grep -rl "danfoss" ./articles
A second wave hit on the night of 1 November. The research underneath it is public and specific: a hidden daily password in a refrigeration controller, and 2,765 of them reachable from the internet.
Claroty pointed an AI coding agent at firmware it had already analysed and asked it to rebuild three disclosed exploits. It managed two, failed on the third, and needed a human to unstick it.
CERT-FR's alert names four product families across three vendors and not a single CVE. Claroty's research into the controllers was published in August and does not mention France or any attack. The link between them is an inference.