Threat IntelligenceEmerging Threats

DoD Refrigerator Outages Spark Hacking Fears

Analyst 207||Source: Schneier
Refrigerated case with doors ajar, shelves stocked with food and drinks, digital display blank or out of focus.

"possible refrigeration disruption at some Defense Commissary Agency commissaries," said a defense official who was not authorized to comment publicly and spoke on the condition of anonymity.

Bases that have posted notices

Announcements made online by individual installations list a set of Defense Commissary Agency stores that have experienced refrigeration problems. The bases named in those posts are Fort Irwin, Calif.; F.E. Warren Air Force Base, Wyo.; Fort Huachuca, Ariz.; Naval Station Newport, R.I.; Columbus Air Force Base, Miss.; and Travis Air Force Base, Calif.

Separately, Naval Air Station Lemoore, Calif., was reported to have experienced an outage by M. Elizabeth, writer of the Substack newsletter Signal and Silence.

What military services and the Pentagon told reporters

When asked how many bases are affected, each service declined to answer and referred all questions to the Defense Department. Pentagon officials did not respond to questions, according to the reporting.

The Defense Department acknowledgement

Although the services sidestepped direct counts, a defense official — anonymous and not authorized to speak publicly — told reporters the department is aware of a "possible refrigeration disruption at some Defense Commissary Agency commissaries." The official's remark is the department's only acknowledgment reported so far.

What this means for technologists, the Defense Department, and commissary managers

  • Technologists and security teams: The coincident nature of outages across multiple commissaries will prompt investigation into common points of failure cited in the announcements. Security teams will want to track official updates from installations and the Defense Department.
  • The Defense Department and installation leaders: With each service referring questions to the department and Pentagon officials not responding publicly, departmental communications and incident coordination are central — the anonymous acknowledgement is the only reported confirmation to date.
  • Commissary managers and patrons: Installations that posted online announcements have already signaled service interruptions at specific commissaries; managers will need to manage perishable inventory and inform consumers as the department clarifies cause and scope.

Closing observation

Public notices from six installations and an independent report of an outage at another installation, combined with an anonymous departmental acknowledgement of a "possible refrigeration disruption," form the record available at this hour. The services have deferred detailed questioning to the Defense Department, and Pentagon officials have not issued a public response beyond the anonymous statement. Until the Defense Department provides a fuller account, the scope and cause of the disruptions remain unconfirmed.

Original reporting: Is Someone Hacking DoD Refrigerators?

DodEmerging ThreatsNation-StateNational SecuritySupply ChainUSAMilitary InfrastructureDefense Commissary AgencyRefrigerator OutagesHacking Fears
Related Intelligence

Continue Reading

Blurred laptop on airport security counter amidst muted colors.

Mirage Kitten Unveils Node.js Malware Targeting Aviation, FinTech

Kaspersky's threat research uncovered a sneaky Node.js malware campaign targeting aviation and FinTech organizations in the Middle East and Africa, with victims initially tricked by fake job offers on LinkedIn. The malware, known as NodeRabbit, was delivered through cleverly disguised coding-challenge archives.

Analyst 207
Empty tech company data center with servers and workstation in foreground.

Threat Actors Exploit METR API Key, Drain $600,000 in AI Credits

A staggering $600,000 in AI credits vanished in a flash when an unknown attacker exploited a stolen API key, infiltrating a publicly accessible experiment and racking up a massive bill that was thankfully waived by the model provider. The shocking breach happened after a researcher inadvertently left an EC2 instance exposed, despite having Google authentication in place.

Analyst 207
Security researcher examines code on laptop amidst cluttered workspace.

Russia-Aligned Hackers Inject Nuclear Prompt to Evade AI Analysis

Hackers have found a sneaky way to outsmart AI-powered security tools by injecting a provocative phrase, like a threat to create a nuclear weapon, into malicious code to disable analysis. This clever trick, dubbed GuardBreaker, tricks AI scanners into failing to examine the rest of the script.

Analyst 207
ATM machine with front panel open in a bank lobby.

Venezuelans Plead Guilty to ATM Jackpotting Attacks

Meet the five Venezuelan nationals who just pleaded guilty to orchestrating a string of daring ATM jackpotting attacks across the US, using malware to target vulnerable machines and make off with the cash. Their clever - but ultimately doomed - scheme involved installing malware in ATMs, but surveillance caught them in the act, leading to their arrest and guilty pleas.

Analyst 207