Plan ahead High Check your exposure
Brenner Base Tunnel company reported hit by cyberattack
RailFreight.com (via Google News)transport
What happened. reports that the company behind the Brenner Base Tunnel was hit by a cyberattack. It says this came weeks after an attack on a Fehmarnbelt contractor. The report gives no further details.
Who is affected. The Brenner Base Tunnel company and the transport sector. The source does not say which other organisations are affected.
What to do. Brief your team on the report and review how contractors and tunnel or rail project partners connect to your networks.
When to act. Plan ahead: Transport operators: two linked organisations were hit; review contractor and remote access before your next window.
Editor's reading
ForOT security leadIT securityleadership
- Purdue level
- L4
Why: The report does not say what was hit. Company-level attacks usually start in office IT (L4), so that is the level shown.
- Are you exposed?
Check which contractors and project partners have remote or network access to your rail or tunnel systems, and how that access is controlled.
- If you cannot fix it yet
- Review and limit contractor access to site and project networks, with multi-factor authentication on every remote path.
- Separate project and office IT networks from operational systems with a firewall.
- Watch for
- Logons to operational systems from contractor or office IT accounts outside normal hours.
- Unexpected new remote-access tools or outbound connections from project networks.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: RailFreight.com (via Google News) (opens news.google.com)
More on Transport