French prosecutors have opened a cybercrime investigation into the attack, which caused food losses and equipment damage.
Strand said connected devices often lack regular security patches, endpoint detection and response tools, and basic network protections.
He said the models involved in the French incident had reached end-of-life status between 2016 and 2021, leaving operators with limited options for addressing newly discovered vulnerabilities.
OT risks The precise entry point used in the French attack has not been publicly established.
Plank argued that connected equipment should verify both the origin of a command and whether the requested action falls within permitted operating limits.