iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The reported “$6 hack” was not a cheap device or an automatic way into every supermarket. Cybernews said Claroty researchers spent approximately six dollars on AI usage to reproduce known Danfoss refrigeration-controller vulnerabilities in a laboratory, using public firmware, published vulnerability details and analysis tools. The reproduction took 28 minutes; Claroty separately described an AI coding agent reaching firmware-to-root control in roughly 30 minutes. That demonstrates a lower cost for exploiting known flaws, not proof that criminals used the same AI workflow in France or that every store is exposed.
What the $6 figure actually represents
The amount refers to approximately $6 in consumption of an AI service during a controlled reproduction. It is not the price of a physical hacking device, a subscription that compromises stores automatically, or the total cost of a real-world intrusion.
Claroty Team82 researchers supplied an AI coding agent with publicly available Danfoss firmware, vulnerability information and tools for firmware analysis. Cybernews reported that the reproduction took 28 minutes. Claroty’s own account described firmware-to-root control in about 30 minutes. In this context, “root” means the highest level of control over the embedded system used in the laboratory; it does not by itself mean that a supermarket’s compressors or freezers were physically damaged.
Free tools Windows power users keep installed
One-click scans. No signup required.
Amir Zaltzman of Claroty summarized the risk: “Even a relatively modest AI coding model, paired with publicly available vulnerability information, accessible firmware, and analysis tools, can reproduce known vulnerabilities in minutes for just a few dollars.” The important security change is the reduced time and expertise needed to turn already-disclosed flaws into a working exploit.
#1 Best Overall
- Convenient and practical: Our refrigerator thermometer is suitable for traditional refrigerators, freezers, insulated boxes, etc. It has a large dial with clear blue and red area indication on the surface of the fridge thermometer, making it easier for you to read the temperature.
- Temperature range: Refrigerator thermometer measures refrigerator temperature -20~80 °F/ -30~30 °C, meeting different requirements and requirements. Clear reading scale helps you measure food stored at the right temperature to ensure safety.
- Exquisite design: The refrigerator thermometer uses a hook type panel design, can be hung or placed in different positions, reading instant with the mechanical design, no need for battery power with our freezer thermometer.
- Durable material: Refrigerator thermometer is made of stainless steel material, not easy to break, long life, durable, easy to clean structure and glass protective lens, very suitable for use in the refrigerator and freezer.
- What you get: 2 x PECULA Refrigerator Thermometer and our 7*24 friendly customer service for peace of mind.
Which refrigeration controllers were affected?
Claroty’s primary disclosure concerns the Danfoss AK-SM 800A family. The disclosure identifies three vulnerabilities. Customers operating these controllers should install firmware R4.3.1 or later and follow current Danfoss security advisories.
| Identifier | Issue | Potential effect | Severity information |
|---|---|---|---|
| CVE-2025-41450 | Authentication bypass | Can allow an attacker to get past the controller’s normal login barrier. | CVSS v3 8.2, according to Claroty Team82’s 2026 disclosure. |
| CVE-2025-41451 | Command injection in alarm-to-mail configuration | After authentication, an attacker can inject commands and potentially obtain remote code execution. | CVSS v3 7.6, according to Claroty Team82’s 2026 disclosure. |
| CVE-2025-41452 | Post-authenticated configuration-setting denial of service | Can disrupt the controller by tampering with configuration settings after authentication. | CVSS score not stated in the cited disclosure. |
Claroty also reported that researchers could scan for controllers exposed to the internet, identify firmware versions and communicate with the embedded web application. Exposure and patch status therefore matter as much as the model name: an AK-SM 800A that is isolated and updated presents a different risk from an outdated unit with its management interface reachable from the public internet.
Rank #2
- Digital Thermometers: Includes one refrigerator thermometer and one freezer thermometer that transmit readings to the digital display
- Easy-to-Read LCD Display: Comes with magnetic backing for fridge mounting, a keyhole for mounting on a wall, and a foldout stand for countertop placement
- Customizable Temperature Alarms: Be alerted to temperature spikes caused by mistakenly leaving the fridge or freezer door open or a failing appliance
- Multipurpose Silicone Sensor Straps: Can be used with the included suction cups or wrapped around a wire shelf inside the fridge or freezer
- Modern Stainless Steel Finish: Fits and looks great in any kitchen
How a compromised controller could affect a store
Refrigeration controllers are operational-technology systems. They regulate temperatures, defrost cycles, alarms and related equipment, so a configuration change can become a physical and commercial problem quickly.
