Briefings ·
OTASEC Daily Briefing | 05-11-2026
The supermarket refrigeration attacks have reached healthcare, with France's national blood service reporting altered temperature settings at three sites. Elsewhere, a batch of ICS advisories and an NCSC outlook on AI-powered malware.
1Update: refrigeration attacks reach French blood service
New this week: France's national blood service (EFS) confirmed that a cyberattack on a refrigeration equipment provider raised temperature and defrost settings at three of its facilities. Monitoring caught the anomalies in time and the temperature spikes were reversed, and the EFS says it was not directly targeted. Reporting links this to the wider wave in which attackers remotely changed refrigeration control settings at supermarkets in Belgium, Sweden, Estonia and other countries, with some stores discarding food.
For asset owners: Check which refrigeration and cold-chain controllers are remotely reachable, ask suppliers how their remote access is secured, and make sure temperature alarms work independently of the control system.
2Other advisories: Siemens SIMATIC IoT2050, WAGO, Subnet Solutions PowerSYSTEM Center
Siemens revised SSA-834709 (V1.1) on the Node-RED missing authentication flaw in SIMATIC IoT2050 with Industrial OS, which lets an unauthenticated remote attacker create malicious flows and run code with maximum privileges; updated versions are available. WAGO's VDE-2026-102 describes a credential recovery bypass that could let an unauthenticated attacker reset passwords of arbitrary accounts. CISA ICSA-26-307-01 covers Subnet Solutions PowerSYSTEM Center (CVE-2026-63017, CVE-2026-63774), where SQL injection could give access to unauthorized resources in the energy and critical manufacturing sectors.
For asset owners: Inventory these products, apply the vendor updates and mitigations, and keep Node-RED interfaces and engineering systems off untrusted networks.
3Update: NCSC Annual Review puts AI-powered malware against UK critical infrastructure at 2028
The UK NCSC Annual Review 2026 says the country's critical national infrastructure should prepare for ransomware attacks involving AI-powered malware by 2028. This follows the earlier NCSC warning on AI-powered attacks.
For asset owners: Use this as a prompt to test whether your OT incident response, backups and network segmentation hold up against faster, more automated ransomware.
4Industry news: dependence on digital infrastructure and IEC 62443 monitoring partnership
The Dutch RDI notes that growing dependence on digital infrastructure, such as energy and water supply, is a major issue as more systems and devices connect to it. Separately, BaseRock IT Solutions and Radiflow announced a partnership to extend IEC 62443 advisory services with continuous OT risk monitoring.
For asset owners: Review which of your OT systems depend on external digital infrastructure and whether your IEC 62443 risk assessments cover that dependency.