outdated software turns refrigerators into entry points. No further details, quotes, data, or context regarding specific incidents, affected companies, or security recommendations are included in the supplied excerpt.

Bias read (Center): The input is a single headline lacking any narrative development, opinionated language, or partisan framing, making it impossible to detect a directional bias.