- Discovery: An attacker searches for management interfaces that are reachable from the internet and fingerprints the controller and firmware.
- Access: A vulnerable authentication path, such as the disclosed bypass, may remove the expected login barrier. Other flaws require the attacker to be authenticated first.
- Control: Command injection or configuration manipulation can change settings, disable service or execute commands on the embedded system.
- Operational impact: Incorrect temperature or defrost values can spoil chilled or frozen products, trigger alarms, interrupt trading and require emergency recovery.
This chain is a risk scenario, not a claim that every supermarket can be taken over. An attacker still needs a reachable, vulnerable device or another route into the management network, and stores may have network controls that block the path.
Rank #3
- Smart 3-Way Alerts & Remote Temperature Monitoring：Get instant app notifications, email alerts, and buzzer alarms when temperatures exceed your preset range, with 24/7 remote monitoring for complete protection.
- High-Precision Temperature Sensor：Features an ultra-sensitive 2.7mm NTC probe with ±0.9°F/±0.5°C precision, and a 2-second response time for real-time monitoring across a wide -40°F to 158°F (-40°C to 70°C) range.
- Built-In 80dB Audible Alarm：This freezer thermometer with alarm features a buzzer alarm to provide loud, instant alerts when temperatures go out of range - suitable for busy families with children or when immediate response is needed.The alarm requires pressing the button on the side of the device to turn it off, or the buzzer can be set to mute.
- Whole-Home Temperature Management：A single gateway supports up to 10 sensors within a range of up to 230ft (70m), allowing remote thermometer centralized monitoring of multiple fridges/freezers/rooms simultaneously.
- Quick & Easy Installation：This refrigerator thermometer features a magnetic/hanging design with an included probe holder for neat cable management - set up in just 5 minutes with flexible placement options.
What was reported in France in October 2026?
Associated Press reported that attacks disrupted refrigeration at about 700 of France’s 10,000 supermarkets. French Finance Minister Roland Lescure said the incident “touches the heart of our food security.” The government said there was no national food-supply risk, but stores experienced food losses and operational disruption. The approximately 700-store figure is a report from the incident period, not a final independently confirmed victim count.
AP placed the Danfoss system alongside Copeland XWeb Pro in a wider refrigeration-control security problem. A later report by Le Monde described a smaller incident involving Dixell equipment. That account said attackers changed defrost and temperature-regulation settings, including an attempted frozen-goods target of 150 degrees. Such a value is an example of destructive or nonsensical configuration manipulation, not a normal operating setting.
Rank #4
- Continuous Updates: We have fixed the problem of frequent low temperature alarms. There will be no false alarm when low temperatures (<-4°F) are detected during normal operation of the freezers compressor. The software usage experience will be continuously optimized.
- 24/7 Instant Alarms: Set preset temperature ranges, and the WiFi freezer thermometer will alert you via app when the temperature rises or drops outside of the range. The freezer temperature alarm ensures a stable connection to maintain food and equipment safety. (2.4Ghz WiFi Only)
- Monitor Temperature Anywhere: Keep track of temperature data in real-time from anywhere with the GoveeLife's APP without subscription fee. The WiFi gateway supports pairing up to 10 sensors. And you need to connect to the gateway for APP remote alarm. If you need more freezer alarm sensors, please search ASIN:B0CLB3BTSG.
- Upgrade Accuracy Probe: The freezer temperature monitor's wide measuring range of -40° to 158°F with ±0.9°F / 0.5°C accuracy and 2s fast refresh to ensure the data is reliable. The probes and cables are slim and sturdy, allowing flexibility to fit in the refrigerator or freezer. Our fridge thermometers bring convenience to your life!
- Smart Anti-False Alarm: The anti-false alarm allows the freezer alarm to notify you after 1-10 mins of temperature overrun. Prevent falsely triggering the alarm when opening the refrigerator to take food. And it notifies to remind you to change the battery when it's low.
