Two consecutive waves of attacks signal that the retail industry needs to re-examine its security strategy for IoT devices and OT systems, including strengthening network isolation, implementing the principle of least privilege, and establishing real-time monitoring for abnormal temperature changes.