ThreatPaper

IoT Security

2 cases

Overnight on October 11-12, 2026, attackers abused the defrost function of internet-exposed Danfoss controllers at hundreds of French supermarkets, pinning setpoints near 50C and stretching cycles to eight hours to delay alarms - spoiling stock and sparking fires.

OT & Industrial SystemsIoT Security

A viral October 2026 X post showed a Keurig K-Supreme SMART logging 1,008 GB of 'upload' in 10 days. The poster clarified the traffic stayed on his home LAN, not the internet — no exfiltration, no spying, likely a network-stack bug.

IoT Security