Top all-time · #3128
Claroty
Company blog · claroty.com/team82/researchsecuritysystems
Claroty is the company blog at claroty.com, writing about security and systems. Since 2020, 25 different Hacker News readers have linked it 27 times, most often “Vulnerabilities in Danfoss Refrigeration Controllers”. It is still writing: the last post was on 2026-03-12, and you can follow it by feed.
Too few sampled comments (7) to say how often HN recommends it.?
Why HN links it
HN readers link Claroty's Team82 research pages on industrial control flaws, such as the "Freeze the controller" write-up on Danfoss refrigeration controllers, as sources for the supermarket fridge hack stories.
Summarised by Claude from a sample of 7 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Protect cyber-physical systems, reduce risks to your business, and increase operational efficiency with Claroty.
Most-linked posts?
- Vulnerabilities in Danfoss Refrigeration Controllers6 people · 6 mentions · first linked 2026-10-12
- /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers5 people · 5 mentions · first linked 2026-10-12
What Hacker News says?
From a Financial Times (FT) article[0]: > Researchers at cyber security company Claroty released a report[1] in August stating that they had “identified multiple vulnerabilities” in Danfoss’s systems that manage its refrigeration equipment. They added that Danfoss fixed the vulnerabilities in a firmware update once they had been made aware. The manuf Danfoss released a patch on 2026-08-01 here[2]. To be clear, I can…
Comment linking /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
on “Hackers activate automatic defrosting in supermarket fridges across Europe”Submitted The Old Switcheroo: Hiding Code on Rockwell Automation PLCs as a story · 5 points
HN discussionWell, from my understanding, the write-up by the security company posted in the sub-tweet explain that it's not only the current date, it's just a weak algorithm that only uses the current date as seed, and only that. And this mechanism is complementary to regular auth, so admin password was _something_ but the bypass allowed you (if you reverse engineered the algorithm) to login without knowing it. So that's still…
Comment linking /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
on “Hackers activate automatic defrosting in supermarket fridges across Europe”Submitted An Oil and Gas Weak Spot: Flow Computers as a story · 3 points
HN discussionThe vulnerability making the rounds in the comments is specifically in 800A: https://www.claroty.com/team82/research/freeze-the-controlle...
Comment linking /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
on “Hackers activate automatic defrosting in supermarket fridges across Europe”Submitted Vulnerabilities in Danfoss Refrigeration Controllers as a story · 2 points
HN discussionNot sure if it's related but there was a vuln published in August for the freezers in the article https://www.claroty.com/team82/research/freeze-the-controlle... maybe groups have been looking for targets to use it on?
Comment linking /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
on “Hackers activate automatic defrosting in supermarket fridges across Europe”Submitted The Silent Spy Among Us: Modern Attacks Against Smart Intercoms as a story · 2 points
HN discussionMy mistake. It is stupider than that. Facepalm. https://www.claroty.com/team82/research/freeze-the-controlle...
Comment linking /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
on “Hackers activate automatic defrosting in supermarket fridges across Europe”Submitted We reversed engineered Splunk and created a pure Python based S2S client as a story · 2 points
HN discussionI went through a manual you mentioned in another comment. It listed "High level of security against undesired user access" as one of the features but it wasn't expanded upon. So I did more searching and found cybersecurity best practices from Danfoss. https://www.danfoss.com/en/service-and-support/fix-and-troub... They highlight connection through a firewall, mention secure remote access methods, monitoring for data…
Comment linking /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
on “Hackers activate automatic defrosting in supermarket fridges across Europe”Submitted Finding Flaws in FileWave MDM as a story · 2 points
HN discussionFreeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers Amir Zaltzman / August 9th, 2026 https://claroty.com/team82/research/freeze-the-controller-de...
Comment linking /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
on “Hackers activate automatic defrosting in supermarket fridges across Europe”Submitted Exploiting Vulnerabilities in Xinje PLC Program Tool as a story · 2 points
HN discussionLooks like that specific vulnerability was found this summer, disclosed in coordination with the vendor and at least some models were patched [0] (unclear if all models were), but from early reports: - they either didn't warn their customers this was a critical security patch, - many of these fridges/freezers were directly accessible on the internet with their own 3G/4F SIM cards without further protection! Crazy st…
Comment linking /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
on “Hackers activate automatic defrosting in supermarket fridges across Europe”Submitted The Race to Native Code Execution in Siemens PLCs as a story · 2 points
HN discussionPLCs are explicitly considered high value targets as they control large swaths of a nation-states critical infrastructure as well as connect to high value end-points in air-gapped networks. Now perhaps you're not working on anything someone might want to exploit, but PLCs are often found in critical infrastructure as well as high-end manufacturing facilities, which make them attractive targets for malicious actors.…
Comment linking /team82/research/evil-plc-attack-using-a-controller-as-predator-rather-than-prey
on “Just disconnect the internet”Submitted Getting From 5 To 0: VPN Security Flaws as a story · 2 points
HN discussionSo the author charitably calls the 2025 vulnerability a "login bypass", but it's much worse than that. The firmware included a "datetime-based password" mechanism: a built-in backdoor password, like it's the 90s again. The original researcher published about this in August of this year [1], a year after reporting it, titling the report "Defrost the Food", which the attackers apparently took to be a good suggestion.…
Comment linking /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
on “France's supermarket fridges were vulnerable online for months”Submitted Unpacking the Blackjack Group's Fuxnet Malware as a story · 1 points
HN discussionAnother post in this thread was downvoted and flagged (really?) for claiming that URL parsing isn't difficult. The linked article claims that "Parsing URLs correctly is surprisingly hard." As a software tester, I'm very willing to believe that, but I don't know that the article really made the case. I did find a paper describing some vulnerabilities in popular URL parsing libraries, including urllib and urllib3. Blo…
Comment linking /team82/research/exploiting-url-parsing-confusion
on “Parsing URLs in Python”Submitted Synology NAS DSM Account Takeover: When Random Is Not Secure as a story · 1 points
HN discussionRelated: https://claroty.com/team82/research/freeze-the-controller-de...
Comment linking /team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
on “French supermarket chains say cyberattack forced refrigerator shutdown”Submitted Exploiting Url Parsers: The Good, Bad, and Inconsistent [pdf] as a story · 1 points
HN discussionSubmitted The Art of On-Premise Development as a story · 1 points
HN discussionSubmitted Securing OT Network Management Systems: Siemens Sinec as a story · 1 points
HN discussionSubmitted Pfizer Head of Global Automation Engineering talks industrial cybersecurity as a story · 1 points
HN discussion
