In brief
European Union cybersecurity agencies warned that a series of incidents on 1–2 November targeted refrigeration systems, calling for rapid action and compliance with the NIS2 directive and the EU Cyber Resilience Act. The alert, issued by ENISA, the Commission, Europol’s EC3 and others, advises manufacturers to report severe incidents through the Single Reporting Platform and to adopt secure‑by‑design principles. Member states are monitoring the situation and exchanging information as the new regulatory requirements take effect next year.
On 5 November, European Union cybersecurity authorities issued a warning after a new wave of cyberattacks hit refrigeration systems on 1–2 November. The alert was issued jointly by ENISA, the European Commission, Europol’s European Cybercrime Centre, the EU CSIRTs Network and the EU‑CyCLONe network.
Officials said the incidents are part of a broader trend that puts critical infrastructure at risk. They urged organisations to act immediately to reduce exposure and to consult the latest security advisories released by national teams and listed by ENISA.
Under the EU Cyber Resilience Act, hardware and software makers have been required since 11 September 2026 to report severe incidents and actively exploited vulnerabilities via the Act’s Single Reporting Platform. The Act’s main requirements, covering secure‑by‑design, lifecycle support and rapid vulnerability response, will take effect on 11 December 2027.
Companies already covered by the Network and Information Security Directive (NIS2) must implement cyber risk‑management measures and report significant incidents to the relevant national authorities or CSIRT teams.
ENISA highlighted that it is promoting secure‑by‑design and secure‑by‑default principles through technical advisories, guidance and information‑sharing initiatives aimed at strengthening cybersecurity across the bloc.
Member states are investigating the incidents, providing guidance, and continuing to exchange information and monitor developments with crisis management authorities.
