Security

Code-of-the-Day Password

A hidden authentication mechanism in which a device accepts a password derived from the current date or time, usually intended for vendor support access. Because the algorithm is shared across every unit, anyone who recovers it can log in to the entire installed base, as with CVE-2025-41450 in Danfoss AK-SM 8xxA controllers.

Deep dive

Learn Article

How a Refrigeration Controller's Web Interface Becomes a Physical-Damage Attack Surface

Supervisory refrigeration controllers are small Linux web servers with authority over compressors, defrost cycles and alarms. Here is what an attacker gets from one, and why.

intermediate 6 min read

Back to glossary