US Government Warns Critical Infrastructure Operators to Harden Cooling Systems Amidst European Attacks
The U.S. government has issued an urgent warning to critical infrastructure operators to secure their cooling systems following recent cyberattacks that disrupted operations in European supermarkets.
The U.S. government has issued a stark warning to critical infrastructure operators, urging them to immediately safeguard their cooling systems. This advisory comes in the wake of recent cyberattacks that have caused significant disruptions to operations in European supermarkets, leading to potentially millions of euros in spoiled food.
The Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and other federal agencies released the joint alert, highlighting the widespread use of cooling systems that rely on automated and remote monitoring. These systems are crucial for sectors including healthcare, transportation, food, and chemicals, managing temperatures, defrost cycles, and energy optimization.
According to the advisory, malicious actors could exploit vulnerabilities in unpatched or internet-accessible controllers. By remotely altering settings, attackers can force cooling units into continuous heating and defrost cycles, which can result in extensive inventory loss and create equipment hazards. The agencies emphasized that such attacks could have severe consequences for the continuity of essential services.
To mitigate these risks, federal officials have recommended several immediate defensive measures. These include implementing strong authentication protocols, ensuring all systems are kept updated with the latest security patches, identifying and securing any systems accessible from the internet, removing unnecessary remote access, and securing any essential remote access points.
The warning follows a series of incidents, including the tampering of cooling unit controls at three French national blood banks earlier this week, though a direct link to the supermarket attacks is not yet confirmed. Additionally, in August, freezers and refrigeration units at several U.S. military commissaries unexpectedly switched into defrost or heating modes, the cause of which is still under investigation.
While no group has claimed responsibility for the recent European attacks, authorities are on high alert for potential hybrid threats to critical infrastructure, particularly given the ongoing geopolitical tensions. The Kremlin has consistently denied any involvement in such operations.
This advisory underscores the growing threat landscape targeting operational technology (OT) and industrial control systems (ICS). The interconnected nature of modern infrastructure means that vulnerabilities in seemingly isolated systems, like cooling units, can have cascading effects across multiple sectors, impacting supply chains and essential services.
Operators are urged to treat this warning with the utmost urgency, as the potential for widespread disruption and economic damage is significant. Proactive security measures and rapid patching are critical to defending against these evolving threats.