Singapore agency advises firms to tighten security on remote OT systems after European fridge hacks
The Cyber Security Agency of Singapore warned that poorly secured remote access to operational technology, such as refrigeration controllers, could be exploited, and issued recommendations for stronger safeguards.
Singapore's Cyber Security Agency (CSA) has urged organisations to bolster cybersecurity for operational technology (OT) systems after a wave of attacks on refrigeration controllers at supermarkets across Europe. While no similar incidents have been reported locally, CSA Commissioner Gwenda Fong said firms should not wait for an intrusion before acting.
"They remind us that even sectors which may not traditionally consider themselves cyber targets can be vulnerable," Fong said.
The agency's advisory highlighted that insecure remote access can allow attackers to alter equipment settings, disrupt operations and create safety hazards. Recent incidents involved refrigeration management systems in European supermarkets and at France's national blood service, where controllers were exposed to the internet.
CSA, in coordination with the Singapore Food Agency and supermarket operators, identified common weaknesses such as default credentials, outdated software and insufficient access controls. It recommended restricting internet exposure of remote management interfaces, using strong and unique passwords, deploying VPNs, enabling multi-factor authentication, segmenting networks and maintaining up-to-date firmware.
The agency also advised reviewing end-of-life equipment, establishing incident response plans that can isolate compromised systems, and ensuring critical operations can switch to local or manual controls if needed.
The European incidents, which affected retailers in multiple countries and prompted warnings from the United States, underscored the broader risk to sectors like energy, water treatment, manufacturing, logistics and healthcare that rely on internet-connected OT devices.