CERT-FR
French national computer Incident Response team within ANSSI.
CERT-FR published a review on 20 October of nearly 200 web-application data breaches tracked in 2025, finding that many required only low-complexity attacker actions rather than a software vulnerability.
Last refreshed: 22 October 2026
Can CERT-FR turn two October warnings into safer French systems?
Timeline for CERT-FR
Warned about the PHP flaws
Cybersecurity: Threats and Defences: PHP2Shell: no fix for PHP 8.1 and olderPublished a review of nearly 200 web-application breaches
Cybersecurity: Threats and Defences: CERT-FR reviews nearly 200 web breachesIssued alert ALE-012 and named the compromised controllers
Cybersecurity: Threats and Defences: Fridge hack spoils food across EuropeBackground
CERT-FR is France's national computer Incident Response team and sits within ANSSI, the country's information-security agency. It publishes alerts and analysis that help French organisations understand active attacks and recurring weaknesses.
On 12 October 2026, CERT-FR named Danfoss and Copeland refrigeration controllers after attackers forced supermarket systems into defrost mode across seven European countries. France suffered most of the damage, and many affected controllers were at the end of their supported life.
On 20 October, the team published a review of nearly 200 web-application data breaches it had tracked during 2025. Many required no technical vulnerability and involved only low-complexity attacker actions. The finding broadens CERT-FR's warning beyond patch management: software updates matter, but basic web-application controls also determine whether simple attack methods succeed.
What is CERT-FR?
Who does CERT-FR help?
What did CERT-FR say about the refrigeration controller attacks?
What did CERT-FR find in its web-application breach review?
Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.