Public reporting has not established the complete operational exploit chain or attribution. There is no confirmed evidence that the French attackers used Claude, Claroty’s laboratory workflow or the same Danfoss vulnerabilities. The defensible conclusion is narrower: the laboratory result shows that publicly documented weaknesses can be reproduced cheaply and quickly, while the French events show why refrigeration systems deserve the same protection as other critical operational technology.
How supermarkets can reduce the risk
Operators should treat refrigeration management as a security boundary, not as an ordinary office application. The following sequence addresses the controls identified by the disclosures and incident reporting.
Quick Recap
Best Value
- Bigger screen, Better reading : This fridge thermometer has 2.56 inch electronic LCD display, the information on the screen can tell us the max, min and the current temperature at the same time. Powered by 3 Volt Model CR2032 Lithium Battery(Included). You can learn the accurate temperature info of your freezer room all the time
- Simple Operation: Simple electronic thermometer with only 3 buttons (at the back) . Just press the on or off button to switch the thermometer on/ off. Press °C/ °F button to select centigrade or fahrenheit. Once you reboot the thermometer, the max/ min temperature will be reset
- Widely Temperature Meauring Range: Accuracy ±2°F. Resolution: 0.2°F. The temperature can range from -4°F to 122°F and it is accurate. Allowing you to use this in the fridge, freezer. it can act the role of general thermometer for indoor or outdoor
- Portable Ways: You have 3 different choices for placing this indoor thermometer. Either use the stand to place it on the table-top, flip the stand over and use the hook to hang it on a refrigerator shelf, or adsorption to the adsorbable material using a magnetic back. Mini design and won't take too much places of your fridge
- IPX3 Waterproof: Waterproof structure (waterproof level IPX3) can resist the damp of the refrigerator or freezer room, make sure it is working in a safe and consistent manner
- Patch affected Danfoss systems. Verify whether each AK-SM 800A is running R4.3.1 or later. Apply the vendor’s current advisories and document the firmware version, date and person responsible for the change.
- Remove direct public exposure. Management interfaces should not be reachable from the open internet. Review firewall, router and remote-management rules for every store and central monitoring site.
- Use a trusted administration path. Restrict management to approved internal networks or a properly secured VPN. Limit accounts and permissions to the people and systems that need them.
- Segment operational technology. Keep refrigeration controllers on a separate network from ordinary corporate computers, guest Wi-Fi and internet-facing services. Segmentation limits the damage if an office account or workstation is compromised.
- Inventory legacy equipment. Record controller model, firmware, network location, support status and owner. Flag equipment that is end-of-life or no longer receives security updates, and plan compensating controls or replacement.
- Monitor changes, not just logins. Alert on temperature, defrost, alarm-to-mail and other configuration changes. A change that is unusual for the store, time of day or product category should trigger an immediate operational check.
- Prepare a safe recovery procedure. Keep known-good configuration backups, define who can place equipment in a safe operating mode, and rehearse how staff will protect stock while a controller is isolated or restored.
Laboratory reproduction versus a confirmed criminal intrusion
| Question | What is established | What remains unproven |
|---|---|---|
| Was the $6 result real? | Cybernews reported approximately $6 in AI usage for Claroty’s 28-minute laboratory reproduction; Claroty reported a roughly 30-minute AI-assisted path to firmware-to-root control. | It was not a purchase price for a hacking kit or proof of an automated supermarket attack. |
| Were Danfoss flaws involved? | Claroty disclosed three AK-SM 800A vulnerabilities and recommends R4.3.1 or later. | Public reports have not tied every French disruption to those CVEs. |
| Did AI cause the French attacks? | The incidents and the laboratory reproduction were reported separately. | No public evidence confirms that attackers used Claude or Claroty’s exact workflow. |
| How many stores were affected? | AP reported about 700 of France’s 10,000 supermarkets during the October 2026 episode. | The number may change as investigations continue and is not a final confirmed count. |
Questions operators should answer now
- Can any refrigeration-management interface be reached directly from the internet?
- Which controllers run firmware older than the vendor’s fixed release?
- Are refrigeration networks separated from corporate and guest networks?
- Who receives an alert when a temperature, defrost or configuration value changes?
- Can staff restore a known-good configuration and keep products safe while a device is investigated?
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
