Technology1 min read

Singapore cyber agency urges stronger defences after fridge cyberattacks in Europe

By · Published by Everything Blog

In short

Recent overseas disruptions targeted internet-accessible cooling controllers across hundreds of grocery stores and French blood facilities, exposing critical physical operations to digital manipulation. Attackers exploited publicly accessible remote interfaces, default login credentials, and outdated software to adjust operational thresholds and suppress warning alarms. Singaporean authorities are urging domestic operators in manufacturing, energy, and cold-chain logistics to eliminate public-facing access and prepare manual fallback procedures.

Key points

  • Non-traditional industrial targets like cold storage logistics, healthcare, and water tre…: Non-traditional industrial targets like cold storage logistics, healthcare, and water treatment are increasingly susceptible to severe operational disruptions.
  • Organisations must remove operational technology management interfaces from the public in…: Organisations must remove operational technology management interfaces from the public internet and restrict remote system management to authorized staff.
  • Essential risk mitigation requires implementing virtual private networks, enforcing multi…: Essential risk mitigation requires implementing virtual private networks, enforcing multi-factor authentication, segmenting operational networks, and maintaining manual operational controls.

Sources checked by our analysis pipeline: 1

No similar attacks have been reported in Singapore, but firms are urged to keep remote management interfaces off the public internet and strengthen access controls.

SINGAPORE: Organisations in Singapore have been urged to strengthen their cybersecurity defences following a series of overseas cyberattacks targeting operational technology (OT) systems, including refrigeration systems at hundreds of supermarkets across Europe.

While no similar incidents have been reported locally, organisations should not wait for an attack to occur before taking precautions, Commissioner of Cybersecurity and Cyber Security Agency of Singapore (CSA) chief executive Gwenda Fong said on Friday (Nov 6).

“They remind us that even sectors which may not traditionally consider themselves cyber targets can be vulnerable,” Ms Fong said.

“And the consequences can go beyond data loss — potentially disrupting business operations, supply chains and essential services.”

In an advisory on Friday, CSA said poorly secured remote access to OT systems could allow attackers to manipulate equipment settings, disrupt operations and pose safety risks.

The advisory cited recent attacks on refrigeration management systems at supermarkets across Europe, as well as an incident affecting…

Technology