Knowledge base
IoT & Smart Device Security
Fridges, cameras, controllers, and building systems were never designed for the hostile internet, we secure them anyway.
6 topics · 6 articles
- Connected Fridge & Appliance Hacks
On the night of October 11–12, 2026, hackers seized Danfoss refrigeration controllers in hundreds of French supermarkets, forcing …
- IP Camera & Surveillance Security
IP cameras are the most numerous, and most neglected, computers in most organizations: default passwords, years-old firmware, UPnP…
- IoT Botnet & DDoS Protection
From the 2014 fridge spam botnet to Mirai's 2016 record DDoS attacks, compromised smart devices are the internet's standing army f…
- Smart Building & BMS Security
The French fridge attacks were a building-automation failure: Modbus-speaking controllers, managed over the internet, running EOL …
- IoT Firmware Update Management
The single sentence behind the October 2026 fridge disaster: the affected units 'no longer receive software or security updates.' …
- IoT Network Segmentation
Segmentation is the control that would have contained nearly every major IoT incident: Mirai cameras couldn't have reached Dyn tar…
Field notes
The Danfoss incident of October 2026 rewrote IoT risk in one weekend: ~400 stores affected across six countries, freezers driven to 50°C, food losses in the millions, fires, a CERT-FR alert (CERTFR-2026-ALE-012), and an ANSSI investigation. The root causes, EOL firmware, internet-facing admin interfaces, default-credential-era design, describe most deployed IoT, not an edge case.
Exposure auditing is the highest-value IoT control because it answers the question attackers ask first: what's reachable? Shodan-indexed admin panels numbered in the thousands for the Danfoss controllers alone. Every organization should see its own Shodan footprint quarterly, the view is free, and the alternative is learning about it from an incident report.
Ownership clarity decides IoT outcomes more than technology. Fridge controllers managed by refrigeration contractors, cameras by facilities, badge systems by HR vendors, none of them in IT's patch cycle. Every device needs a named owner, a support-status date, and a network exposure verdict, reviewed together by IT and facilities at least twice a year.
Related areas
Related services
Server problem? Hacked site? Slow website?
Critical issues answered within 30 minutes, 24 hours a day, 7 days a week.