I’m constantly amazed at how little information security is taken seriously. Most organisations’ security posture is “It won’t happen to us”.
The reason most services/sites/connected thingamajigs haven’t been hacked isn’t because they’re secure, but because nobody with bad intentions has found them interesting enough to bother with.
Yesterday, another batch of commercial refrigerators across Europe were accessed and set to defrost, creating puddles of wasted food everywhere. These were, at least in part, the same Danfoss models that were compromised a few weeks ago in France.
The minute the first ones in France were “hacked” (not really, you could just log in freely from the open internet), every supermarket out there should have immediately run an audit across all their systems. Or, you know, at least disconnected them from the internet. I assume they work without an internet connection, unless they defrost every time their connection goes down in which case we have a bigger problem than security.
Ahold-Delhaize were victims of a cyberattack just recently, you’d think they’d have run an audit after that. Yet, they got caught again.
So, now that we’ve, once again, learned the folly of connecting vital equipment to the internet I’m sure this will never happen again… right?
Maybe not. Take a look at these random systems left open to the internet. The second one I was shown was a shop refrigerator in Switzerland.
Colin