<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:webfeeds="http://webfeeds.org/rss/1.0"><channel><title>Incident - CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/tags/incident/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata. Fed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Tue, 10 Nov 2026 09:37:27 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/tags/incident/feed.xml" rel="self" type="application/rss+xml"/><image><url>https://feed.craftedsignal.io/favicon-32x32.png</url><title>CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/</link><width>32</width><height>32</height></image><webfeeds:icon>https://feed.craftedsignal.io/favicon.svg</webfeeds:icon><item><title>Shahid Kaveh: Sabotage of Industrial Refrigeration Controllers in France</title><link>https://feed.craftedsignal.io/briefs/2026-11-iran-refrigeration-sabotage/</link><pubDate>Tue, 10 Nov 2026 09:37:27 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-11-iran-refrigeration-sabotage/</guid><description>The French government has attributed a cyberattack on approximately 700 retail sites to the Iranian IRGC-affiliated unit "Shahid Kaveh." The attackers manipulated refrigeration controllers to cause food losses and fires.</description><content:encoded><![CDATA[<p>In October 2026, a cyberattack targeting about 700 French retail sites resulted in food losses and at least 20 fires. The attackers gained remote control of Danfoss and Dixell refrigeration controllers via web interfaces. They initiated abnormal, unlimited defrost cycles and disabled safety temperature alerts. The French government attributed the attack to the &quot;Shahid Kaveh&quot; unit of Iran's Islamic Revolutionary Guard Corps (IRGC). The incident is also linked to reconnaissance targeting Schneider Electric equipment at small hydroelectric installations in France.</p>
]]></content:encoded><category domain="severity">high</category><category domain="type">threat</category><category>industrial-sabotage</category><category>ics</category><category>nation-state</category><category>incident</category></item></channel></rss>