Singapore cyber agency urges stronger defences after fridge cyberattacks in Europe

Singapore's cybersecurity agency has called for enhanced protections following a string of cyberattacks on refrigeration systems in Europe. The incidents, which have not been reported in Singapore, highlight the potential risks to various sectors relying on internet-connected operational technology (OT) systems. These include energy, utilities, water treatment, manufacturing, building management, cold storage, logistics, and healthcare facilities.

According to the Cyber Security Agency of Singapore (CSA), poorly secured remote access to OT systems can enable attackers to manipulate equipment settings, disrupt operations, and pose safety risks. The agency advises organizations to keep remote management interfaces off the public internet and strengthen access controls. This includes changing default passwords, using strong unique passwords, and enabling multi-factor authentication where supported.

Organizations should also consider using secure solutions such as virtual private networks (VPNs), restricting access to authorized personnel and trusted service providers, and implementing network segmentation and security monitoring. The CSA recommends reviewing and updating OT systems and devices, implementing appropriate safeguards or replacement plans for equipment reaching the end of its life, and having robust incident response plans in place.