For awareness Medium Check exposure in your normal cycle
First known cyberattack on a cooling system in Switzerland reported
blue News (via Google News)building automation
What happened. A news report says a cooling system in Switzerland was hit by a cyberattack, the first known case there. The report gives no details on the system, the attacker or the impact.
Who is affected. The source does not say which organisations are affected. It points to building automation such as cooling systems.
What to do. Check whether cooling and building-control systems at your sites are reachable from the internet or the corporate network, and restrict that access.
When to act. For awareness: no sign it reaches your site
Editor's reading
Forasset ownerOT security lead
- Purdue level
- L2
- L1
Why: Cooling systems are usually run by building controllers (L1) and their supervisory screens (L2), but the report does not give details.
- Are you exposed?
Review your inventory for cooling and building-automation controllers and check whether any are reachable from the internet or the office network.
- If you cannot fix it yet
- Take building and cooling controllers off the internet and put them behind a firewall.
- Limit remote access to named users and require multi-factor authentication.
- Watch for
- Look for logons or connections to cooling or building-control systems from unfamiliar addresses.
- Look for unexpected changes to temperature setpoints or alarm settings.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: blue News (via Google News) (opens news.google.com)
More on Building automation