Threat video1:00
CVE-2026-21660 Frick Quantum Creds: Detection & IOCs
Frick Quantum HD firmware 10.22 and earlier stores email logins in plaintext: 9 detection rules, 9 IOCs and a free Splunk SPL rule cover it.
Read the full threat intel for CVE-2026-21660 Frick Quantum Creds: Detection & IOCs →
Chapters
- 0:00The hookHardcoded credentials in industrial refrigeration controllers.
- 0:05The storyCISA released its advisory.
- 0:11Attack pathClaroty reported hardcoded credentials in firmware.
- 0:27AttributionNo threat actor is attributed.
- 0:31Indicators of compromise3 indicators to hunt: 2 URLs and 1 file name.
- 0:37MITRE ATT&CK techniques5 ATT&CK techniques, from initial access to collection.
- 0:42Remediation3 steps now: Identify all Frick Controls Quantum HD controllers running firmware 10.22.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Hardcoded credentials in industrial refrigeration controllers.
0:05CISA released its advisory.
0:08Fix: upgrade to Unity v12.
0:11Claroty reported hardcoded credentials in firmware.
0:15An attacker could authenticate without alerting operators.
0:18Sensitive information could be exposed.
0:21CISA reports no known public exploitation of these.
0:27No threat actor is attributed. Confidence: low.
0:323 indicators to hunt: 2 URLs and 1 file name.
0:375 ATT&CK techniques, from initial access to collection.
0:423 steps now: Identify all Frick Controls Quantum HD controllers running firmware 10.22.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.