Singapore cyber agency urges stronger defences after fridge cyberattacks in Europe

The Singapore Cyber Security Agency (CSA) issued an advisory following overseas cyberattacks on operational technology (OT) systems, which are used to monitor and control physical equipment and industrial processes. These incidents, affecting refrigeration systems in European supermarkets and France’s national blood service, demonstrate that even sectors not traditionally viewed as cyber targets can be vulnerable to disruptions beyond data loss, potentially impacting supply chains and essential services.

The core vulnerability highlighted by the CSA stems from OT systems being increasingly connected to the internet or corporate networks for remote management. While this offers operational advantages, poorly secured remote access can leave these systems open to compromise. The European incidents reportedly involved poorly secured refrigeration controllers accessible over the internet, with potential weaknesses including weak or default credentials, outdated software, and insufficient access controls.

If attackers gain unauthorized access, they could manipulate equipment settings, disable safety alarms, or interfere with normal operations. This could lead to equipment damage, safety hazards, service disruptions, and financial losses. For industries dependent on cold-chain operations, such as food and healthcare, disruptions to temperature controls could compromise product safety. The Singapore Cyber Emergency Response Team (SingCERT) recommends restricting direct internet access to remote management interfaces, strengthening authentication with strong, unique passwords and multi-factor authentication, and using secure solutions like Virtual Private Networks (VPNs).